The compliance challenge

FSSC 22000 combines three components — ISO 22000, a sector-specific prerequisite programme specification, and the FSSC additional requirements. Sites familiar with prescriptive standards often underestimate the management-system thinking ISO 22000 expects: context, interested parties, risks and opportunities, objectives and planned change.

The OPRP concept is another common stumbling block, with control measures classified inconsistently and validation evidence missing.

About this service

FSSC 22000 consultancy builds the three components into one coherent system rather than three separate document sets, and translates the ISO language into practical requirements for a food manufacturing site.

Work covers hazard analysis and control measure categorisation, prerequisite programmes against the applicable ISO/TS 22002 specification, and each of the FSSC additional requirements relevant to your scope.

Certification is issued by an independent accredited certification body following a two-stage audit process.

Scope of support

  • ISO 22000 management system requirements
  • Applicable prerequisite programme specification (ISO/TS 22002-1 and related)
  • FSSC 22000 additional requirements applicable to the scope
  • Context of the organisation and scope definition
  • Interested parties and their requirements
  • Leadership, policy and responsibilities
  • Risks and opportunities and actions to address them
  • Food safety objectives and planning of changes
  • PRP verification and management
  • Hazard analysis and control measure assessment
  • OPRP determination, monitoring and action criteria
  • CCP determination, critical limits and monitoring
  • Validation of control measure combinations
  • Verification planning and analysis of results
  • Food defence and threat assessment
  • Food fraud vulnerability assessment and mitigation
  • Allergen management and labelling controls
  • Environmental monitoring where applicable to the scope
  • Food safety culture objectives and measurement
  • Internal audit program and competency
  • Management review
  • Correction, corrective action and non-conformity management
  • Certification readiness and stage 1 / stage 2 preparation
  • Ongoing maintenance, surveillance and unannounced audit readiness

How the consultancy works

  1. 1

    Gap assessment

    Assess the system against ISO 22000, the PRP specification and the additional requirements.

  2. 2

    Planning

    Define scope, resources, timeline and the certification body engagement points.

  3. 3

    Management system build

    Develop context, planning, objectives, roles and documented information.

  4. 4

    Hazard control

    Complete hazard analysis, categorise control measures and validate them.

  5. 5

    PRP programme

    Establish and verify prerequisite programmes against the applicable specification.

  6. 6

    Implementation and verification

    Operate the system, complete internal audits and hold a management review.

  7. 7

    Certification readiness

    Pre-certification assessment, stage 1 preparation and stage 2 audit support.

Relevant standards

  • FSSC 22000 Scheme (current version)
  • ISO 22000 Food safety management systems
  • ISO/TS 22002 series prerequisite programme specifications
  • ISO 19011 guidance for internal auditing
  • GFSI benchmarking requirements

Who this suits

  • Manufacturers whose customers accept or require FSSC 22000
  • Sites already operating an ISO-based management system
  • Multi-site businesses seeking a consistent management system approach
  • Ingredient, packaging and processing businesses within the scheme's scope categories

Compliance and operational benefits

  • One integrated system covering all three scheme components
  • Clear, defensible separation of CCPs, OPRPs and PRPs
  • Management system evidence — objectives, review, improvement — ready for audit
  • Preparedness for surveillance and unannounced audits

Frequently asked questions