ISO 22000:2018
ISO 22000:2018 combines prerequisite programs, HACCP principles and risk-based thinking into one management system for food safety.
Who It Fits
- Food production, processing and packaging facilities
- Storage, logistics and distribution operations in the food chain
- Catering and hotel kitchen operations
Core Requirements
- Food safety policy with measurable objectives
- Hazard analysis with CCP/OPRP monitoring criteria
- Traceability, nonconformity and recall procedures
Practical Standard Focus
ISO 22000:2018 requires coordinated food-chain communication, robust PRPs and evidence-based hazard decisions. The real outcome is not just certification, but stable prevention across sourcing, production and distribution.
Implementation Steps
- Gap review and baseline assessment
- Process documentation and staff role training
- Internal audit and corrective action closure before certification
Audit and Certification Pathway
- Initial technical review of scope, objectives and applicable obligations.
- Documentation build-out and verification of real operational implementation.
- Internal audit with corrective-action closure based on objective evidence.
- External certification audit (stage 1/2), surveillance and ongoing maintenance.
Business Benefits
- Lower food safety incident risk
- Stronger trust with clients and business partners
- Improved process control and accountability
Typical implementation timeline: 8-14 weeks depending on scope.
Typical Evidence and Documented Information
- Hazard analysis with clear CCP/OPRP logic and acceptance criteria.
- Validation records, traceability mapping and product recall testing.
- Monitoring evidence for temperatures, sanitation, nonconformities and CAPA.
Common Readiness Gaps Before Audit
- Weak distinction between PRPs, OPRPs and CCPs.
- Records completed formally without trend analysis.
- Insufficient allergen and supplier-risk control evidence.
Frequently Asked Questions
Does ISO 22000 replace HACCP?
ISO 22000 includes HACCP principles while adding management-system controls and governance requirements.
Can smaller businesses implement it?
Yes. The framework scales to organization size as long as responsibilities, procedures and records are clearly defined.