ISO MeQualifications guide · UK
Menu

Food safety · FSMS

ISO 22000:2018

Requirements for a food safety management system for any organisation in the food chain, combining management-system elements with prerequisite programmes and hazard analysis based on HACCP principles.

Full title
Food safety management systems — Requirements for any organization in the food chain
Edition
2nd edition, June 2018, with Amendment 1:2024 (climate action changes)
Status
Revision under way iso.org lists ISO 22000:2018 as “to be revised”, with a new edition under development at ISO/DIS stage.
Type
Requirements standard — organisations can be certified against it
Official page
View ISO 22000 on iso.org

1 What it covers

ISO 22000 combines a management system with the technical controls of food safety: prerequisite programmes (PRPs) for basic hygiene and good practice, a hazard analysis based on the Codex HACCP principles, and a hazard control plan covering critical control points and operational prerequisite programmes. It can be used by farms, processors, caterers, retailers, packaging makers, transport and storage firms — anyone in the food chain.

IRCA's food safety auditor scheme covers ISO 22000 together with FSSC 22000, and several UK courses are titled “ISO/FSSC 22000”.

2 Who uses it

Food manufacturers, packaging suppliers, caterers, food logistics and retailers. Food safety and technical managers and supplier auditors are the main audience.

3 Structure and key clauses

Clauses 4–10 follow the high-level structure; clause 8 contains the food-safety system:

8 Operation

  • 8.2 Prerequisite programmes (PRPs)
  • 8.3 Traceability system
  • 8.4 Emergency preparedness and response
  • 8.5 Hazard control (including 8.5.2 Hazard analysis and 8.5.4 Hazard control plan — HACCP/OPRP plan)
  • 8.7 Control of monitoring and measuring
  • 8.9 Control of product and process nonconformities

4 Key facts for courses and exams

  • Current edition: ISO 22000:2018 + Amendment 1:2024; a revision is at DIS stage (iso.org, October 2026).
  • The 2018 edition describes two Plan-Do-Check-Act cycles: one for the management system and one for the operational hazard-control processes.
  • Control measures are managed either at critical control points (CCPs) or as operational prerequisite programmes (OPRPs).

5 ISO 22000 qualifications

QualificationUK courses listed
ISO 22000 Foundation / requirements1
ISO 22000 Internal auditor4
ISO 22000 Lead auditor2

S Sources

Facts on this page last checked 3 October 2026.

  1. iso.org, ISO 22000:2018 page — https://www.iso.org/standard/65464.html