The world's most widely adopted GFSI-benchmarked scheme. We guide food manufacturers and suppliers through every stage of FSSC 22000 certification and support businesses already certified through Version 7 transition.
FSSC 22000 is a Global Food Safety Initiative benchmarked certification scheme for food safety management systems. It is operated by the Foundation FSSC, an independent non-profit organisation, and is accepted by major food retailers and manufacturers in over 180 countries.
The scheme is built on three normative components that an organisation must satisfy in full. ISO 22000:2018 provides the management system framework. The relevant ISO 22002 sector standard defines the prerequisite programme requirements for your specific sector. The FSSC 22000 additional requirements set by Foundation FSSC add scheme-specific obligations covering areas including food safety culture, food fraud, food defence, allergen management and sustainability.
This three-component structure is what distinguishes FSSC 22000 from ISO 22000 standalone. A business certified to ISO 22000 alone is not GFSI-recognised. FSSC 22000 certification demonstrates that the business has met all three components and been independently audited against a scheme accepted by the world's major retailers.
The current version is FSSC 22000 Version 7, published on 1 May 2026. It incorporates the updated ISO 22002:2025 prerequisite programme series and introduces strengthened requirements on food safety culture, sustainability, allergen management and food loss and waste.
The core food safety management system standard. Provides the plan-do-check-act framework, hazard analysis, HACCP and management system requirements.
Sector-specific prerequisite programme standards. The relevant standard depends on your food chain category: manufacturing, catering, packaging, farming, feed, or other sectors.
Scheme-specific requirements set by Foundation FSSC. Cover food safety culture, food fraud, food defence, allergen management, sustainability, supplier management and more.
Version 7 is now in force. If your organisation is certified to Version 6, the transition clock is running. Here is what has changed and what your business needs to do.
Version 7 was published 1 May 2026. The transition follows a defined 12-month window. Missing the deadlines results in certificate suspension.
FSSC 22000 Version 7 published. Transition period begins. Start your V7 gap assessment now.
Last date for audits against Version 6. All new certification audits from May 2027 must be against Version 7.
All certified organisations must have completed their upgrade audit to Version 7. Version 6 certificates withdrawn.
The most significant structural change. The new series introduces ISO 22002-100:2025 as a common PRP backbone for all sectors, supplemented by sector-specific standards. Organisations must map their existing PRP documentation to the new structure.
Version 7 integrates food safety culture requirements more explicitly throughout the scheme. Organisations must demonstrate measurable culture commitments at all personnel levels, from the production floor to the boardroom. Auditors assess culture actively during site visits.
New requirements aligned with the UN Sustainable Development Goals. Organisations must address food loss and waste and demonstrate environmental commitment. This is a new area not present in Version 6.
Strengthened allergen controls, including tighter requirements for allergen risk assessments, cleaning validation, labelling review and cross-contact prevention. The FSSC additional requirements in this area have been expanded.
New requirements for equipment suitability, design review and maintenance records. Particular attention to food-contact surfaces, calibration and equipment hygiene zone classification.
Product categories and food chain category codes have been updated in line with ISO 22003:2022. Organisations should verify that their current certification scope and category code remain accurate under Version 7.
FSSC 22000 is required by most major food retailers and manufacturers as a condition of supply. If you supply or plan to supply any of the following, FSSC 22000 is almost certainly required.
Businesses supplying Walmart, Tesco, Carrefour, Aldi, Lidl, Costco and most other major retailers are required to hold a GFSI-recognised certification. FSSC 22000 is the most widely accepted scheme for manufactured food products.
Suppliers to food manufacturers who are required by their customers to hold GFSI-recognised certification as part of supplier approval programmes. FSSC 22000 is increasingly specified in supplier codes of practice.
Manufacturers of food-contact packaging using the FSSC 22000 packaging category, based on ISO 22000 and ISO/TS 22002-4 prerequisites. Required by food manufacturers seeking GFSI-recognised packaging supply chains.
Large-scale contract caterers and institutional food service operations seeking GFSI recognition for their food safety management systems beyond HACCP compliance.
Organisations already certified to ISO 22000 who need to progress to GFSI recognition. The transition from ISO 22000 to FSSC 22000 is one of the most common projects we manage.
Businesses entering new export markets where GFSI-recognised certification is specified in import requirements, tender criteria or customer contracts. FSSC 22000 is accepted globally and recognised by buyers in all major food importing markets.
We cover the full scope of FSSC 22000 consulting, from initial certification through to Version 7 transition and ongoing post-certification support.
A review of your food safety management system against all three FSSC 22000 components: ISO 22000:2018, your relevant ISO 22002 sector PRP standard, and the FSSC 22000 additional requirements. Produces a prioritised written action plan before implementation begins.
