Prerequisite programmes are what HACCP and ISO 22000 are built on top of. We document them to the newly restructured ISO 22002 series, so your foundation holds up at audit, now and after FSSC 22000 Version 7.
ISO 22002 is a series of standards specifying prerequisite programmes, PRPs, for food safety: the basic environmental and operational conditions, such as hygiene, cleaning, pest control, and training, needed to support a food safety management system built on ISO 22000. PRPs are required under Clause 8.2 of ISO 22000:2018, which sets out that an organisation must establish, implement and maintain PRPs to assist in controlling food safety hazards.
For 15 years, the series existed as a set of technical specifications, ISO/TS 22002-1 through ISO/TS 22002-6, each covering a different sector of the food supply chain. These specifications were written separately, leading to duplication: requirements like training, cleaning, and pest control appeared with slight variations across multiple parts, sometimes creating contradictions for organisations operating across more than one sector.
In July 2025, ISO Technical Committee 34/SC 17 published a completely revised series, addressing this structural issue. The revision introduces ISO 22002-100:2025 as a new common foundation, consolidating the generic requirements previously duplicated across sector-specific parts, with the sector-specific parts revised to work alongside Part 100 instead of repeating its content. A new part covering retail and wholesale was also added.
ISO 22002 itself is not a standalone certifiable standard. It supports certification to ISO 22000, and, by extension, GFSI-recognised schemes such as FSSC 22000 that are built on the ISO 22000 framework. An auditor assessing ISO 22000 or FSSC 22000 conformity evaluates PRPs against ISO 22002 requirements as part of that broader assessment, instead of issuing a separate ISO 22002 certificate.
Every organisation applies ISO 22002-100 alongside whichever sector-specific part, or parts, match its activities.
Generic PRP requirements applying to all sectors: hygiene, cleaning, pest control, training, management leadership and food safety culture, mirroring ISO 22000's high-level structure.
PRP requirements specific to food manufacturing facilities and processes.
PRP requirements for food and beverage catering operations.
PRP requirements for farming and primary production activities.
PRP requirements for food packaging manufacturing.
PRP requirements for transport and storage activities across the food supply chain, applicable to all organisations regardless of size.
PRP requirements for animal feed and pet food production.
A new sector-specific part added in the 2025 revision, covering retail and wholesale operations for the first time.
Some sectors, such as trading or services, don't require additional sector-specific PRPs beyond Part 100, while others, such as food manufacturing or catering, do. For organisations operating across multiple sectors, for example a manufacturer that also handles its own transport and storage, Part 100 provides a shared foundation, with the relevant sector-specific parts applied on top for each activity.
The July 2025 revision is the most significant change to the ISO 22002 series in 15 years, and FSSC 22000 Version 7 is expected to make alignment a scheme requirement.
The revised ISO 22002 series, including ISO 22002-100:2025 and the updated sector-specific parts, is published and available now. What follows for FSSC 22000-certified organisations depends on Version 7 of the scheme, which is expected but not yet formally confirmed in all its details.
The restructured ISO 22002 series, with Part 100 as the common foundation and a new retail and wholesale part, is published and available for use.
FSSC 22000 Version 7 is anticipated to require certified organisations to align PRPs with the restructured series, applying Part 100 alongside the relevant sector-specific standard.
A transition period is anticipated during which organisations complete the upgrade, with upgrade audits taking place in this window. Formal timelines will be confirmed by the Foundation FSSC 22000 as part of the Version 7 release.
The revised ISO 22002 standards do not automatically apply to existing FSSC 22000 certifications until Version 7's transition requirements are formally confirmed. For organisations not yet certified, building PRP documentation against the new ISO 22002-100:2025 structure from the outset avoids a restructuring exercise later. For organisations already certified under the previous ISO/TS 22002 series, the practical opportunity is to begin mapping current PRP documentation against the new Part 100 plus sector-specific structure now, so that when Version 7's transition window opens, the upgrade is largely a documentation reorganisation and not a rebuild from scratch.
Any organisation building or maintaining PRPs to support ISO 22000 or FSSC 22000 certification needs ISO 22002-aligned documentation.
Organisations building PRP documentation for the first time, working directly from the 2025 restructured series in place of the superseded ISO/TS parts.
