FSSC 22000 - Food Safety System Certification

FSSC 22000 v6 Additional Requirements - FSSC-specific scheme additions beyond ISO 22000 + ISO/TS 22002-x (publicly available + downloadable from fssc.com). KEY REQUIREMENTS: (1) FOOD SAFETY AND QUALITY CULTURE - documented program with leadership behaviour + training + recognition + competence + retention + 4-pillar approach (Vision + Values + Behaviour + Performance) + measured via culture surveys + KPIs; (2) FOOD DEFENSE (TACCP - Threat Assessment Critical Control Points) - threat identification + threat assessment + critical control points + mitigation + monitoring + verification + against intentional + ideologically + economically motivated tampering + insider threats + cyber-attack on food safety systems; (3) FOOD FRAUD MITIGATION (VACCP - Vulnerability Assessment Critical Control Points) - vulnerability assessment per material + supplier + economic incentive + opportunity + adulter

• Culture programme + KPIs
• TACCP assessment + monitoring
• VACCP vulnerability assessment
• Allergen + Environmental + Labelling records

• Culture programme superficial
• TACCP / VACCP ad-hoc
• Allergen / Environmental monitoring gaps
• FSSC v6 Quality Culture not addressed

FSSC 22000 certification + audit process. CERTIFICATION BODY (CB) accreditation: CBs must be accredited under ISO/IEC 17021-1 + ISO 22003 + the FSSC 22000 scheme requirements; major CBs include SGS + Bureau Veritas + DNV + DEKRA + TUV SUD + LRQA + others. CERTIFICATION CYCLE: (a) INITIAL CERTIFICATION AUDIT - 2 stages (Stage 1 documentation review + Stage 2 implementation audit on-site); (b) ANNUAL SURVEILLANCE AUDITS (at least once per year); (c) RECERTIFICATION AUDIT every 3 YEARS; (d) UNANNOUNCED AUDIT - at least 1 per 3-year cycle (typically the second surveillance audit); typically 24-72 hour notice for unannounced audits. AUDIT DURATION: depends on scope + complexity + employee count + product range + risk; typical 3-5 audit days for medium manufacturer. AUDITOR COMPETENCY (FSSC scheme requirements): qualified ISO 22000 lead auditor + sector-specific food safety experience + HACCP

• Certificate + CB engagement
• Audit plan + reports
• Auditor competency review
• CAP documentation + closure

• CB without proper accreditation
• Audit cycle skipped
• Auditor competency gaps
• CAPs not closed in timely manner

FSSC 22000 coordination with other GFSI-recognized food safety schemes. BRCGS GLOBAL STANDARD FOR FOOD SAFETY (currently Issue 9 of 2022): UK-origin scheme + similar GFSI-recognized coverage; widely adopted in UK + Europe + US; differs from FSSC 22000 in being a single-standard approach (vs FSSC 22000 multi-standard) + with detailed prescriptive requirements + more focus on retail-buyer needs. IFS FOOD (International Featured Standard for Food) v8 of 2023: German + French + Italian-origin scheme; similar GFSI coverage; widely adopted in DACH + France + Italy + Eastern Europe; checklist-style assessment + KO (knockout) requirements. SQF (Safe Quality Food) Edition 9 of 2021: SQF Institute scheme administered by Food Marketing Institute (FMI); US-origin + widely adopted in US + Canada + Australia; integrated quality + food safety. GLOBAL G.A.P. (Good Agricultural Practice): focused on PRIM

• Multi-scheme certification plan + cross-walks
• Customer GFSI requirements mapping
• Geography-specific scheme preference

• GFSI equivalence misunderstood
• Customer multi-scheme requirements missed
• Geography-specific preference not honored

FSSC 22000 coordination with global + regional + national food safety regimes. GFSI (Global Food Safety Initiative): FSSC 22000 is one of ~10 GFSI-RECOGNIZED SCHEMES (alongside BRCGS Food + IFS Food + SQF + Global G.A.P. + IFS PACsecure + others); GFSI provides benchmarking + equivalence + buyer recognition (e.g. Walmart + Carrefour + Tesco + Coca-Cola + Nestle accept any GFSI scheme). FDA (US Food and Drug Administration): FDA Food Safety Modernization Act (FSMA) + 21 CFR Parts 110 + 111 + 117 (CGMP) + Part 120 (juice HACCP) + Part 123 (seafood HACCP) + Part 121 (intentional adulteration) - FSSC 22000-certified facilities typically demonstrate FSMA compliance. EU FOOD LAW: Regulation (EC) 178/2002 (General Food Law) + 852/2004 (Hygiene of Foodstuffs) + 853/2004 (Specific Hygiene Animal Origin) + 1169/2011 (Food Information to Consumers) + 1881/2006 (Contaminants) + various sector-specif

