Understanding ISO 22000 Certification

ISO 22000 certification establishes an enterprise-wide Food Safety Management System (FSMS) that aligns executive strategy with floor operations across the entire supply chain. This comprehensive standard integrates organizational governance with operational food safety controls, creating a unified framework for managing risks, maintaining regulatory compliance, and protecting consumers.

Understanding ISO 22000 requires looking beyond simple HACCP principles. The standard combines the high-level management structure of modern ISO standards with specific operational controls. This approach ensures top management directly owns food safety outcomes while line operators execute precise hazard controls on the processing floor.

What Distinguishes ISO 22000, HACCP, and FSSC 22000?

Choosing the right food safety framework determines how audit-heavy, expensive, and operational your system becomes. A common mistake among food manufacturers is seeking ISO 22000 when target buyers actually demand a GFSI-benchmarked scheme like FSSC 22000.

If your primary goal involves selling to global retail chains like Walmart, Tesco, or Carrefour, ISO 22000 alone usually will not clear vendor onboarding. These buyers require a GFSI-benchmarked certificate. However, ISO 22000 serves as the exact foundation you build on. Transitioning from ISO 22000 to FSSC 22000 requires only adding sector-specific Prerequisite Programs (ISO/TS 22002-1) and FSSC additional requirements covering food defense, food fraud mitigation, and equipment design.

How Does the Double Plan-Do-Check-Act (PDCA) Cycle Work?

ISO 22000:2018 operates on two distinct Plan-Do-Check-Act cycles running simultaneously across the business:

• Organizational PDCA (Clauses 4, 5, 6, 7, 9, 10): Covers business context, leadership accountability, resource allocation, internal audits, and management reviews. This layer forces executive leadership to own food safety rather than treating it as a siloed quality control function.
• Operational PDCA (Clause 8): Handles the physical processing floor. This layer embeds Codex HACCP principles into the operational flow, moving from basic sanitation to detailed hazard categorization.

How Do You Categorize PRPs, OPRPs, and CCPs?

The most frequent point of failure during certification audits involves confusing Prerequisite Programs (PRPs), Operational Prerequisite Programs (OPRPs), and Critical Control Points (CCPs). Improper categorization leads to over-monitoring unnecessary control points or under-monitoring critical hazards.

What Are Prerequisite Programs (PRPs)?

PRPs establish basic environmental and operational conditions necessary to maintain a hygienic environment throughout the food chain. These conditions apply facility-wide rather than tying to a specific process step. Examples include pest control, employee handwashing stations, equipment calibration schedules, and waste management. Teams verify PRPs through general hygiene inspections and environmental monitoring.

What Are Operational Prerequisite Programs (OPRPs)?

An OPRP represents a control measure identified by hazard analysis as essential for controlling the likelihood of introducing food safety hazards or the contamination and proliferation of hazards. Teams manage OPRPs via measurable or observable Action Criteria rather than strict numerical absolute limits. Examples include keeping cold storage temperatures below 4°C, conveyor belt sanitation between species shifts, and wash-water chlorination levels during raw salad washing.

If an OPRP breaches action criteria, operators evaluate the product for potential impact. This breach does not trigger an automatic statutory product recall or immediate product destruction.

What Are Critical Control Points (CCPs)?

A CCP is a specific step where applying control is essential to prevent, eliminate, or reduce a food safety hazard to an acceptable level. CCPs require strict, scientifically validated Critical Limits based on measurable parameters like time, temperature, pH, or physical aperture size. Examples include metal detector settings (1.5mm Ferrous / 2.0mm Non-Ferrous / 2.5mm Stainless Steel), pasteurization at 72°C for 15 seconds, and thermal processing retorts.

A breach of a Critical Limit means an automatic safety failure. Teams isolate, quarantine, and bar the affected product from release until completing a formal disposition assessment.

What Are the Steps in the Implementation Roadmap?