Businesses needing to plan for Version 7's anticipated requirement to align PRPs with ISO 22002-100:2025 and the relevant sector-specific part.
Organisations spanning manufacturing, transport, storage, or retail needing Part 100 as a shared foundation with multiple sector-specific parts layered on top.
Businesses newly covered by the dedicated retail and wholesale part introduced in the 2025 revision.
Organisations across the food supply chain needing PRPs aligned with the transport and storage part, regardless of size or complexity.
Businesses producing food packaging and packaging materials needing PRPs aligned with the packaging-specific part alongside Part 100.
We cover the full scope of PRP documentation, from first build to FSSC 22000 Version 7 transition.
A review of existing prerequisite programmes against ISO 22002-100:2025 and the relevant sector-specific part, identifying gaps and producing a written action plan.
Development of PRP documentation covering hygiene, cleaning, pest control, training, and other categories, built directly against the 2025 restructured series.
Mapping of existing PRP documentation against the new Part 100 plus sector-specific structure, ready for Version 7's anticipated transition window.
Consolidation of PRPs for organisations operating across multiple sectors, using Part 100 as the shared foundation with sector-specific parts layered appropriately.
Development of PRP documentation against the new retail and wholesale part introduced in the 2025 revision.
Development of PRP documentation for transport and storage activities, applicable to organisations of any size handling food, feed or packaging materials.
Integration of the management leadership and food safety culture emphasis in Part 100 into existing management systems.
A full mock audit reviewing PRP documentation and on-site practice against ISO 22002-100:2025 and the relevant sector-specific part.
Ongoing monitoring of FSSC 22000 Version 7 publication and transition timelines, with practical guidance issued as details are confirmed.
Implementation follows a defined sequence. Our part of the process typically takes a few weeks. Certification body audit scheduling is outside our control.
| Stage | What happens | Our role | Duration |
|---|---|---|---|
| 1. Sector and scope confirmation | Activities are mapped against Part 100 and the relevant sector-specific part, or parts, for multi-sector operations. | We confirm which parts of the series apply to your operation. | 1 to 2 days |
| 2. PRP gap assessment | Existing PRP documentation and practice are reviewed against ISO 22002-100:2025 and sector-specific requirements. | We conduct the assessment and deliver a written action plan. | 2 to 3 days |
| 3. PRP documentation development | Documentation covering hygiene, cleaning, pest control, training and other PRP categories is developed or restructured. | We develop documentation in collaboration with your team, sized to your operation. | 1 to 2 weeks |
| 4. Food safety culture integration | Management leadership and food safety culture elements emphasised in Part 100 are integrated into the management system. | We develop the relevant documentation and procedures. | 3 to 5 days |
| 5. Implementation | PRPs are put into practice. Records begin to accumulate. | We provide implementation support and review emerging records. | 2 to 3 weeks |
| 6. Mock audit | A full mock audit identifies any remaining gaps before a certification body visit. | We conduct the mock audit and issue a findings report. | 1 to 2 days |
| 7. ISO 22000/FSSC 22000 audit | The certification body assesses PRPs against ISO 22002 as part of the broader ISO 22000 or FSSC 22000 audit. | We provide standby support and prepare responses to any findings. | Up to the certification body |
| 8. FSSC 22000 V7 transition (if applicable) | Certified organisations align PRPs with the restructured series during the anticipated transition window. | We support the transition mapping and documentation update. | Per FSSC 22000 V7 timeline |
Our gap assessment confirms which parts of the restructured series apply, and reviews your current PRPs against them.
The assessment covers PRP categories such as construction and layout, utilities, waste management, equipment suitability, cleaning and sanitation, pest control, personnel hygiene, and training, reviewed against ISO 22002-100:2025 and the relevant sector-specific part, or parts, for your operation.
For organisations already certified under the previous ISO/TS 22002 series, the assessment specifically identifies which existing documentation maps cleanly to the new Part 100 plus sector-specific structure, and which needs reorganising or rewriting ahead of FSSC 22000 Version 7's anticipated transition window.
We confirm which sector-specific part, or parts, apply alongside Part 100 for your activities.
We review each PRP category against Part 100 and sector-specific requirements.
For previously certified organisations, we map existing documentation against the new structure.
We produce a written gap assessment with a prioritised action plan.
