ISO 22000:2018 Food Safety Management System Certification
ISO 22000 combines HACCP principles with a management system and prerequisite programmes, giving retailers and exporters a single food safety framework they trust across the supply chain.
4.9/5 average client rating · 500+ engagements delivered
How ISO 22000 is structured
ISO 22000 layers three things: prerequisite programmes that maintain a hygienic environment, a HACCP-based hazard analysis that identifies where control is critical, and a management system that keeps the whole thing improving. The 2018 version added the Annex SL structure and separated risk at the organisational level from hazard at the operational level.
For retailer and export requirements you usually need FSSC 22000 — ISO 22000 plus sector-specific prerequisite programmes and additional requirements, which is the version recognised by the Global Food Safety Initiative.
- Prerequisite programmes: layout, utilities, waste, pest control, personnel hygiene, cleaning and sanitation
- Hazard analysis identifying biological, chemical, physical and allergen hazards at every step
- Critical control points with validated critical limits, monitoring, correction and corrective action
- Operational prerequisite programmes for hazards controlled but not at a CCP
- Traceability one step forward and one step back, with recall and withdrawal testing
- Emergency preparedness, food defence and food fraud considerations
Key facts
| Standard | ISO 22000:2018, with ISO/TS 22002 series prerequisite programmes |
|---|---|
| Related schemes | FSSC 22000 (GFSI recognised), HACCP, FSSAI Schedule 4 |
| Core method | Hazard analysis, CCPs, OPRPs and PRPs across the food chain |
| Typical timeline | 10–16 weeks |
| Applies across | The whole food chain: growers, processors, packaging, storage, transport, retail and food service |
What we implement
We work on the shop floor with your quality and production teams, validating controls against real process data rather than generic templates.
PRP gap survey
Facility, utility, hygiene, pest control, cleaning and personnel practice assessment against ISO/TS 22002.
Flow diagrams & hazard analysis
Verified process flow diagrams, hazard identification and significance assessment for every product category.
CCP & OPRP determination
Decision tree application, validated critical limits, monitoring methods and corrective action procedures.
Traceability & recall
Batch coding, forward and backward traceability, mock recall exercises with reconciliation within target time.
Allergen & fraud controls
Allergen matrix, cleaning validation, labelling verification, food defence and vulnerability assessment.
Verification programme
Sampling and testing plan, calibration, internal audit, product release criteria and management review.
Who needs certification
Anyone in the food chain, and increasingly anyone supplying into it — including packaging and logistics providers.
- Food processing and manufacturing plants, dairies and beverage producers
- Exporters needing GFSI-recognised certification for retailer acceptance
- Cold chain, warehousing and food logistics operators
- Central kitchens, catering, QSR chains and hospitality groups
- Food packaging, ingredient and additive suppliers
Export and retailer access
ISO 22000 and FSSC 22000 are accepted by international buyers who will not audit every supplier individually.
Recall risk reduced
Validated CCPs and tested traceability shrink both the probability and the cost of a recall event.
Less product loss
Systematic hygiene and process control reduce rejection, rework and shelf-life complaints.
FSSAI alignment
Schedule 4 requirements are mapped into the same system, so regulatory inspection and certification share evidence.
How the engagement runs
Diagnostic audit
Facility walkthrough, PRP assessment, document review and gap report against ISO 22000 and the target scheme.
Food safety team & PRPs
Team formation, PRP upgrade plan and infrastructure recommendations with cost and priority.
HACCP study
Flow verification, hazard analysis, CCP/OPRP determination, validation of critical limits and monitoring design.
Implementation & training
Hygiene training, monitoring records, mock recall, internal audit and verification activities.
Certification
Certification body coordination, Stage 1 and Stage 2 support and non-conformity closure.
What you receive
- FSMS scope, food safety policy and food safety team charter
- PRP gap assessment with infrastructure and hygiene upgrade plan
- Verified process flow diagrams and full hazard analysis
- HACCP plan with CCPs, OPRPs, validated limits and monitoring records
- Allergen management matrix, food defence and fraud vulnerability assessment
- Traceability procedure with mock recall exercise report
- Verification, internal audit, management review and certification support
ISO 22000 — frequently asked questions
FSSC 22000 is a certification scheme built on ISO 22000 plus a sector-specific prerequisite programme specification (ISO/TS 22002-x) and additional scheme requirements. FSSC is GFSI recognised, which is what large retailers and exporters usually demand; ISO 22000 alone is not.
No. ISO 22000 fully incorporates the Codex HACCP principles. Some buyers still ask for a HACCP certificate by name, and a certification body can usually issue both from the same audit if required.
FSSAI licensing is a legal requirement in India and Schedule 4 sets hygiene and food safety conditions. ISO 22000 is voluntary but covers Schedule 4 comprehensively, so certified sites usually clear FSSAI inspections with far fewer observations.
A simulated withdrawal where you trace a batch forward to customers and backward to raw materials, and reconcile quantities. Most schemes and buyers expect reconciliation within four hours; we run at least one full mock recall before certification.
Yes. The standard covers the whole food chain, including storage and distribution, with ISO/TS 22002-5 covering transport and storage prerequisite programmes. Cold chain operators are one of our most frequent scopes.
Still not sure what applies to you?
Ask an assessor directly — we answer scoping questions before anyone talks about a fee.
Get a realistic timeline and a fixed fee
A 30-minute call is usually enough to scope ISO 22000 accurately. You will leave with a timeline, an evidence checklist and a number — whether or not you engage us.