ISO 22000


ISO 22000 is a food safety management system by the International Organization for Standardization which is outcome focused, providing requirements for any organization in the food industry with objective to help to improve overall performance in food safety. These standards are intended to ensure safety in the global food supply chain. The standards involve the overall guidelines for food safety management and also focuses on traceability in the feed and food chain.

Food safety

refers to all those hazards, whether chronic or acute, that may make food injurious to the health of the consumer.

ISO 22000 standard

ISO 22000 is the most popular voluntary food safety international standard in the food industry with 51,535 total number of sites. The ISO 22000 family are international voluntary consensus standards which align to Good Standardization Practices and the World Trade Organization Principles for the Development of International Standards. Defining the requirements for a Food Safety Management System and incorporating the following elements which as defined as FSMS principles:
  • system management
  • prerequisite programs
  • HACCP principles
Critical reviews of the above elements have been conducted by many scientists. Communication along the food chain is essential to ensure that all relevant food safety hazards are identified and adequately controlled at each step within the food chain. This implies communication between organizations both upstream and downstream in the food chain. Communication with customers and suppliers about identified hazards and control measures will assist in clarifying customer and supplier requirements.
Recognition of the organization's role and position within the food chain is essential to ensure effective interactive communication throughout the chain in order to deliver safe food products to the consumer.

ISO 22000 and HACCP

ISO 22000 has two Plan-Do-Check-Act cycles which operate one inside the other, the first covering the management system, the second the operations, which simultaneously cover the HACCP principles. ISO 22000 references the Codex Alimentarius General Principles of Food Hygiene, CXC 1-1969 which includes HACCP principles and 12 HACCP application steps. The following table explains the relationship and alignment between ISO 22000 and the Codex Alimentarius General Principles of Food Hygiene, CXC 1-1969. The task, Validate the control measure or combination of control measures, also references Guidelines for the Validation of Food Safety Control Measures, CXG 69-2008
TaskISO 22000:2018General Principles of Food Hygiene, CXC 1-1969
Establish the food safety teamSubclauses 5.3.1 c) and 5.3.2, and links to Subclauses 7.1.2 and 7.2 HACCP step 1
Provide the information needed to conduct the hazard analysisSubclause 8.5.1 HACCP steps 2 and 3
Prepare the process flow diagramSubclause 8.5.1.5HACCP step 6 and principle 1
Identify the hazards associated with the foodSubclauses 8.5.2.1 and 8.5.2.2HACCP step 6 and principle 1
Conduct a hazard assessmentSubclause 8.5.2.3HACCP step 6 and principle 1
List and select control measure or combination of control measuresSubclause 8.5.2.4HACCP step 6 and principle 1
Categorize, manage, monitor and document the control measuresSubclauses 8.5.2.4 and 8.5.4
Validate the control measure or combination of control measuresSubclause 8.5.3HACCP step 7 and principle 2, step 6 and principle 3, step 11 and principle 6
Establish and apply corrections and corrective actionsSubclauses 8.5.4.1, 8.5.4.4 and 8.9HACCP principle 5, HACCP steps 10 and 11
Control monitoring and measuring Subclause 8.7
Conduct a verification related to the PRPs and hazard control planSubclause 8.8
Update the preliminary informationSubclause 8.6HACCP steps 5 and 7

A study explains the importance of ISO 22000 Food Safety Management System, Critical Control Points Hazard Analysis and the Prerequisite Programs as the foundation of HACCP, in preventing foodborne outbreaks. In addition, another study for HACCP effectiveness between ISO 22000 certified and non-certified dairy companies identified that by implementing the HACCP Food Safety System and by being ISO 22000 certified, the level of the achievement of the HACCP objectives is improved significantly.

