Management System Certification

ISO 22000 / FSSC 22000 – Food Safety Management System

HACCP discipline inside a certifiable management system, from farm to fork.

  • ISO 22000
  • Recognised internationally
  • Frequently certified

About ISO 22000

What is ISO 22000?

ISO 22000:2018 specifies requirements for a Food Safety Management System (FSMS) for any organisation in the food chain — growers, processors, packers, transporters, retailers, caterers, and the makers of food equipment, packaging and additives. It combines three things that are usually managed separately: the management system framework, prerequisite programmes (PRPs), and the HACCP principles of the Codex Alimentarius.

The 2018 revision introduced explicit two-level risk thinking — organisational risk at the business level and hazard-level risk at the process level — and clarified the distinction between operational PRPs and critical control points. It also strengthened requirements for the control of externally provided processes and for traceability and recall capability, which must be verified by test.

FSSC 22000 builds on ISO 22000 by adding sector-specific prerequisite programmes (the relevant ISO/TS 22002 part) and a set of additional requirements, producing a scheme recognised by the Global Food Safety Initiative. For organisations supplying international retailers and brand owners, GFSI recognition is frequently the actual commercial requirement, and ISO 22000 alone will not satisfy it.

Who needs this?

  • Food processing and manufacturing units, including contract manufacturers
  • Dairy, meat, poultry, seafood and ready-to-eat producers
  • Ingredient, additive, flavour and food-packaging manufacturers
  • Cold chain, warehousing and food logistics operators
  • Catering, institutional kitchens, QSR chains and cloud kitchens
  • Exporters required by overseas buyers to hold a GFSI-recognised certification

Why organisations certify

Key benefits of ISO 22000

What certification actually returns, stated specifically rather than generically.

Credibility

Certification proves your food safety controls were designed to Codex HACCP principles and are independently verified — the language every food buyer speaks.

Market Access

Organised retail, export buyers and e-commerce grocery platforms make FSMS certification a listing condition. FSSC 22000 opens the GFSI-gated tier above that.

Risk Reduction

Systematic hazard analysis, validated critical limits and verified recall capability reduce the probability and the cost of a contamination event or product withdrawal.

Operational Efficiency

Fewer holds, rejections and reworks; clearer shelf-life justification; less product written off because traceability could not isolate the affected lot.

Customer Trust

Consumer-facing brands are one incident away from lasting damage. Demonstrable food safety governance is reputational insurance.

Regulatory Compliance

The system aligns with FSSAI licensing and Schedule 4 requirements, giving you a single evidence base for regulatory inspection.

How it works

Our process for ISO 22000

Every stage has a defined purpose, a realistic duration and a stated output.

  1. 01

    Application & Quotation

    2–3 working days

    You submit an application form covering scope, headcount, sites and shift pattern. We review complexity, confirm audit-day allocation against accreditation rules and issue a fixed quotation.

  2. 02

    Contract & Audit Planning

    1 week

    On acceptance we appoint a lead auditor with verified technical competence for your sector, agree audit dates and share the audit plan in advance.

  3. 03

    Stage 1 — Readiness Review

    1 day (typical)

    A documentation and readiness assessment: scope confirmation, review of your management system documents, internal audit and management review evidence, and identification of anything that would block Stage 2.

  4. 04

    Stage 2 — Certification Audit

    2–5 days (scope dependent)

    On-site assessment of the system in operation. We sample processes, interview staff, examine records and raise findings graded as major, minor or opportunity for improvement.

  5. 05

    Corrective Action & Decision

    2–4 weeks

    You close out any nonconformities with root-cause analysis and evidence. An independent certification decision-maker — not the audit team — reviews the file and grants certification.

  6. 06

    Certificate Issue

    3–5 working days

    A three-year certificate is issued and your organisation is listed on our public certified-client directory for verification by your customers.

  7. 07

    Surveillance & Recertification

    Annual

    Surveillance audits at 12 and 24 months confirm the system remains effective. A full recertification audit is completed before the three-year expiry.

Preparation

Documents required

What we will ask to see. Having these ready before Stage 1 is the single biggest factor in a certification that runs to schedule.

  • Completed and signed application form
  • Certificate of incorporation / business registration
  • Organisation chart and scope statement
  • Management system manual or equivalent documented information
  • Documented processes, procedures and work instructions
  • Internal audit reports covering the full scope
  • Management review minutes
  • Records of corrective actions and continual improvement
  • Applicable legal and regulatory licences for your activity
  • Valid FSSAI licence covering the certified scope
  • Food safety policy and food safety team appointment
  • Product descriptions, intended use and process flow diagrams (site-verified)
  • Hazard analysis with PRP / OPRP / CCP determination and justification
  • HACCP plan with validated critical limits, monitoring and corrective actions
  • Prerequisite programme records: pest control, cleaning, personal hygiene, maintenance
  • Water potability and product test reports from a recognised laboratory
  • Traceability records and mock recall exercise report
  • Allergen management and labelling controls

Not sure whether your scope is right?

Scope is the single thing most often got wrong, and it appears verbatim on your certificate. We will review yours before you apply, at no charge — it costs us less than fixing it at recertification.

Talk to a specialist

Common questions

ISO 22000 — frequently asked questions

Direct answers, including where the honest answer is inconvenient for us.

HACCP is a hazard-control methodology, not a management system. ISO 22000 wraps HACCP inside a full management system with leadership, planning, competence, verification and improvement. FSSC 22000 is ISO 22000 plus the sector-specific ISO/TS 22002 prerequisite programme and additional scheme requirements — and unlike ISO 22000 on its own, it is GFSI-recognised.

Yes. A valid FSSAI licence covering the products and site in your certification scope is a compliance obligation. We verify it during Stage 1; an expired or scope-mismatched licence will block progression.

Yes. Traceability that has never been tested is an assumption. ISO 22000 requires verification of the traceability system, and we expect a documented mock recall with a stated timeframe, mass-balance reconciliation and a conclusion on effectiveness.

Yes. ISO 22000 covers the whole food chain including food service. The prerequisite programmes applicable to catering (ISO/TS 22002-2) differ from those for manufacturing, and the audit is scoped accordingly.

Question not answered here? Ask a certification specialist — we answer technical questions without requiring an enquiry first.

Talk to us

Talk to a certification expert

Tell us your scope and headcount and we will send a fixed quotation for ISO 22000 with the audit-day calculation shown.

  • Quotation within 2–3 working days
  • IAF MD 5 audit-day calculation included
  • Full three-year cycle cost, not just the first audit
  • Your details are used only to answer this enquiry

Including contractors and shift staff — this sets your audit days.

Tell us your scope, whether design is included, and any deadline you are working to.

Your details are used only to answer this enquiry. We do not sell or share them.

Next step

Ready to certify to ISO 22000?

We will scope it honestly, show you the calculation behind the price, and tell you plainly if the timeline you need is not achievable.