FSSC 22000: Food Safety Management with AI

ISO 22000 is a food safety management system standard with HACCP principles as foundation. FSSC 22000 is a third-party certified scheme that combines ISO 22000 + PAS 220 (prerequisite programs for food manufacturing). PAS 220 adds requirements for food defense, environmental monitoring (especially Listeria), allergen management, and traceability. FSSC 22000 is recognized by GFSI, while ISO 22000 alone is not third-party certification but a management system standard.

Prerequisite Programs (PRPs) under PAS 220 are foundational controls covering: facility design and maintenance, pest control, cleaning and sanitation, personnel hygiene, supplier/ingredient verification, storage conditions, and equipment calibration. PRPs create the operational environment in which HACCP functions. Unlike HACCP (which controls specific hazards), PRPs are continuous background controls. FSSC 22000 audits verify PRPs are documented, implemented, and monitored.

FSSC 22000 requires third-party audit by accredited certification bodies. Initial audit (Stage 1 and 2) is full documentation and facility review. Surveillance audits occur annually or 18 months depending on risk and version. Re-certification every 3 years. Audit scope includes HACCP system verification, PAS 220 prerequisite programs compliance, food defense controls, environmental monitoring program, and management review effectiveness. Non-conformities lead to corrective action requirements.

Food defense (VACCP — Vulnerability Assessment Critical Control Points) under FSSC 22000 requires assessment of intentional contamination risks and mitigation measures. Controls include: facility perimeter security, personnel access control, visitor management, raw material inspection for tampering, product packaging integrity verification, and recall procedures. FSSC 22000 v5.2 (2023) strengthened food defense requirements. Documentation must show systematic assessment and preventive measures.

Environmental monitoring (EM) in FSSC 22000 targets pathogens in the processing environment, particularly Listeria monocytogenes for ready-to-eat products. Requirements include: baseline microbiological survey, sampling plan (swabs from floors, equipment, walls), monitoring frequency based on risk, testing method protocols, documentation of results, and corrective action if pathogens detected. FSSC 22000 v5.2 expanded EM scope and frequency requirements. EM results must inform cleaning validation and process controls.

FSSC 22000 allergen management requires: complete ingredient ingredient inventory with allergen labeling, product formulation assessment for presence of major allergens (ISO 21408), cross-contamination risk analysis, control measures (segregation, cleaning, sequence), finished product testing/verification, and labeling verification. For cross-contaminated products (precautionary labeling), document threshold assessments per ISO 20932 or scientific evidence. Traceability of allergen sources is mandatory.

Certification requires: (1) Accredited Certification Body (CB) conducts audit (independent, ISO 17065 accredited); (2) Facility meets all requirements of ISO 22000 + PAS 220; (3) Documentation package reviewed (HACCP plan, PRPs, food defense assessment, environmental monitoring results, audit records); (4) Non-conformities closed before certificate issuance; (5) Certificate valid 3 years; (6) Annual surveillance audits. Cost varies by facility size/complexity. Certification adds credibility with retailers and regulatory authorities.

Yes. FSSC 22000 is often combined with BRC Food Safety or IFS Food. Many facilities pursue FSSC 22000 + BRC or IFS + FSSC for broader market access. Since FSSC 22000 covers ISO 22000, there is some overlap. Retailers increasingly accept FSSC 22000 as primary; some still demand IFS or BRC. Dual certification requires separate audit cycles but system documentation can be aligned. FSSC 22000 covers foundational requirements; IFS/BRC add retailer-specific demands.