Achieving certification requires a structured implementation plan spanning 26 weeks:

Context, Scope & Food Safety Team Assembly (Weeks 1–4): Define organizational context, interested parties, and system boundaries. Establish a cross-functional Food Safety Team led by a qualified Team Leader with expertise across Quality, Engineering, Sanitation, and Operations.

PRP Baseline & Process Mapping (Weeks 5–8): Establish baseline PRPs aligned with relevant industry codes like the ISO/TS 22002 series. Map precise flow diagrams for all process steps and verify them on site under actual operational conditions across all working shifts.

Hazard Analysis & Control Measure Categorization (Weeks 9–14): Conduct hazard identification across biological, chemical, physical, allergen, and radiological threats for all raw materials, ingredients, packaging, and process steps. Categorize control measures into PRPs, OPRPs, and CCPs using validated decision trees.

System Documentation & Validation (Weeks 15–18): Draft the Hazard Control Plan covering OPRPs and CCPs, monitoring procedures, corrective action protocols, and product release criteria. Validate all control measures prior to implementation to prove they effectively control target hazards.

Execution, Monitoring & Verification (Weeks 19–22): Execute the system on the operational floor. Log monitoring data for PRPs, OPRPs, and CCPs. Conduct internal audits, traceability exercises through mock recalls, and management reviews to verify system effectiveness.

Certification Audits (Weeks 23–26): Undergo the Stage 1 readiness audit by an accredited certification body. Clear any identified gaps before completing the Stage 2 implementation audit for final certification issuance.

Why Do ISO 22000 Audit Projects Fail?

Auditor teams repeatedly flag four fundamental operational errors during evaluations:

• Paper-Bound Hazard Analyses: Purchasing pre-packaged HACCP plans or copying generic models creates major audit risk. If your hazard analysis lists generic biological hazards without specifying the exact organism (such as Listeria monocytogenes, Salmonella enterica, or Clostridium botulinum) and its specific control parameters, auditors issue major non-conformities.
• Over-designation of CCPs: Designating 15 CCPs in a facility indicates a poor understanding of PRPs and OPRPs. Excessive CCPs dilute operator focus, create audit risk, and lead to team burnout. Most single-line processing facilities effectively operate with 2 to 4 true CCPs.
• Conflating Monitoring with Verification: Monitoring happens continuously or in real time on the line, such as an operator checking a pasteurization temperature gauge every hour. Verification happens after the fact by a separate person to prove monitoring works, such as a QA supervisor reviewing and signing off on the pasteurization log. Combining these roles undermines system integrity.
• Poor Traceability & Mass Balance Testing: During the Stage 2 audit, auditors execute a surprise 4-hour mock recall. They pick a random raw material lot and demand tracking through production to finished goods alongside a complete mass balance reconciliation. If inventory records show 500 kg of raw material used but you only account for 420 kg of finished product and waste, the system fails.

What Should You Expect During Stage 1 and Stage 2 Audits?

The certification process splits into two distinct operational evaluations:

What Happens in a Stage 1 Audit?

The auditor reviews documented information, including hazard analyses, flow charts, OPRP/CCP determinations, validation records, and facility layout. This audit determines if your system shows enough maturity to move to Stage 2. You must complete at least one round of internal audits across all clauses and hold a formal Management Review before scheduling Stage 1.

What Happens in a Stage 2 Audit?

Conducted weeks after Stage 1, the audit team verifies whether floor operations match written procedures. They interview line operators, verify live CCP monitoring, check calibration tags, test emergency preparedness, and review corrective action logs.

How Do You Maintain the 3-Year Certification Cycle?

Once issued, an ISO 22000 certificate remains valid for 3 years. Maintaining validity requires passing annual Surveillance Audits during Year 1 and Year 2, followed by a full Recertification Audit prior to expiry in Year 3. Partnering with technical experts helps organizations streamline process documentation, train internal audit teams, and conduct gap analyses ahead of these accredited third-party audits.

FAQ’s