ISO 22000 family of standards

ISO published additional standards that are related to ISO 22000. These standards are known as the ISO 22000 family of standards. At the present time, the following standards will make up the ISO 22000 family of standards:
  • ISO 22000 – Food safety management systems – Requirements for any organization in the food chain.
  • ISO 22001 – Guidelines on the application of ISO 9001:2000 for the food and drink industry.
  • ISO/TS 22002- Prerequisite programmes on food safety—Part 1: Food manufacturing; Part 2: Catering; Part 3: Farming; Part 4: Food packaging manufacturing; Part 5: Transport and storage; Part 6: Feed and animal food production
  • ISO/TS 22003 – Food safety — Part 1: Requirements for bodies providing audit and certification of food safety management systems; Part 2: Requirements for bodies providing evaluation and certification of products, processes and services, including an audit of the food safety system
  • ISO/TS 22004 – Food safety management systems – Guidance on the application of ISO 22000:2005.
  • ISO 22005 – Traceability in the feed and food chain – General principles and basic requirements for system design and implementation.
  • ISO 22006 – Quality management systems – Guidance on the application of ISO 9002:2000 for crop production.
ISO 22000 is also used as a basis for the Food Safety Systems Certification Scheme FSSC 22000. FSSC 22000 is a Global Food Safety Initiative approved scheme, also referred to as a certification programme owner. The differences between ISO 22000 and schemes with GFSI recognition are explained in a paper from ISO, International standards and private standards.

ISO 9001 vs ISO 22000

In the early 1990s, the application of ISO 9000:1987 series of standards were embraced by the food industry in the European Union. At the same time, the USDA recognized HACCP systems to demonstrate food safety in the US. This led to these two systems being combined, where ISO 9001 was certified along with HACCP as a single management tool in organizations. In Europe, ISO 9001 and HACCP were used by companies as a "due diligence" defense against prosecution under the 1990 Food Safety Act. With ISO 9001 and HACCP established and accepted, the food industry was working towards standardization and a single international standard, eventually, ISO 22000. This path was diverted when the British Retail Consortium published the BRC Food Technical Standard, in 1998. The BRC decision to publish as a stand-alone standard, instead of publishing as an addendum and adding food safety requirements to support ISO 9001, led to the Global Food Safety Initiative creating a benchmarking model for harmonization of private standards. Harmonization was considered as an alternative to promoting standardization with an international standard. Food retailers, as members of the Consumer Goods Forum, changed their ‘due diligence’ defence from ISO 9001 and HACCP, to BRC and other private standards recognized by the Global Food Safety Initiative, despite any evidence whether private standards are beneficial or detrimental for global food supply chains.
ISO 22000 is an industrial-specific risk management system for any type of food safety which includes farming, processing, manufacturing, catering, storage and distribution. ISO 22000 is designed using the ISO high level structure, also referred to as Annex SL, to be integrated with other ISO Management System Standards including the Quality Management System of ISO 9001. For conformity assessment and auditing, both ISO 9001 and ISO 22000 refer to ISO 17021 Conformity assessment, Requirements for bodies providing audit and certification of management systems and ISO 19011 Guidelines for auditing management systems. The detailed similarities, differences and combined effects of the two standards can be found elsewhere., , ,.,

Potential justification

ISO Management System Standards are designed to be integrated for any sector or industry and size, this is further explained in . In 2004, the European Office of Crafts, Trades and Small and Medium sized Enterprises for Standardisation noted that the standard is only suitable for large sized companies and small food businesses will not be able to seek such a high standard due to the lack of resources to pursue the certification. The agency suggested creating an alternative for small food businesses to achieve the same objective.
EFSA is now making their efforts on the food legislations that are adaptable for the SMEs in food supply chains. In addition, ISO and United Nations Industrial Development Organization jointly published which provides guidance to assist all organizations that recognize the potential benefits of implementing a FSMS in accordance with ISO 22000.
Food organizations which seek the standard certification are evolving towards integrated management systems, typically integrating Environmental and Occupational Health & Safety along with Quality. This takes a process approach and risk-based thinking into consideration where risks are addressed at both organizational and operational levels which include food safety, worker safety and environmental and are from the primary production in the supply chains and the later stages of food processing.,