For businesses certified to Version 6, a structured V6-to-V7 gap assessment focused on the new requirements, followed by documentation updates, PRP realignment to ISO 22002:2025, and mock transition audit ahead of your upgrade audit.
For businesses already certified to ISO 22000, a focused gap assessment covering only the additional FSSC 22000 requirements, followed by PRP documentation development and scheme-specific implementation support.
Full design of your food safety management system to FSSC 22000 requirements. Covers ISO 22000 documentation, sector PRP programmes, HACCP plans, food safety culture evidence, food fraud and food defence plans and all FSSC additional requirement areas.
Design and delivery of a scheduled internal audit programme covering all elements of FSSC 22000, including the FSSC additional requirements and sector PRP clauses that are most frequently missed in internal audits.
A full mock audit structured to replicate the certification body's approach across all three FSSC 22000 components. Produces a graded findings report identifying all potential major and minor non-conformances before the live audit.
Assessment and development of food safety culture across your organisation, aligned with FSSC 22000 Version 7 requirements. Covers leadership commitment, staff engagement, communication, knowledge and attitude measurement.
Development of TACCP and VACCP plans meeting FSSC 22000 additional requirements. Covers vulnerability assessment, mitigation measures, supply chain mapping and the strengthened Version 7 requirements for food fraud and intentional adulteration.
A monthly retainer covering document maintenance, regulatory update alerts, surveillance audit preparation and helpline access between formal audit cycles. Ensures your system stays current through the 3-year certification cycle.
Our FSSC 22000 training courses build internal competency alongside the consulting programme. We also offer specific Version 7 transition training, food safety culture training and internal auditor training aligned to FSSC 22000 requirements.
FSSC 22000 certification follows a structured sequence. Our part of the process typically takes a few weeks. The certification body audit timeline depends on their scheduling and is outside our control.
| Stage | What happens | Our role | Duration |
|---|---|---|---|
| 1. Gap assessment | Your system is reviewed against all three FSSC 22000 components. Every gap is identified and prioritised. | We conduct the assessment and deliver a written action plan covering ISO 22000, sector PRPs and FSSC additional requirements. | 2 to 3 days |
| 2. FSMS design | The food safety management system is designed and documented to ISO 22000:2018 requirements, including scope, policy, context analysis and all supporting procedures. | We write all documentation in collaboration with your food safety team. | 2 to 3 days |
| 3. PRP development | Sector-specific prerequisite programmes are documented to the relevant ISO 22002 standard for your food chain category. | We design and document all prerequisite programmes covering the full scope of the relevant ISO 22002 sector standard. | 3 to 5 days |
| 4. FSSC additional requirements | Food safety culture, food fraud plan, food defence plan, allergen programme and all other FSSC scheme-specific additional requirements are addressed and documented. | We develop all additional requirement documentation and evidence, including culture assessment tools and TACCP and VACCP plans. | 3 to 5 days |
| 5. Hazard analysis and HACCP | A site-specific hazard analysis is conducted. CCPs and OPRPs are determined with documented rationale. | We lead the hazard analysis process and document all outputs to ISO 22000 and FSSC 22000 requirements. | 3 to 5 days |
| 6. Implementation | The documented system is put into practice. Records are generated. The system runs for a minimum evidence period before audit. | We provide ongoing implementation support and review emerging records and corrective actions. | 2 to 4 weeks |
| 7. Internal audit and management review | A full internal audit covers all clauses and all three FSSC components. Management review outputs are documented. | We conduct the internal audit, prepare the management review pack and close all non-conformances. | 2 to 3 days |
| 8. Mock certification audit | A full mock audit replicates the certification body's approach across all FSSC 22000 components. | We conduct the mock audit, issue a graded findings report and close all identified non-conformances before the live audit. | 2 to 3 days |
| 9. Certification audit | The certification body conducts Stage 1 (document review) and Stage 2 (on-site audit). Non-conformances must be closed for certification. | We provide standby support and draft corrective action responses for any findings raised by the certification body. | Up to the certification body |
| 10. Ongoing surveillance | Annual surveillance audits. Recertification every three years. Version upgrade audits as required. | We provide a retainer covering document maintenance, surveillance preparation and ongoing helpline access. | Ongoing |
An FSSC 22000 gap assessment is more comprehensive than an ISO 22000 gap assessment because it must cover all three components of the scheme. It is the correct starting point for any new certification project or Version 7 transition.
Our FSSC 22000 gap assessment reviews your current food safety system against ISO 22000:2018, the relevant ISO 22002 sector PRP standard for your food chain category, and all FSSC 22000 additional requirements including food safety culture, food fraud, food defence and allergen management.
