ISOQuality Systems MaturityStandard
ISO 22000:2018

Food safety management systems — Requirements for any organization in the food chain

The international food-safety management-system standard for any organisation in the food chain. It combines interactive communication, system management, prerequisite programmes, and Codex HACCP within the ISO high-level structure, and introduces two levels of risk — organisational (strategic) and operational (HACCP/OPRP).

LAST REVISED
June 2018
PRODUCT AREAS
Food
SCOPE & APPLICABILITY

Any organisation in the food chain — producers, processors, transport, retail, and suppliers of equipment, packaging, and services — regardless of size.

KEY REQUIREMENTS
  • 01Operate a food-safety management system within the ISO high-level structure
  • 02Establish prerequisite programmes and a HACCP/OPRP hazard-control plan
  • 03Address organisational context and risk-based planning
  • 04Manage nonconformities, corrections, and corrective actions
  • 05Continually improve the food-safety management system
IMPLEMENTATION TIPS
Distinguish operational PRPs from CCPs deliberately — ISO 22000 expects both, controlled differently
If pursuing FSSC 22000, add the sector PRP (ISO/TS 22002-x) requirements on top of ISO 22000
Leverage the ISO high-level structure to integrate with ISO 9001 if you already run one
REVISION NOTES

The 2018 second edition adopted the ISO high-level structure, added organisational-context and risk-based-planning clauses, and clarified the two-level (strategic/operational) risk model.

ISO 22000:2018: frequently asked questions

Quick answers to common questions about ISO 22000:2018.

What is ISO 22000:2018?

ISO 22000:2018 — Food safety management systems — Requirements for any organization in the food chain — is a standard issued by the International Organization for Standardization. The international food-safety management-system standard for any organisation in the food chain. It combines interactive communication, system management, prerequisite programmes, and Codex HACCP within the ISO high-level structure, and introduces two levels of risk — organisational (strategic) and operational (HACCP/OPRP).

Who does ISO 22000:2018 apply to?

Any organisation in the food chain — producers, processors, transport, retail, and suppliers of equipment, packaging, and services — regardless of size.

What are the key requirements of ISO 22000:2018?

ISO 22000:2018 requires, among other things: Operate a food-safety management system within the ISO high-level structure; Establish prerequisite programmes and a HACCP/OPRP hazard-control plan; Address organisational context and risk-based planning; Manage nonconformities, corrections, and corrective actions.

When was ISO 22000:2018 last updated?

The current version of ISO 22000:2018 dates from June 2018. The 2018 second edition adopted the ISO high-level structure, added organisational-context and risk-based-planning clauses, and clarified the two-level (strategic/operational) risk model.

RELATED STANDARDS
RELATED FDA RECALLS
where Risk Management & CAPA control fails
See all Risk Management & CAPA recalls →

Live openFDA recalls SPEQ maps to this standard’s topics — a SPEQ interpretation, not an FDA classification.

THIS STANDARD IN PRACTICE

Recall domain is a SPEQ mapping of this standard’s topics, not an FDA classification.

Weekly Briefing

Track the standards that move

When ISO 22000:2018 — or any GxP requirement — is revised, recalled against, or clarified by new guidance, the Weekly GxP Briefing surfaces it. Free, one email a week.

Read a past issue →