hello@sterling-grc.com +1 201 263 4443 New York ISO & GRC consulting in 60+ countries
SterlingInternational Consulting Talk to a consultantTalk to us
← ISO 22000 hub

ISO 22000 guide

ISO 22000 training: who needs what, and the competence evidence an auditor accepts

Clause by clause: ISO 22000:2018 requirements: every clause explained →

Awareness for everyone, role-based competence for the food safety team, CCP and OPRP monitors, cleaning, maintenance, warehouse and internal auditors, and the observation, assessment and records that prove the training worked on the line.

  • Updated September 2026
  • 8-minute read
  • Part of the ISO 22000 hub

Key points

  • ISO 22000 requires two different things: awareness for everyone who works under the organisation's control, and demonstrated competence for anyone whose work can affect food safety.
  • The food safety team, the people who monitor OPRPs and CCPs, and the internal auditors carry the heaviest competence burden, and they are the people auditors interview first.
  • A signed attendance sheet shows that someone sat in a room. Competence is shown by observation on the line, a tested assessment and records that are right when checked.
  • Training is only finished when its effect has been evaluated: fewer deviations, cleaner records, better answers at the point of work.

What ISO 22000 requires on training and competence

The short answer to who needs what: every person needs awareness, every role that touches a hazard needs competence for that role, and every one of those needs evidence that the competence is real. ISO 22000 places these requirements under clause 7, Support, in the provisions on people, competence and awareness. The standard prescribes no courses or hours: it asks you to decide the competence each role needs, close any shortfall, check that the action worked and keep evidence.

Food makes this harder than a general quality system: the standard expects a multidisciplinary food safety team, and much of the control happens in seconds at a line, where competence means doing the check correctly on the night shift with no supervisor watching.

Awareness: what everyone must understand

Awareness applies to all persons doing work under the organisation's control, which includes temporary staff, agency workers and contractors on site, not only employees on the payroll. At clause-title level, each of them should understand the food safety policy, the objectives relevant to their job, how their own work contributes to an effective system, and what happens when they do not follow its requirements.

That last point is where awareness sessions usually fall short. A packer who knows the policy wording but not that a missing allergen label can trigger a recall has not been made aware in any useful sense. Good awareness training links each daily task to a real consequence: a complaint, a hold, a recall, an illness. Keep it short, in the language people work in, and repeat it when products, allergens or lines change.

Role-based competence, from the food safety team to the warehouse

Competence is defined per role, written down once in a competence matrix and checked against each person. The roles below appear in almost every food plant; the detail for your site comes from your own hazard analysis.

Food safety team leader and team

The team builds and defends the hazard analysis, so it needs working knowledge of the HACCP methodology, hazard identification and assessment, the selection and validation of control measures, and the difference between PRPs, OPRPs and CCPs. The leader also needs to run the team, keep the system current and report to top management. The method itself is covered in our guide to the hazard control plan.

Line operators monitoring OPRPs and CCPs

These people generate the records the certificate rests on. They need to know what they measure, the critical limit or action criterion, how to use and check the instrument, how to record at the time of the check, and exactly what to do and whom to tell when a result is out of limits, including holding product.

Cleaning and hygiene staff, maintenance and warehouse

Cleaning teams need the cleaning and sanitation procedures, chemical handling and concentration checks, and allergen changeover cleaning with its verification. Maintenance staff need hygienic engineering practice: tool and part control, food-grade lubricants and a clean handback to production. Warehouse staff need storage conditions, stock rotation, segregation of allergens and non-food items, pest activity reporting and the traceability steps at receipt and dispatch. The programmes themselves are set out in our guide to prerequisite programmes.

Internal auditors

Internal auditors need audit technique and enough understanding of HACCP, PRPs and the hazard control plan to judge whether controls work, not only whether forms are filled in. They must not audit their own work. What the audit programme covers is the subject of the internal audit guide.

RoleWhat they needHow oftenEvidence of competence
Everyone under the organisation's controlFood safety policy, relevant objectives, their contribution, consequences of not conforming, personal hygiene rulesAt induction, then at set intervals and after significant changesTested awareness record, answers given on the floor
Food safety team leaderHACCP methodology, hazard analysis, validation, system management, team leadershipBefore appointment, then refreshed as the standard, products or law changeQualifications, a hazard analysis they can defend, review minutes
Food safety team membersHACCP principles, hazard assessment, their own technical fieldOn joining the team, then with each review of the hazard analysisContributions to studies, assessment results, experience records
OPRP and CCP monitorsLimits and criteria, instrument use and checks, recording, correction and holdBefore working alone, then re-assessed periodically and after deviationsSign-off after observed practice, accurate monitoring records
Cleaning and hygiene staffCleaning methods, chemical concentrations, allergen changeovers, verificationBefore working alone, then when chemicals or methods changeObserved cleans, swab and visual inspection results
MaintenanceHygienic engineering, tool and part control, handback after workAt induction, then with new equipmentHandback records, pre-start inspection findings
WarehouseStorage conditions, segregation, rotation, receipt checks, traceabilityAt induction, then on changes to products or storageReceipt records, traceability exercise results
Internal auditorsAudit technique, HACCP and PRP knowledge, independenceBefore first audit, then refreshed and reviewed after each programmeTraining plus observed audits, quality of reports

The frequencies are sensible practice, not requirements; the standard leaves intervals to you.

