ISO 22000 is the international standard for food safety management systems (FSMS). It provides a structured framework to help organisations identify, control, and reduce food safety hazards throughout the food chain, from primary production to final consumption.
ISO 22000 certification demonstrates that an organisation has effective systems in place to ensure food safety, protect consumers, and meet regulatory and customer requirements.
What is ISO 22000?
ISO 22000 is an international standard published by the International Organization for Standardization. It sets out the requirements for establishing, implementing, maintaining, and continually improving a food safety management system.
The standard integrates Hazard Analysis and Critical Control Points (HACCP) principles with management system requirements, making it applicable to all organisations in the food chain.
What does ISO 22000 cover?
ISO 22000 takes a preventive, risk-based approach to food safety. Key areas include:
- Food safety policy and objectives
- Hazard identification and risk analysis
- Prerequisite programmes (PRPs)
- Operational prerequisite programmes (OPRPs)
- HACCP plans and critical control points
- Traceability systems
- Emergency preparedness and product recall
- Monitoring, verification, and validation
- Continual improvement
The focus is on preventing contamination and ensuring food safety hazards are controlled effectively.
Who is ISO 22000 for?
ISO 22000 is suitable for organisations across the food chain, including:
- Food and beverage manufacturers
- Processors and packers
- Storage and distribution providers
- Catering and food service organisations
- Retailers and wholesalers
- Feed producers and packaging suppliers
It is often required by customers, retailers, and international supply chains.
ISO 22000 requirements explained
To achieve ISO 22000 certification, an organisation must demonstrate:
Food safety leadership and planning
- A documented food safety policy
- Defined roles and responsibilities
- Management commitment to food safety
Hazard analysis and control
- Identification of biological, chemical, and physical hazards
- Implementation of HACCP principles
- Control of critical control points (CCPs) and OPRPs
Operational controls
- Hygiene and sanitation controls
- Supplier and raw material management
- Storage, handling, and transportation controls
Support and competence
- Training and awareness
- Document and record control
- Internal and external communication
Performance evaluation and improvement
- Monitoring, verification, and validation activities
- Internal audits
- Management review and continual improvement
Auditors expect robust evidence that food safety hazards are effectively controlled.
How to get ISO 22000 certified
The certification process typically includes:
- Defining the scope of the food safety management system
- Identifying food safety hazards and risks
- Developing PRPs, OPRPs, and HACCP plans
- Implementing controls and training staff
- Carrying out internal audits and management review
- Passing a Stage 1 and Stage 2 certification audit
ISO 22000 certification requires strong operational involvement and accurate record keeping.
How long does ISO 22000 certification take?
Indicative timeframes are:
- Small organisations: 8–16 weeks
- Medium organisations: 3–5 months
- Large or complex food operations: 5–9 months+
Timeframes depend on process complexity, number of products, and existing food safety controls.
How much does ISO 22000 certification cost?
Indicative total costs (initial certification):
- Small organisations: £3,000–£9,000 | $4,000–$12,000 | €3,500–€10,000
- Medium organisations: £9,000–£22,000 | $12,000–$30,000 | €10,000–€26,000
- Large or complex organisations: £22,000–£45,000+ | $30,000–$60,000+ | €26,000–€55,000+
Costs vary depending on product range, process risk, audit duration, and preparation method.
Benefits of ISO 22000 certification
Organisations commonly achieve:
- Reduced risk of food safety incidents
- Improved compliance with food safety regulations
- Stronger control of suppliers and raw materials
- Improved traceability and recall readiness
- Increased customer and consumer confidence
- Enhanced access to international markets
The standard promotes a culture of food safety throughout the organisation.
Common ISO 22000 mistakes to avoid
- Incomplete hazard analysis
- Poorly defined CCPs or OPRPs
- Weak traceability systems
- Inadequate staff training
- Treating ISO 22000 as documentation only
Auditors expect food safety controls to be practical, monitored, and consistently applied.
ISO 22000 certification FAQs
No. ISO 22000 is voluntary, but it is often required by customers, retailers, or supply chain partners.
Yes. The standard is scalable and can be applied proportionately to smaller operations.
Certification is typically valid for three years, with regular surveillance audits.
Yes. ISO 22000 integrates well with ISO 9001 and ISO 14001 as part of an integrated management system.
Next steps
If you are considering ISO 22000 certification:
- Identify food safety hazards and risks
- Review existing hygiene and safety controls
- Define the scope of the FSMS
- Decide whether to prepare internally or use external support
- Plan realistic timescales and budgets
ISOcertified.net provides detailed guidance on ISO 22000 certification, including HACCP implementation, audit expectations, costs, and ongoing food safety management.