Skip to content
Go to Country Selector page

ISO 22000 Certification

ISO 22000 is the international standard for food safety management systems for any organisation in the food chain. ISO 22000 certification is independent evidence that your hazard control system meets the standard.

What is ISO 22000?

Published by the International Organization for Standardization (ISO), ISO 22000 sets out requirements for a food safety management system (FSMS) for any organisation in the food chain. The current edition is ISO 22000:2018 with amendment ISO 22000:2018/Amd 1:2024; ISO is currently revising the standard, and the 2018 edition remains applicable until a new edition is published.

The standard combines three core elements:

  • The common ISO management system structure (High Level Structure under Annex SL, now called the Harmonized Structure), compatible with ISO 9001, ISO 14001 and other standards for easy integration.
  • HACCP principles developed by the Codex Alimentarius Commission for hazard analysis and control of significant hazards.
  • Prerequisite programmes (PRPs) such as premises hygiene, pest control, equipment maintenance and personal hygiene.

ISO 22000:2018 applies risk-based thinking at two levels: the organisational level (business risks and opportunities) and the operational level (food safety hazards). It uses two nested PDCA cycles, one for the management system and one for HACCP-based operations. Control measures are classified as critical control points (CCPs) or operational prerequisite programmes (OPRPs).

Who can be certified to ISO 22000?

ISO 22000 suits food businesses of every size, including upstream and downstream organisations:

  • Primary production (crops, livestock) and feed production
  • Food and beverage processing plants
  • Catering and industrial kitchens
  • Wholesale, retail, transport and storage
  • Manufacturers of packaging, cleaning agents and additives
  • Support services such as pest control or mechanical engineering

The standard is widely used worldwide. Note that ISO 22000 itself is not a GFSI-recognised scheme. FSSC 22000 – which combines ISO 22000, sector-specific prerequisite programmes (the ISO 22002 series) and additional FSSC requirements – is a separate, GFSI-recognised scheme. Companies already applying HACCP, IFS Food or BRCGS Food usually have many of the foundations in place for ISO 22000.

Key requirements of ISO 22000

  • Plan, implement, maintain and update a food safety management system that ensures traceability
  • Establish and apply a food safety policy and objectives
  • Communicate effectively with suppliers, customers, authorities and other parties in the food chain
  • Meet customer and legal requirements and keep evidence of compliance
  • Prepare for emergencies, control unsafe products and manage withdrawals or recalls
  • Internal audits, management review and continual improvement

In February 2024 ISO published amendment ISO 22000:2018/Amd 1:2024 (part of the climate action amendments to many management system standards announced in a joint IAF–ISO statement): clause 4.1 now requires the organisation to determine whether climate change is a relevant issue, and a note to clause 4.2 states that interested parties can have climate-change-related requirements.

Benefits for your organisation

Flexible to your business

The standard lets you build a system that fits your products, processes and company size.

International standard

A certificate to an ISO standard is widely used and can support export-oriented companies.

Fewer customer audits

Third-party certification can reduce the number of supplier audits carried out by your customers.

Reduced product liability risk

Systematic control can help limit food safety incidents and strengthen customer confidence.

How it works

  1. Enquiry and quotation
  2. Certification contract with TÜV NORD
  3. Stage 1 audit: readiness assessment
  4. Stage 2 audit: on-site certification audit
  5. Certification decision by TÜV NORD
  6. Issue of the ISO 22000 certificate

Frequently asked questions

How does ISO 22000 differ from HACCP?
HACCP is a method for analysing hazards and controlling significant hazards at critical control points. ISO 22000 is built on ISO's common management system structure, incorporates HACCP principles and adds requirements for prerequisite programmes, operational prerequisite programmes, communication, leadership, risks and opportunities, and continual improvement. Companies already applying HACCP therefore have a strong starting point for ISO 22000.
Is ISO 22000 recognised by GFSI?
No. ISO 22000 is a widely used international standard, but it is not itself a GFSI-recognised scheme. The GFSI-recognised scheme based on ISO 22000 is FSSC 22000, which combines ISO 22000, sector-specific prerequisite programmes and additional FSSC requirements. Companies should confirm with their customers which scheme is required.
How is the ISO 22000 certification scope categorised?
The scope is defined by the food chain categories of ISO 22003-1:2022: farming of animals and plants (A, B), food and pet food processing (C), feed processing (D), catering (E), trading, retail and wholesale (F), transport and storage (G), services (H), food packaging production (I), equipment manufacturing (J) and production of (bio)chemicals (K).
Where can we find ISO 22000 training?
According to TÜV NORD GROUP, TÜV NORD CERT GmbH offers lead auditor courses certified by CQI and IRCA. These are public training courses. Companies interested can contact TÜV NORD Vietnam at vietnam@tuv-nord.com for information on course schedules and programmes.

Talk to our experts

Contact TÜV NORD Vietnam in Hanoi, Ho Chi Minh City or Vung Tau for detailed information on ISO 22000 and a quotation for your organisation.

Contact us