Safe product
Hazards identified and controlled at the points that matter.
Certification support
ISO 22000 Food Safety Management
Current edition: ISO 22000:2018
The food safety management standard for any organisation in the food chain, from farm and feed to processing, packaging, storage and retail. It combines HACCP principles, prerequisite programmes and a management system that keeps them working.
What the standard covers
Requirements, clause by clause
ISO 22000 uses two Plan-Do-Check-Act cycles: one for the management system and one inside operations, where hazard control happens.
4
Context
Issues, interested parties, scope and the FSMS.
5
Leadership
Commitment, food safety policy, roles, food safety team leader.
6
Planning
Risks and opportunities, objectives, planning of changes.
7
Support
Resources, competence, awareness, communication, documented information.
8
Operation
PRPs, traceability, emergency preparedness, hazard analysis, HACCP and OPRP plans, verification.
9
Performance evaluation
Monitoring, internal audit, management review.
10
Improvement
Nonconformity, corrective action, update of the FSMS.
Clause 8 contains the HACCP-based hazard control: hazard analysis, CCPs and OPRPs, validation and verification.
Why organisations implement it
What a working FSMS delivers
Customer access
A recognised requirement from retailers, brand owners and food service.
Regulatory alignment
A structured way to meet food hygiene and safety law.
Traceability
Recall-ready traceability up and down the chain.
Path to GFSI
The base for FSSC 22000 when customers require a GFSI-recognised scheme.
One system
Integrates with ISO 9001 and ISO 14001 under one audit programme.
How we work
Path to certification
One AEC methodology from first assessment to certificate, delivered by registered lead auditors.
- AssessGap assessment against ISO 22000, scope and roadmap
- DesignProcesses, risk register, policy and documented information
- ImplementProcesses embedded with coaching for process owners
- TrainAwareness for all staff and internal auditor development
- VerifyInternal audit, management review and mock certification audit
- Certify & sustainStage 1 and Stage 2 support, then surveillance readiness
Full implementation
No existing system. We design and implement from the ground up.
Typically 6 to 9 monthsGap remediation
Some documentation in place. We close the gaps and prove effectiveness.
Typically 4 to 6 monthsUpgrade & integration
We build the management system around your existing HACCP plan.
Typically 3 to 5 months
Who certifies
Independent certification, chosen to fit your market
Your ISO 22000 certificate is issued by an independent certification body accredited by UKAS, DAkkS or an equivalent national accreditation body. AEC prepares you for that audit; the certification decision is theirs.
CB-neutral
We are not tied to one certification body and help you select one that your customers recognise.
Audit-ready
Mock audit and closed corrective actions before the certification audit.
No guarantees
We prepare you thoroughly and never promise an outcome only an independent auditor can decide.
Where it applies
ISO 22000 by industry
Food & beverage · processing, bottling and food service
Manufacturing · food-contact packaging
Transport & logistics · cold chain and storage
Healthcare · hospital catering
Related standards
Training Academy
View ISO 22000 courses
ISO 22000 and food safety training
Delivered by practising, registered lead auditors. In-house, public, virtual or hybrid.
- Awareness (half day) on food safety and each person's role
- HACCP team training on hazard analysis and CCP control
- Implementer (2 to 3 days) for food safety team leaders
- Internal Auditor (2 to 3 days) in line with ISO 19011
Questions
ISO 22000 FAQ
Does AEC issue the ISO 22000 certificate?
No. Certificates are issued by independent certification bodies accredited by UKAS, DAkkS or an equivalent national accreditation body. AEC prepares your organisation for that audit.
ISO 22000 or FSSC 22000?
ISO 22000 is the international standard. FSSC 22000 adds sector prerequisite programmes and scheme requirements, and is recognised by GFSI. If your customers require a GFSI-recognised certificate, FSSC 22000 is usually the route.
We already have a HACCP plan. How much more is needed?
Your HACCP plan is the core of clause 8. The work is in prerequisite programmes, the management system around them and evidence that it works, typically 3 to 5 months.
Is ISO 22000 being revised?
A new edition is in development. ISO 22000:2018, with its 2024 climate amendment, remains current, and systems we build now are designed to move to the new edition with a focused gap review.
Start your ISO 22000 programme
Tell us your products, sites and customers. We reply with a proposal covering gap assessment, HACCP, implementation and certification support.
Certification decisions are made by independent, accredited certification bodies. AEC prepares organisations for certification and does not guarantee certification outcomes.