External experts: competence you borrow still has to be shown

Many plants rely on outside help: a microbiologist for validation studies, a pest control contractor, a laboratory, a consultant who sits in on the hazard analysis. ISO 22000 lets you use external expertise, but the organisation remains responsible for it. Where an external expert contributes to the development, implementation, operation or assessment of the system, keep an agreement or contract that defines that person's competence, responsibility and authority.

A pest control report accepted without anyone on site understanding it is a gap an auditor will find.

Why training records alone are not competence evidence

The standard requires evidence of competence, and a training record only proves that training happened. An auditor who finds a full attendance log beside monitoring sheets with identical readings, entries in the same pen for a whole shift or a metal detector challenge never recorded as failed will conclude that the training did not produce competence.

Stronger evidence combines three sources. The first is observation: a supervisor or team member watches the person perform the task, such as a CCP check or an allergen clean, and signs off against defined criteria. The second is assessment: a short practical or written test with a pass mark, kept with the record. The third is performance: the person's own monitoring records, swab results and deviation reports, which either confirm or contradict the sign-off.

How to evaluate whether training worked

Evaluating effectiveness is a requirement, and it is the step most often reduced to a feedback form. Ask instead whether the job is now done better. Useful measures include monitoring records with errors, deviations traced to human error, repeat hygiene findings and failed allergen changeover checks. Compare a period before the training with a period after it, and record the conclusion.

If the same error keeps returning, the fix may be the procedure or the instrument rather than more training.

How Sterling builds competence into the system

A competence matrix your auditor can test on the floor.

Sterling's expert and experienced consultants define the matrix with your food safety team, set observation and assessment criteria for every monitoring role, and hold the records in Effivity, included with the engagement, at no additional cost. You choose the level of support: Design™, guided, where your team does the work with our structure and coaching, or Drive™, managed, where our consultants carry the agreed consulting and documentation work with your process owners. We ensure successful certification for our clients; the certificate itself comes from the independent, accredited certification body you choose, because Sterling does not certify.

Book a free discovery call

Sterling Academy for the wider workforce

Sterling Academy e-learning reaches every shift with short lessons, checkpoints and a final exam, leaving a tested record rather than a signature; for doing roles, add the observed sign-off.

Sterling consulting clients benefit from preferential Sterling Academy course access and special pricing through their Sterling consultant, including complimentary awareness training for their people as part of the engagement.

Contact us about Academy access

ISO 22000 training: questions buyers ask

Does the food safety team leader need a formal HACCP qualification?

ISO 22000 requires demonstrated competence, not a named qualification. Customers, schemes or local regulators may ask for a recognised HACCP course, so check their requirements; either way, the leader must be able to explain and defend the hazard analysis to an auditor.

Do agency and temporary workers need the same training?

They need awareness and, if they carry out monitoring, cleaning or other controlled tasks, the same competence as permanent staff. Short contracts do not remove the requirement; they make a quick, tested induction more important.

How often should food safety training be refreshed?

The standard leaves the interval to you. Set it in the competence matrix by role and risk, and bring it forward whenever products, allergens, equipment, chemicals or the hazard control plan change, or when deviations point to a knowledge gap.

What competence records does a certification auditor usually ask for?

Typically the competence matrix, the records for a sample of people the auditor has just watched or interviewed, the food safety team's qualifications and experience, contracts for external experts and evidence that training effectiveness was evaluated.

Is an e-learning certificate enough for a CCP monitor?

It is good evidence of knowledge, but not of the task. For CCP and OPRP monitoring, pair it with an observed practical sign-off and check the person's own monitoring records over the following weeks.

ISO 22000 implementation

ISO 22000 requirements

Talk to a consultant

Build a food safety competence matrix your auditor can test on the floor.

Tell us your goals, locations and target date. We’ll help you define the scope, timeline and next steps.

hello@sterling-grc.com

+1 201 263 4443 (global headquarters) · your nearest office and its number are at the top of this page

What would you like to achieve?

Choose a starting point. The enquiry form takes about a minute.

Your goal
Book my free discovery call

Continue to the enquiry form to share your details. Please do not include passwords, sensitive personal information or confidential files. A Sterling consultant replies within one working day. Privacy notice