ISO 22000:2018 Safe Food, Every Step
ISO 22000 is the internationally recognized standard for Food Safety Management Systems (FSMS). It combines HACCP principles with management system requirements to help organizations identify, prevent and control food safety hazards at every stage of the food chain — from farm to fork.
2018
Current Revision
HACCP
Core Foundation
3 Years
Certification Cycle
Standard
ISO 22000:2018
Food Safety
Management System
Key Concepts
What is ISO 22000?
ISO 22000 is the international standard that specifies requirements for a Food Safety Management System (FSMS). It enables any organization directly or indirectly involved in the food chain to plan, implement, operate, maintain and update a system that provides safe products and services in accordance with their intended use.[reference:0]
The 2018 revision aligned the standard with ISO's High Level Structure (HLS), making it easier to integrate with other management systems like ISO 9001 and ISO 14001. It also clarified key concepts such as the two independent PDCA cycles — one covering the management system and the other covering HACCP principles.[reference:1]
Certification is issued by an accredited certification body after an audit verifying that your FSMS meets the requirements of the standard within a defined scope. GlobalQMS.in supports organizations throughout the preparation, implementation and audit-readiness journey.
Management System
Governance, policies, planning, support and continual improvement.
HACCP Principles
Hazard analysis, critical control points and operational prerequisite programs.
Who Can Implement ISO 22000?
All requirements are generic and applicable to organizations of any size and complexity across the food chain.
Who Needs ISO 22000?
Any organization involved in the food chain — directly or indirectly — that needs to demonstrate its ability to control food safety hazards.
Food Manufacturers
Processing units, packaging companies and food production facilities.
Food Service & Hospitality
Restaurants, cloud kitchens, catering services, hotels and event venues.
Cold Chain & Logistics
Transportation, warehousing and cold chain operators handling food products.
Retail & E-commerce
Supermarkets, grocery chains, food marketplaces and D2C food brands.
Agriculture & Farming
Farms, harvesters, feed producers and primary food production operations.
Packaging & Equipment
Suppliers of food contact materials, packaging, cleaning and disinfectants.
Benefits of ISO 22000 Certification
Beyond compliance, ISO 22000 creates real business value across safety, trust, operational efficiency and market access.
Consumer Safety
Systematic control of food safety hazards protects consumer health and builds trust.
Customer Confidence
Demonstrates commitment to food safety to buyers, retailers and regulators.
Market Access
Opens doors to export markets, large retailers and institutional buyers.
Regulatory Compliance
Aligns with statutory and regulatory food safety requirements across jurisdictions.
Reduced Wastage
Better process control reduces product loss, recalls and remediation costs.
Team Awareness
Clear roles and training improve food safety culture across the organization.
Key Concepts in ISO 22000:2018
Understanding these foundational concepts is essential for building an effective food safety management system.
Prerequisite Programs
Basic environmental and operational conditions necessary for safe food production — hygiene, sanitation, pest control, maintenance and personnel practices.
Operational PRP
Control measures applied to prevent significant hazards. OPRPs sit between broad PRPs and strict CCPs, offering flexibility in hazard control.
Critical Control Point
A step where control is essential to prevent, eliminate or reduce a significant food safety hazard to an acceptable level.
Two independent PDCA cycles
ISO 22000:2018 operates two Plan-Do-Check-Act cycles simultaneously — one covering the overall management system and the other covering HACCP principles. This dual approach strengthens both governance and operational hazard control.
ISO 22000 Implementation Process
A structured sequence of phases that take your organization from initial planning to FSMS certification and beyond.
Project Initiation & Scope Definition
Define the FSMS scope, obtain leadership commitment, establish the food safety team and allocate resources. Clear scope definition is critical — it determines what's in and out of the certification.
Gap Assessment & Hazard Analysis
Review current food safety practices against ISO 22000 requirements. Conduct hazard analysis, identify PRPs, OPRPs and CCPs, and evaluate risk levels. This shapes the hazard control plan.
FSMS Design & Documentation
Develop the FSMS framework: food safety policy, hazard control plan, PRP/OPRP documentation, HACCP plan, procedures, work instructions and supporting records.
Implementation & Awareness
Roll out the controls across the organization. Conduct food safety awareness training, assign responsibilities and begin operating the FSMS in day-to-day activities.
Internal Audit & Management Review
Conduct internal audits to verify FSMS conformity and effectiveness. Hold a management review meeting to evaluate performance, food safety objectives and improvement opportunities.
Certification Audit & Decision
The accredited certification body conducts a Stage 1 (documentation review) and Stage 2 (on-site) audit. Where the application is approved, certification is issued per the certification body's procedures.
Key Documents & Records
ISO 22000 requires documented information to support the FSMS and provide evidence that requirements are being met. Below are the key categories.