• GFSI registry + buyer-recognition
• FDA FSMA compliance evidence
• EU food law cross-reference
• National authority coordination

• GFSI status unclear
• FSMA + EU food law gaps
• Codex / national coordination skipped
• Emerging areas (cyber + AI + climate) not anticipated

FSSC 22000 market adoption + implementation status. CERTIFICATES: approximately 30,000 FSSC 22000 certificates worldwide as of 2024 (per FSSC Foundation annual statistics); largest concentrations in (1) Europe (~12,000), (2) Asia-Pacific (~10,000), (3) North America (~5,000), (4) Latin America (~2,000), (5) Africa + Middle East (~1,000). SECTORS: food manufacturing dominant (~70%); packaging + catering + animal feed + storage + transport growing. CERTIFICATE-HOLDER PROFILE: from multinational FMCG (Nestle + Unilever + Mondelez + PepsiCo + Mars + Coca-Cola + others) to small/medium manufacturers; FSSC offers SME-specific implementation support. CB MARKET: ~20 major Certification Bodies globally + many smaller regional CBs; SGS + Bureau Veritas + DNV + DEKRA + LRQA + TUV are largest. FSSC FOUNDATION: governance + scheme owner + Stakeholder Board + technical committees; revenue from licensi

• Certificate inventory + sector
• CB engagement records
• Training records + auditor competency

• Market adoption not tracked
• Sector applicability mismatch
• CB engagement weak
• Training records gap

FSSC 22000 v6.0 implementation status + v6.1 pipeline. v6.0: published April 2023; mandatory transition from v5.1 by 31 March 2024; effective audits 1 April 2024 + later; major changes from v5.1 included (a) Quality Culture + Loss Reduction + Food Loss + Waste; (b) updated Food Defense + Food Fraud requirements; (c) Equipment Management + Hazard Control + Allergen + Environmental Monitoring refinements; (d) Logo Use update; (e) Supplier + Service Provider Approval. v6.1 (EXPECTED 2025-2026): anticipated updates on (i) CYBERSECURITY IN FOOD PRODUCTION - aligned with FDA + EU food + cybersecurity regulations + IoT in food manufacturing + OT/IT cybersecurity; (ii) AI USE IN FOOD SAFETY - AI for HACCP + monitoring + sensory + label review + due diligence + governance; (iii) CLIMATE + SUSTAINABILITY - integration with carbon footprint + supply-chain resilience + Carbon Border Adjustment Mecha

• v6.0 implementation evidence
• v6.1 readiness assessment
• Emerging-area capability

• v6.0 implementation lagging
• v6.1 not anticipated
• Emerging-area integration absent

ISO 22000:2018 Clause 8 OPERATION - the operational core of food safety management with HACCP at its center. CLAUSE 8.1 OPERATIONAL PLANNING + CONTROL. CLAUSE 8.2 PREREQUISITE PROGRAMS (PRPs) - see separate Prerequisite Programs control. CLAUSE 8.3 TRACEABILITY SYSTEM - mandatory tracking of products + ingredients + packaging through the supply chain with retention periods + record-keeping. CLAUSE 8.4 EMERGENCY PREPAREDNESS AND RESPONSE - documented procedures for foreseeable emergencies (power loss + contamination + recall + cyber-attack + supply disruption). CLAUSE 8.5 HAZARD CONTROL (HACCP) - the CODEX ALIMENTARIUS-aligned HACCP method: (a) FORM HACCP TEAM with cross-functional expertise; (b) DESCRIBE PRODUCT + intended use + characteristics; (c) CONSTRUCT FLOW DIAGRAM + verify on-site; (d) HAZARD ANALYSIS - identify biological + chemical + physical + radiological + allergen hazards a

• HACCP study + plan + records
• CCP monitoring records + corrective actions
• Mock recall + traceability test
• Emergency procedure + drills

• HACCP plan stale or undocumented
• CCPs missing or invalid
• Traceability gaps + recall untested
• Emergency preparedness inadequate