The assessment can be conducted remotely through document review and structured interviews, or on-site where the production environment requires a physical review. Most single-site businesses complete the assessment within one to two weeks.
We review your management system documentation against all 10 clauses of ISO 22000:2018, noting conformance, partial conformance and gaps.
We review your prerequisite programme documentation against the relevant ISO 22002 sector standard for your food chain category.
We review all FSSC scheme-specific additional requirements, including food safety culture, food fraud, food defence, allergen management and sustainability.
We produce a written gap assessment report with a prioritised action plan, timeline and resource estimate across all three FSSC 22000 components.
For businesses transitioning from Version 6 to Version 7, we offer a focused V7 gap assessment that reviews only the new and changed requirements, instead of repeating the full three-component assessment.
FSSC 22000 audits produce predictable non-conformances in predictable areas. The additional requirements and sector PRP clauses generate the highest density of findings because they are the areas most often under-resourced during implementation.
The FSSC additional requirements for allergen management go beyond basic HACCP allergen controls. Risk assessments, cleaning validation, labelling review procedures and cross-contact prevention measures must all be documented and evidenced. Missing any element is a non-conformance, and allergen management is the most cited clause in FSSC 22000 audits.
Auditors assess food safety culture by questioning staff at all levels, from the production floor to senior management. A food safety culture policy written by management but unknown to operators is a non-conformance. Version 7 has strengthened this requirement significantly, with measurable culture commitments expected throughout the organisation.
TACCP and VACCP plans must demonstrate a genuine vulnerability assessment methodology, not a generic template. Auditors test the rationale behind each vulnerability rating and the adequacy of each mitigation measure. Plans copied from templates without site-specific adaptation are consistently cited as non-conformances.
A documented supplier approval process is required. Auditors check that all active suppliers are on the approved list, that monitoring criteria are applied consistently, and that suppliers are re-evaluated at defined intervals. Missing supplier questionnaires, unapproved suppliers in use, or no evidence of re-evaluation are all regularly cited.
The ISO 22002 sector PRP standard requires documented monitoring records across all PRP areas. Missing records for cleaning verification, pest control visits, maintenance activities or environmental monitoring are among the most common PRP non-conformances. Records must demonstrate that PRPs are actively operating, with evidence, not procedures sitting in a folder unused.
Internal audit programmes that do not fully cover the FSSC additional requirements, or where non-conformances were raised but corrective actions were never closed or verified, are consistently flagged. Certification body auditors review a sample of closed internal audit findings in detail to assess the quality of the corrective action process.
ISO 22000 specifies precisely what must be covered in the management review. FSSC 22000 adds further inputs through its additional requirements. Missing even one specified input is a non-conformance. Records must show that all inputs were reviewed and that outputs, decisions and follow-up actions were documented and tracked.
The three most commonly compared food safety certification options for food manufacturers. The right choice depends on your customers, your sector and your target markets.
| FSSC 22000 v7 | ISO 22000:2018 | BRCGS Food Safety Issue 9 | |
|---|---|---|---|
| GFSI recognised | Yes | No | Yes |
| Published by | Foundation FSSC | ISO | BRCGS |
| Sectors covered | Manufacturing, catering, packaging, farming, feed, others | Any organisation in the food chain | Primarily food manufacturing and primary processing |
| Grading system | Certified or not certified | Certified or not certified | AA, A, B, C, D grades |
| Retailer acceptance | Accepted by all major global retailers | Not universally accepted as equivalent to GFSI | Accepted by all major global retailers. Originated in UK retail |
| Best for | Manufacturers and suppliers needing GFSI recognition across multiple markets | Businesses building FSMS maturity. Stepping stone to FSSC 22000 | Manufacturers where retailer grading and unannounced audits are required |
| Our consulting | FSSC 22000 | ISO 22000 | BRCGS Food Safety |
What drives the timeline and cost of an FSSC 22000 project. We provide a written proposal with a fixed fee after the initial consultation.
Timeline
How long our consulting work takes
Cost factors
What drives the consulting fee
No existing HACCP documentation or formal food safety management system. Our consulting work typically takes 4 to 6 weeks. Certification body scheduling is separate and outside our control.
The closer your current systems are to FSSC 22000 requirements across all three components, the less consulting time is required. The gap assessment establishes this precisely.
The management system is in place. The gap is primarily the sector PRP documentation and FSSC additional requirements. Our consulting work typically takes 2 to 3 weeks.
Single-site businesses with one product category require less work than multi-site manufacturers with complex product portfolios and multiple food chain categories.
Existing certified sites need to address the new Version 7 requirements. Our consulting work for the transition typically takes 1 to 2 weeks.