If you are also pursuing ISO 22000, FSSC 22000, or a related certification, we identify how this PRP work supports that scheme's requirements, avoiding duplicated effort.
The same issues appear across PRP-related findings regardless of sector. Knowing where these gaps cluster is the most effective preparation.
A PRP that exists as a document but is not reflected in day-to-day practice, particularly for categories such as cleaning and pest control where records are expected to demonstrate ongoing verification, is one of the most common findings.
Organisations whose activities span more than one sector, such as a manufacturer that also handles its own transport and storage, sometimes apply only the manufacturing-specific part, missing the additional requirements the transport and storage part would introduce.
A facility change, new equipment, or new activity that is not reflected in PRP documentation leaves the documented programme describing an operation that no longer matches current reality.
Training records that confirm attendance at a session, but do not demonstrate that personnel understand the hygiene requirements relevant to their specific role, fall short of what auditors expect from the training PRP category.
Organisations certified under the previous ISO/TS 22002 series that have not yet begun planning for the restructuring required to align with ISO 22002-100:2025 risk a compressed timeline once FSSC 22000 Version 7's transition window opens.
The management leadership and food safety culture emphasis introduced in Part 100 is sometimes treated as a separate initiative and not integrated into the PRP documentation and management system it is now part of.
Understanding how ISO 22002 fits within the broader ISO 22000 and FSSC 22000 framework clarifies what's certifiable and what supports certification.
| ISO 22002 | ISO 22000 | FSSC 22000 | |
|---|---|---|---|
| What it is | PRP requirements (Part 100 + sector-specific) | Food safety management system standard | GFSI-recognised certification scheme |
| Certifiable on its own | No | Yes | Yes |
| Relationship | Supports Clause 8.2 of ISO 22000 | Built using ISO 22002 PRPs | Built on ISO 22000 plus additional requirements (incl. ISO 22002 from V7) |
| Our consulting | ISO 22002 | ISO 22000 | FSSC 22000 |
What drives the timeline and cost of an ISO 22002 project. We provide a written proposal with a fixed fee after the initial consultation.
Timeline
How long our consulting work takes
Cost factors
What drives the consulting fee
No existing PRP documentation, one sector-specific part applies. Our consulting work typically takes 2 to 3 weeks.
Existing ISO/TS 22002 documentation needing mapping against the 2025 restructured series ahead of Version 7. Our consulting work typically takes 1 to 2 weeks.
Operations spanning multiple sector-specific parts needing consolidation under the Part 100 foundation, scoped to the number of sectors involved.
Businesses newly applying the retail and wholesale part, or the transport and storage part for the first time.
A single-site operation requires less PRP documentation work than a multi-site business, particularly where sites have different activities.
Organisations already certified to BRCGS, SQF, or similar typically have prerequisite programme documentation that can be mapped against ISO 22002-100:2025 with a focused review.
A gap assessment only, a full PRP build, or an FSSC 22000 V7 transition package each carry different fees. All scopes are defined in writing before work begins.
Audit fees for ISO 22000 or FSSC 22000 certification are set by the certification body and are separate from our consulting fees.
Answers to the questions we hear most often from organisations building or maintaining prerequisite programmes.
ISO 22002 is a series of standards specifying prerequisite programmes, PRPs, for food safety: the basic environmental and operational conditions, such as hygiene, cleaning, pest control, and training, needed to support a food safety management system built on ISO 22000. PRPs are required under Clause 8.2 of ISO 22000:2018, which sets out that an organisation must establish, implement and maintain PRPs to assist in controlling food safety hazards. Originally published as a series of technical specifications, ISO/TS 22002-1 through ISO/TS 22002-6, covering different sectors, the series was completely revised and republished as International Standards in July 2025.
In July 2025, ISO published a completely revised ISO 22002 series. The revision introduces a new common foundation, ISO 22002-100:2025, Prerequisite programmes on food safety, Requirements for the food, feed and packaging supply chain, which consolidates generic PRP requirements, such as training, cleaning and pest control, that were previously repeated with variations across the sector-specific parts. The revised sector-specific parts now work alongside Part 100 instead of duplicating its content, and the series also gained a new part covering retail and wholesale. The new parts align more closely with the clauses of ISO 22000, with Part 100 emphasising management leadership, food safety culture and continuous improvement, mirroring ISO 22000's high-level structure.