FSSC 22000 product recall + withdrawal + crisis management. PRODUCT WITHDRAWAL = removal of product from the distribution chain BEFORE customer purchase; PRODUCT RECALL = removal AFTER customer purchase + can include public-facing recall notifications. REQUIREMENTS: (a) DOCUMENTED RECALL PROCEDURE specifying responsibilities + decision criteria + communication + retrieval + disposal + customer notification + regulator notification; (b) RECALL TEAM with defined roles (executive + quality + technical + legal + communications + customer service + logistics); (c) MOCK RECALL EXERCISES at least ANNUALLY (FSSC + GFSI requirement) + after major changes; (d) TRACEABILITY SYSTEM enabling rapid identification of affected products + ingredients + batches + customers (forward + backward traceability per ISO 22000 Cl. 8.3); (e) RECALL CLASSIFICATION per regulator (FDA Class I/II/III + EU equivalent);

• Recall procedure document + team
• Mock recall reports + traceability test
• Notification log
• Crisis plan + insurance coordination

• Recall procedure stale or untested
• Mock recall + traceability test skipped
• Notification slow or incomplete
• Crisis management absent

ISO 22000:2018 FSMS Clauses 4-10 implementation (substantive content per the underlying ISO 22000 standard - copyrighted; this control references the structure + the FSSC 22000 scheme requirement that ISO 22000 Cl. 4-10 be implemented). CLAUSE 4 CONTEXT OF THE ORGANIZATION: understanding the organization + its context + interested parties + FSMS scope. CLAUSE 5 LEADERSHIP: leadership + commitment + food safety policy + roles + responsibilities + authorities; FOOD SAFETY CULTURE (FSSC Additional Requirement). CLAUSE 6 PLANNING: actions to address risks + opportunities + food safety objectives + planning for changes. CLAUSE 7 SUPPORT: resources + competence + awareness + communication + documented information. CLAUSE 8 OPERATION (the operational core - see separate HACCP control). CLAUSE 9 PERFORMANCE EVALUATION: monitoring + measurement + analysis + evaluation + internal audit + managemen

• FSMS document set
• Clause-by-clause implementation evidence
• Risk register + opportunities log

• FSMS partial implementation
• Documented information gaps
• Risk-based thinking + PDCA not embedded

Prerequisite Programs (PRPs) per ISO/TS 22002-X sector-specific standards (copyrighted - separately tracked) + FSSC additional requirements. SECTOR-SPECIFIC ISO/TS 22002: 22002-1 FOOD MANUFACTURING (construction + layout + utilities + waste + equipment + suitability + cleaning + sanitization + pest control + personnel hygiene + reworked products + recall + warehousing + product information); 22002-2 CATERING; 22002-3 FARMING; 22002-4 FOOD PACKAGING MANUFACTURING; 22002-5 TRANSPORT AND STORAGE; 22002-6 FEED AND ANIMAL FOOD PRODUCTION. KEY PRP CATEGORIES: (a) CONSTRUCTION + FACILITIES + LAYOUT - building location + design + segregation + flow + workspace; (b) UTILITIES + WASTE - water + air + steam + lighting + drainage + chemical waste + animal waste + biological waste; (c) EQUIPMENT - suitability + cleaning + maintenance + calibration + design + access + sanitary design; (d) MANAGEMENT O

• PRP inventory + sector identification
• PRP records per category
• Annual review documentation
• HACCP-PRP integration evidence

• Wrong PRP sector applied
• PRP categories incomplete
• Annual review skipped
• PRP-HACCP integration ad-hoc

FSSC 22000 v6 scheme structure (published April 2023; effective 1 April 2024). THE SCHEME IS THE INTEGRATED COMBINATION OF: (a) ISO 22000:2018 Food Safety Management Systems - Requirements for any organization in the food chain (the underlying ISO FSMS standard, copyrighted, tracked separately in the corpus as the ISO 22000 framework); (b) ISO/TS 22002-X SECTOR-SPECIFIC PRP STANDARDS: 22002-1 Food Manufacturing + 22002-2 Catering + 22002-3 Farming + 22002-4 Food Packaging Manufacturing + 22002-5 Transport and Storage + 22002-6 Feed and Animal Food Production (each is a separate copyrighted ISO Technical Specification); (c) FSSC 22000 ADDITIONAL REQUIREMENTS (publicly available + downloadable from fssc.com): the FSSC-specific scheme-level additions beyond ISO 22000 + ISO/TS 22002-x covering Food Safety and Quality Culture + Food Defense + Food Fraud Mitigation + Allergen Management + Envi

• FSSC 22000 v6 scheme document acquisition
• ISO 22000 + ISO/TS 22002 licensed copies
• Sector applicability identification (22002-1/2/3/4/5/6)

• Scheme implementation without licensed ISO standards (PROHIBITED)
• Wrong sector PRP applied
• Additional Requirements ignored