A gap assessment only, a full implementation programme, or a Version 7 transition support package each carry different fees. All scopes are defined in writing before work begins.
Documented HACCP and hygiene programmes in place but no management system structure. Our consulting work typically takes 2 to 4 weeks.
Certification body audit fees are separate from our consulting fees and paid directly to your chosen FSSC-licensed certification body. We advise on CB selection during the initial consultation.
Answers to the questions we hear most often from businesses starting or transitioning their FSSC 22000 certification.
FSSC 22000 is a Global Food Safety Initiative benchmarked certification scheme for food safety management systems. It is operated by the Foundation FSSC, an independent non-profit organisation. The scheme combines three components: ISO 22000:2018 as the core management system standard, the relevant ISO 22002 sector standard for prerequisite programmes, and additional FSSC 22000 scheme requirements. The current version is FSSC 22000 Version 7, published in May 2026.
ISO 22000 is the core management system standard on which FSSC 22000 is built. FSSC 22000 is a certification scheme that adds sector-specific prerequisite programme requirements from the ISO 22002 series and additional scheme requirements set by Foundation FSSC. The key practical difference is that FSSC 22000 is benchmarked by the Global Food Safety Initiative and is required by major food retailers worldwide, whereas ISO 22000 standalone is not GFSI-recognised.
FSSC 22000 Version 7 was published on 1 May 2026. It incorporates the updated ISO 22002:2025 prerequisite programme series, aligns with the GFSI Benchmarking Requirements 2024, and introduces strengthened requirements in areas including food safety culture, sustainability, allergen management, food loss and waste, equipment management and quality control. The 12-month transition period runs until 30 April 2027, after which all audits must be conducted against Version 7. All certified organisations must complete an upgrade audit by April 2028.
FSSC 22000 is required by most major food retailers and manufacturers as a condition of supply. It applies to food manufacturers, ingredient suppliers, food packaging manufacturers, catering and food service operations, storage and distribution businesses, and other organisations in the food chain. Businesses supplying retailers such as Walmart, Tesco, Carrefour, Aldi and Lidl, or manufacturers operating under major food brand supply agreements, are typically required to hold FSSC 22000 certification.
Our consulting work moves fast. From gap assessment to mock audit ready, most businesses are there in a few weeks. The total time to certificate depends on the certification body scheduling their audit, which is outside our control. We make sure our part never holds you up.
An FSSC 22000 gap assessment reviews your food safety management system against all three components of the scheme: ISO 22000:2018 clause by clause, the relevant ISO 22002 sector PRP standard, and the FSSC 22000 additional requirements. It identifies every gap, prioritises findings by severity, and produces a written action plan with a realistic timeline to certification. It is more comprehensive than an ISO 22000 gap assessment because it must also cover the sector PRP requirements and the scheme-specific additional requirements.
The most frequently cited non-conformances in FSSC 22000 audits are: incomplete or poorly evidenced allergen management programmes. Food safety culture requirements not embedded at all levels. Food fraud and food defence plans lacking sufficient depth. Supplier approval processes with gaps in monitoring or re-evaluation. Internal audits that are superficial or whose findings were not closed. Management review records missing required inputs. Prerequisite programme records that are incomplete or not kept current.
FSSC 22000 Version 7 was published on 1 May 2026. Audits against Version 6 remain valid until 30 April 2027. All certified organisations must complete an upgrade audit to Version 7 by April 2028. Organisations should begin their Version 7 gap assessment now to allow sufficient time for implementation before the transition deadline.
Yes. Gap assessments, FSMS design, documentation, prerequisite programme development, internal audit support and certification preparation are all available remotely. We work with clients in any country. On-site visits are available for mock certification audits and where the nature of the production environment makes remote review impractical.
Yes. Businesses already certified to ISO 22000 have a strong foundation for FSSC 22000 certification. The transition requires adding the relevant ISO 22002 sector PRP documentation and closing the gaps against the FSSC 22000 additional requirements. We conduct a specific ISO 22000 to FSSC 22000 gap assessment that focuses only on the additional requirements, instead of repeating the full ISO 22000 work already completed.
You can commission any of these on their own, with an agreed scope and a written quote, without taking on ongoing consulting. See all food safety services.
To establish the real size of the project before an audit date is booked.
Read about A gap assessment →Where the clause requires audits and nobody internal is independent enough.
Read about An internal audit →Where the programmes underneath the plan are carrying the load.
Read about A prerequisite programme review →To establish whether your controls were ever proven capable.
Read about A verification and validation review →Whether you are starting from scratch, upgrading from ISO 22000, or transitioning to Version 7, we will tell you exactly what needs to happen and how long it will take.