FSSC 22000 is a food safety certification that GFSI recognizes. It puts ISO 22000, sector-specific prerequisite programs, and a set of added FSSC rules under one audit. A site that earns it can show buyers that it manages food safety hazards at every stage, from receiving raw materials to loading the final shipment.
What Is FSSC 22000 Certification and Who Runs It?
A Dutch nonprofit called Foundation FSSC owns and manages the scheme. The Foundation sets the rules, approves the certification bodies, and revises the requirements as new risks appear. Version 6 is the latest release I know of, and it gives extra attention to quality culture, food waste, and equipment management. Check the Foundation's website for the current version, since requirements change over time.
FSSC stands for Food Safety System Certification. An independent auditor comes to your site and looks at how your team works. The certificate depends on what happens on the production floor. A well-written manual helps, but it never replaces real practice.
What Are the Three Building Blocks of FSSC 22000?
- The first block is ISO 22000 Certification, the international standard for food safety management. It covers hazard analysis, HACCP principles, and the duties of top management.
- The second block is a set of prerequisite programs, and these depend on your sector. Food manufacturers follow ISO/TS 22002-1, while packaging producers follow ISO/TS 22002-4.
- The third block is the FSSC additions. These cover allergen management, food fraud, food defence, environmental monitoring, and a few other areas. Many sites treat them as a small extra, but they often take more work than people expect.
Who Needs FSSC 22000 Certification?
Big retailers and global food brands are required to have a GFSI-recognized certificate, and FSSC 22000 Certification is one of the options they accept.
The scheme covers more than food factories.
- Food manufacturers, such as dairy, meat, bakery, beverage, and ingredient plants
- Producers of food-contact packaging, including cartons, films, and containers
- Animal feed and pet food facilities
- Warehouses and transport companies that handle food
- Central kitchens and large catering operations
How Is FSSC 22000 Different From ISO 22000?
| Key Area |
ISO 22000 |
FSSC 22000 |
| Requirements |
Defines requirements for a food safety management system (FSMS) |
Includes ISO 22000 requirements along with additional scheme requirements. |
| Prerequisite Programs (PRPs) |
Requires prerequisite programs to control basic food safety conditions. |
Requires applicable sector-specific PRP standards, such as those in the ISO 22002 series. |
| Additional Control |
Covers food safety hazards, risk management and operational controls. |
Adds requirements covering areas such as food fraud, food defense, allergen management and food safety culture. |
| GFSI Recognition |
Certification is not recognized by GFSI. |
The scheme is recognized by the Global Food Safety Initiative (GFSI). |
| Certification Process |
Certification is conducted by an appropriately accredited certification body. |
Certification follows the FSSC scheme rules through a licensed certification body. |
What Are the ISO Certification Requirements for FSSC 22000?
The standard expects a system that works in daily life. Auditors pay little attention to the size of your document folder. They watch your people at work and check whether they follow the plan on every shift, nights included.
What Must Your Food Safety System Include?
Leadership comes first. Top management writes the food safety policy, assigns responsibilities, and supplies the staff and budget the system needs.
Your food safety team then studies each process step and records the biological, chemical, physical, and allergen hazards. Critical control points and operational prerequisite programs each need limits, monitoring, and corrective actions. Teams often neglect corrective action. If a reading moves out of range, the operator has to know the next step immediately.
Supplier control matters as well. Keep an approved supplier list, write clear specifications, and check deliveries when they arrive. A problem caught at the loading dock costs far less than one found on the line.
Records tie everything together. Internal audits, management reviews, and trend data prove that the system keeps working between certification audits. They also help when an unannounced audit shows up.
How Do You Get FSSC 22000 Certified?
Most sites need several months. Three things set the pace. These are the size of the site, the systems already in place, and how quickly the team fixes its gaps. Sites with strong HACCP and prerequisite programs often finish earlier.
What Are the FSSC 22000 Certification Steps?
- Gap Assessment: Compare what you do today with the standard and list every missing piece. Be strict, because a lenient review only pushes problems into the audit.
- System Build: Write the procedures, train your people, and set up monitoring.
- Internal Audit: Check your own system before an outside auditor does.
- Stage 1 Audit: The auditor reads your documents and decides whether your site is ready to continue.
- Stage 2 Audit: The auditor tours your operation and talks to your staff to confirm the system runs in practice.
- Certificate Decision: The certification body checks the audit report, confirms you fixed every issue, and gives the certificate.
How Do You Choose an Authorized Body for the Certificate?
Only licensed bodies can issue a valid FSSC 22000 certificate. The body needs accreditation from a recognized accreditation body and an agreement with Foundation FSSC. Look it up in the public FSSC database before you sign a contract.
After that, ask three simple questions:
- Do the auditors know your sector?
- Can the body work in your region and language?
- How does it handle follow-up on nonconformities?
A vague answer to the last one is a warning sign.
How Long Does the Certificate Last & How Much Does It Cost?
The certificate stays valid for three years. A surveillance audit takes place each year, and at least one audit in every cycle comes without notice. A missed unannounced audit can lead to suspension.
Your price depends on the size of the site, the number of employees, the complexity of your products, and whether you hire a consultant. Request quotes from several ISO certification bodies. Compare the audit days along with the fee, since a low price sometimes means fewer days.
What Delays the FSSC 22000 Certification Process?
- Weak Hazard Analysis: Some teams copy a template instead of studying their own process. Auditors usually spot this quickly, and a template cannot describe how your business actually runs.
- Late Food Fraud Assessment: Many teams leave the vulnerability assessment until the audit is close. The rush shows in the result.
- Poor Staff Training: Auditors interview employees, and anyone who cannot explain a procedure gives them an easy finding.
- Missing Records: Without logs, you cannot prove good practice, even when the work is done well.
In a Nutshell
FSSC 22000 gives food businesses a recognized way to prove they control food safety. It builds on ISO 22000, sector prerequisite programs, and the FSSC additions, and licensed ISO certification bodies perform the audits. Begin with an honest gap assessment, train your staff until they can explain their own work, and pick an ISO certification body that understands your sector.