ISO 22000 Food Safety Management: Certification Guide for Food Businesses

ISO Certification · 2026-06-30 · 1 min read · CR Global Assurance Editorial Team

Food exporters and processors face strict buyer and regulatory expectations. ISO 22000 combines HACCP with a management system to control food safety hazards across the chain.

ISO 22000 specifies requirements for a food safety management system (FSMS). It applies to every organisation in the food chain — farms, processors, packaging manufacturers, storage, transport, caterers and retailers. CR Global Assurance audits and certifies ISO 22000 systems and offers ISO 22000 lead auditor training.

The building blocks of ISO 22000

  • Prerequisite programmes (PRPs) — basic hygiene conditions: building design, pest control, cleaning and sanitation, personal hygiene, water quality, waste management and supplier control.
  • HACCP — hazard analysis to identify biological, chemical, physical (and allergen) hazards, with critical control points (CCPs) and operational PRPs to control them.
  • Management system — the same high-level structure as ISO 9001: leadership, planning, support, operation, evaluation and improvement.
  • Interactive communication — with suppliers, customers and authorities along the food chain.

Certification steps

  1. Form a food safety team and define scope.
  2. Implement PRPs and verify their effectiveness.
  3. Conduct hazard analysis and establish the HACCP/OPRP plan.
  4. Validate control measures, set monitoring and corrective actions.
  5. Run internal audits, traceability and recall tests, and management review.
  6. Stage 1 and Stage 2 certification audits, then annual surveillance.

Frequent non-conformities

  • Hazard analysis that is generic rather than based on actual products and processes.
  • CCP monitoring records filled in after the fact.
  • Traceability tests never performed or taking too long.
  • Allergen controls not covering shared equipment.

ISO 22000 with CR Global

Food processors, beverage manufacturers and packaging suppliers work with CR Global Assurance — formerly CR Team — for ISO 22000 certification and training. Apply online or contact us for a quotation.

Frequently asked questions

What is the difference between HACCP and ISO 22000?

HACCP is a method for identifying and controlling food safety hazards. ISO 22000 includes HACCP principles within a complete management system with prerequisite programmes, leadership and continual improvement.

Who can get ISO 22000 certified?

Any organisation in the food chain, including farms, processors, packaging manufacturers, storage and logistics providers, caterers and retailers.

Does CR Global Assurance offer ISO 22000 training?

Yes. CR Global Assurance offers ISO 22000:2018 lead auditor training in addition to certification audits.