Standard · Current edition: ISO 22000:2018

ISO 22000 Certification

Food safety management systems

ISO 22000 combines HACCP principles with the structure of ISO management systems, for all organisations in the food chain. Certification demonstrates control of food safety hazards, from raw material to consumer.

Current edition
ISO 22000:2018
Intended for
All organisations in the food chain: producers, processors, storage, transport, distribution, retail, catering, packaging and ingredient manufacturers
Certificate validity
3 years, with annual surveillance audits
Integrates with
ISO 9001
Overview

What is ISO 22000

ISO 22000:2018 sets out the requirements for a food safety management system (FSMS) applicable to any organisation in the food chain, regardless of size or position in the chain. The standard integrates the HACCP principles defined by the Codex Alimentarius, prerequisite programmes (PRPs) and management elements within a structure common to the other ISO standards.

The key elements of the standard are interactive communication along the food chain, system management, prerequisite programmes and the HACCP principles: hazard analysis, determination of critical control points (CCPs) and operational prerequisite programmes (OPRPs), establishment of critical limits and action criteria, monitoring, corrections and verification.

ISO 22000 certification is recognised by customers, authorities and business partners as proof of a functioning food safety system and forms the basis for schemes such as FSSC 22000, required by major retailers.

Who it is for
  • Food and beverage producers and processors
  • Food storage, transport and distribution operators
  • Manufacturers of ingredients, additives and food contact packaging
  • Retail, catering, hospitality and contract catering
  • Suppliers that want access to the supply chains of major retailers and processors
Benefits

Benefits of ISO 22000 certification

01

Hazard control

Biological, chemical and physical hazards and allergens are identified and controlled through PRPs, OPRPs and CCPs.

02

Compliance with food legislation

Legal requirements on hygiene, traceability and labelling are integrated into the system.

03

Access to customers

Meeting the requirements of retailers and processors and a basis for FSSC 22000 certification.

04

Traceability and withdrawal

Tested procedures for product traceability, withdrawal and recall.

05

Fewer incidents

Fewer nonconformities, complaints and losses caused by unsafe products.

06

Integration with ISO 9001

Common structure for an integrated quality-food safety system.

Structure of the standard

Main requirements of the standard

The standard follows the high level structure (Annex SL) common to ISO management system standards, with its requirements set out in clauses 4 to 10.

  1. Clause 4

    Context of the organisation

    Relevant issues, interested parties in the food chain and the scope of the system (products, processes, sites).

  2. Clause 5

    Leadership

    Management commitment, the food safety policy, roles and responsibilities, including the food safety team.

  3. Clause 6

    Planning

    Risks and opportunities at system level, food safety objectives, planning of changes.

  4. Clause 7

    Support

    Resources, including infrastructure and work environment, competence, awareness, external and internal communication, documented information.

  5. Clause 8

    Operation

    Prerequisite programmes, traceability, emergency preparedness, hazard analysis, the hazard control plan (OPRPs and CCPs), monitoring, verification, control of nonconforming products, withdrawal and recall.

  6. Clause 9

    Performance evaluation

    Monitoring, measurement, analysis of verification results, internal audit and management review.

  7. Clause 10

    Improvement

    Nonconformity and corrective action, continual improvement and updating of the food safety management system.

Edition notes

Amendment 1:2024 on climate change

The organisation determines whether climate change (for example raw material availability, the cold chain, new hazards) is relevant for the food safety management system.

Relationship with FSSC 22000

FSSC 22000 is a GFSI-recognised certification scheme based on ISO 22000, the technical specifications for prerequisite programmes (ISO/TS 22002 series) and additional scheme requirements. ISO 22000 is the mandatory foundation of this scheme.

How It Works

The Certification Process

A clear and transparent process, from application to certificate issuance.

  1. 01

    Application and quotation

    Send us your organisation's details and the standard you are aiming for. We review your application and prepare a tailored quotation, including the audit duration and plan.

  2. 02

    Stage 1 audit

    We review your management system documentation and assess how ready your organisation is for the certification audit.

  3. 03

    Stage 2 audit

    The on-site audit checks that the system is implemented and effective against the requirements of the standard.

  4. 04

    Decision and certificate

    The certification committee reviews the audit report and issues the certificate, valid for 3 years.

Maintaining certification

Annual surveillance audits and a recertification audit at the end of the three-year cycle keep your certificate valid without interruption.

Certification Regulations
Frequently asked questions

Frequently asked questions about ISO 22000

Can't find the answer you are looking for?

Contact us
What is the difference between HACCP and ISO 22000?
HACCP is a method for identifying and controlling hazards, required by food legislation. ISO 22000 includes the HACCP principles and places them within a complete management system, with leadership, planning, communication in the food chain, performance evaluation and improvement, which can be certified by an independent body.
What are PRPs, OPRPs and CCPs?
Prerequisite programmes (PRPs) are the basic hygiene and infrastructure conditions. Operational prerequisite programmes (OPRPs) are control measures applied to significant hazards, with action criteria. Critical control points (CCPs) are steps at which essential control measures are applied, with measurable critical limits. The classification results from the hazard analysis.
Is ISO 22000 certification sufficient for major retailers?
It depends on the customer. Many retailers and processors require a GFSI-recognised certification such as FSSC 22000, which builds on ISO 22000. ISO 22000 certification is the basic step and is accepted by many customers as proof of a functioning food safety system.
What does the auditor verify on site?
The practical application of prerequisite programmes (hygiene, cleaning, pest control, maintenance), flow diagrams and hazard analysis, monitoring records at OPRPs and CCPs, verifications and validations, traceability and withdrawal exercises, allergen management, staff competence and internal audit results.
Related standards

Integrated certification

Standards that share the same structure can be implemented as one integrated system and audited together in a single combined audit, reducing total audit time.

Contact

Request a quote for ISO 22000 certification

Tell us a little about your organisation and the standard you are aiming for. We will come back to you with a quotation and a proposed audit schedule as soon as possible.

Working Hours
L-V: 09:00 - 18:00
Contact us