ISO 22002-100:2025 sets out the common prerequisite programme requirements for food safety across the entire food, feed and packaging supply chain, unifying essential hygiene and safety practices that organisations must implement as part of a food safety management system aligned with ISO 22000:2018. Instead of duplicating sector-specific PRP content, Part 100 consolidates the shared requirements from the sector-specific parts into one foundational document, used in conjunction with the relevant sector-specific part for a complete PRP programme. It applies to any organisation in the food, feed or packaging supply chain, from raw material handling and manufacturing to transport, storage, and retail.
The ISO 22002 series covers different sectors of the food supply chain through sector-specific parts, each used alongside Part 100. These cover food manufacturing, food and beverage catering, farming and primary production, food packaging manufacturing, transport and storage, and animal feed and pet food production, with a new part covering retail and wholesale added in the 2025 revision. An organisation determines which sector-specific part, or parts, apply based on its activities, and applies these alongside the generic requirements in Part 100.
FSSC 22000 Version 7, expected to be published around May 2026, is anticipated to require certified organisations to align their prerequisite programmes with the restructured ISO 22002 series, including applying ISO 22002-100:2025 alongside the relevant sector-specific standard, as part of the scheme's requirements. A transition period of approximately 12 months is anticipated, during which organisations would be expected to complete the upgrade, with upgrade audits taking place during this window. The revised ISO 22002 standards do not automatically apply to existing FSSC 22000 certifications until Version 7's transition requirements are formally confirmed.
ISO 22002 is not a standalone certifiable standard. It specifies prerequisite programme requirements that support certification to ISO 22000, and, by extension, GFSI-recognised schemes such as FSSC 22000 that are built on the ISO 22000 framework. An organisation does not receive a separate ISO 22002 certificate. Instead, an auditor assessing conformity with ISO 22000 or FSSC 22000 will assess whether the organisation's PRPs meet ISO 22002 requirements as part of that broader assessment.
An ISO 22002 gap assessment reviews existing prerequisite programmes, covering categories such as construction and layout, utilities, waste management, equipment suitability, cleaning and sanitation, pest control, personnel hygiene, and training, against the requirements of ISO 22002-100:2025 and the relevant sector-specific part. For organisations already certified to ISO 22000 or FSSC 22000 under the previous ISO/TS 22002 series, the assessment specifically identifies gaps that would need addressing to align with the restructured 2025 series ahead of FSSC 22000 Version 7.
The most common ISO 22002 issues are: PRPs that exist as documents but are not reflected in day-to-day practice, particularly for categories such as cleaning and pest control where records are expected to demonstrate ongoing verification. Organisations applying only one sector-specific part when their activities span more than one, such as a manufacturer that also handles transport and storage. PRP documentation not updated following a facility change, new equipment, or new activity. Training records not demonstrating that personnel understand the hygiene requirements relevant to their role, beyond simply attending a session. And, for organisations certified under the previous ISO/TS 22002 series, not yet planning for the restructuring required to align with ISO 22002-100:2025 ahead of FSSC 22000 Version 7.
Our consulting work moves fast. From gap assessment to fully documented prerequisite programmes ready for implementation, most operations are there in a few weeks. For organisations transitioning from the previous ISO/TS 22002 series to the 2025 restructured series ahead of FSSC 22000 Version 7, the scope depends on how much existing documentation can be reorganised versus rewritten. Certification body audit scheduling is separate and outside our control.
Yes. Gap assessments, PRP documentation development, and FSSC 22000 Version 7 transition planning are all available remotely. We work with clients worldwide. On-site visits are available for mock audits and where a physical review of facilities against PRP categories such as layout, utilities, and pest control is needed.
You can commission any of these on their own, with an agreed scope and a written quote, without taking on ongoing consulting. See all food safety services.
Where the programmes underneath the plan are carrying the load.
Read about A prerequisite programme review →Where fabrication, zoning or flows are the underlying problem.
Read about A facility hygiene assessment →Where changeover cleaning has never been validated.
Read about A cleaning and sanitation review →Tell us about your sector, your activities and your current certification status. We will tell you exactly what the restructured ISO 22002 series requires.