Right-sizing matters
Documentation should be proportionate to your organization's size, food safety risk profile and complexity — not voluminous for its own sake.
FSMS Framework Documents
Food safety policy, FSMS scope statement, food safety objectives, roles and responsibilities, and the overall FSMS manual or framework description.[reference:2]
Hazard Analysis & HACCP Plan
Product description, process flow diagrams, hazard analysis table, HACCP plan, CCP monitoring procedures, critical limits and corrective actions.[reference:3]
PRP & OPRP Programs
GMP, SSOP, hygiene and sanitation procedures, pest control, maintenance, personnel training, allergen management and operational prerequisite programs.[reference:4]
Operational Records
CCP monitoring records, corrective action records, traceability records, internal audit reports, management review minutes and product recall drill records.[reference:5]
Compliance & Legal Registers
Legal and regulatory requirements register, food safety standards, customer requirements and applicable product certifications.
Timeline & Cost Factors
ISO 22000 timelines and costs vary significantly based on scope, food safety risk, current practices and the certification body. Here are the primary factors.
Timeline Factors
- FSMS scope — products, processes and sites covered
- Organization size and number of employees in scope
- Current food safety maturity and existing PRP/HACCP practices
- Availability of key personnel and internal resources
- Certification body's audit schedule and procedures
Cost Factors
- Scope complexity — product types, processes and sites
- Organization size and number of employees in scope
- Gap between current state and standard requirements
- Certification body audit days and applicable fees
- Support services required from a consultancy partner
Important note: ISO 22000 projects typically require thorough preparation because of the depth of hazard analysis and PRP/OPRP implementation involved. Contact us for a tailored assessment and clear quotation based on your specific scope.
GlobalQMS.in Support for ISO 22000
We provide consultancy and support services across the entire FSMS lifecycle — from scope definition and hazard analysis to audit preparation and post-certification continual improvement.
FSMS Consultation
Expert guidance on scope, hazard analysis methodology and control selection aligned to your food safety risks.
ExploreFSMS Documentation
Food safety manual, HACCP plan, PRP/OPRP procedures, records and supporting templates tailored to your operations.
ExploreCertification Assistance
Audit preparation, mock reviews and support through Stage 1 and Stage 2 audits.
ExploreFSMS Implementation Support
On-ground assistance in deploying PRPs, OPRPs, CCP monitoring and embedding the FSMS into daily operations.
ExploreIndustry-Specific FSMS
Tailored approach for food manufacturing, catering, cold chain, retail and agriculture sectors.
ExploreHave a Specific Question?
Every FSMS is different. Talk to our team about your specific products, processes and timelines.
Get in TouchISO 22000 Questions
Common questions we hear from organizations considering ISO 22000 certification.
View All FAQsHACCP is a systematic preventive approach to food safety that identifies and controls biological, chemical and physical hazards. ISO 22000 incorporates HACCP principles within a broader management system framework that includes leadership, planning, support, performance evaluation and improvement. ISO 22000 is a certifiable standard, while HACCP is a methodology.
PRPs (Prerequisite Programs) are basic hygiene and environmental conditions. OPRPs (Operational Prerequisite Programs) are control measures applied to prevent significant hazards, but their failure does not necessarily lead to unsafe product. CCPs (Critical Control Points) are steps where control is essential to prevent, eliminate or reduce a significant hazard to an acceptable level.
Timelines vary based on scope, size, current food safety practices and the certification body. ISO 22000 typically takes several months to prepare for, depending on the depth of hazard analysis and PRP/OPRP implementation required. Contact us for a tailored assessment.
ISO 22000 is not legally mandatory in most jurisdictions, but it is often contractually required by large retailers, export buyers and institutional customers. Requirements depend on applicable laws and contracts.
FSSC 22000 is a certification scheme that uses ISO 22000 as its foundation, combined with sector-specific PRP standards (like ISO/TS 22002-1) and additional scheme requirements. FSSC 22000 is recognized by the Global Food Safety Initiative (GFSI) and has more requirements than ISO 22000 alone.[reference:6]
Yes. ISO 22000:2018 is aligned with the High Level Structure (HLS), which makes integration with ISO 9001 and other management system standards practical. Many food businesses combine ISO 22000 with ISO 9001 to reduce duplication and improve efficiency.
No. GlobalQMS.in provides consultancy and support services. Certification is issued by an accredited certification body following its audit procedures. We help you prepare thoroughly so you enter the certification audit well-positioned.
Ready to Strengthen Your Food Safety Management?
Talk to our team about ISO 22000. We'll help you understand what your scope requires, what effort is involved and how to prepare efficiently.
Food Safety
Farm to
Fork