4.1 to 4.4 + Amd 1:2024 |
Context of the organization: internal/external issues (including climate change relevance — Amd 1:2024), interested parties and their requirements (including climate-related requirements — Amd 1:2024), FSMS scope (documented information required), processes and their interactions |
Context analysis + climate evaluation (§4.1 + Amd 1:2024)
Interested parties + climate (§4.2 + Amd 1:2024)
FSMS scope (§4.3)
Process mapping (§4.4)
|
| 5.1 to 5.3 |
Leadership and management commitment, food safety policy (documented information required), roles/responsibilities/authorities, food safety team leader appointment |
Food safety policy (§5.2)
Team leader appointment (§5.3)
Responsibility sheets (§5.3)
Food safety team mission
|
| 6.1 to 6.3 |
Actions to address risks and opportunities, FSMS objectives and action planning (documented information required), planning of changes |
Risk & opportunity procedure (§6.1)
FSMS objectives and action plan (§6.2)
Change planning procedure (§6.3)
Risk & opportunity register
|
| 7.1 to 7.5 |
Resources (human, infrastructure, work environment, external providers, externally developed elements), competence, awareness, internal/external communication, documented information |
Resource management (§7.1)
Training plan
Competency matrix (§7.2)
Awareness procedure (§7.3)
Internal & external communication (§7.4)
External provider control (§7.1.6)
Documented information control (§7.5)
Master list
|
8.1 to 8.2 + ISO 22002-100:2025 |
Operational planning and control. Prerequisite Programs (PRPs) — the 12 domains a) to l) of §8.2 must be considered when establishing PRPs. Alignment with the new ISO 22002:2025 family (ISO 22002-100 common foundation + sector-specific parts). |
PRP a) Buildings & facilities
PRP b) Premises & zoning
PRP c) Air, water, energy
PRP d) Pests & waste
PRP e) Equipment
PRP f) Suppliers
PRP g) Receiving, storage, transport
PRP h) Cross-contamination
PRP i) Cleaning & sanitization
PRP j) Personnel hygiene
PRP k) Product information
PRP l) Food defense
|
| 8.3 |
Traceability system — unique identification of incoming material suppliers and first stage of distribution, effectiveness verification through quantitative reconciliation (FSMA 204 Food Traceability Rule) |
Traceability procedure (§8.3)
Traceability test + quantitative reconciliation
|
| 8.4 |
Emergency preparedness and response, with periodic drills |
Emergency preparedness procedure (§8.4.1)
Emergency & incident management + drills (§8.4.2)
|
| 8.5.1 |
Initial steps enabling hazard analysis: initial information, raw material/ingredient/contact material characteristics, finished product characteristics, intended use (vulnerable groups), flow diagrams and process description |
Initial information (§8.5.1.1)
Raw material characteristics (§8.5.1.2)
Finished product characteristics (§8.5.1.3)
Intended use (§8.5.1.4)
Flow diagrams + description (§8.5.1.5)
|
| 8.5.2 |
Hazard analysis: hazard identification and acceptable level determination, hazard evaluation (likelihood × severity), control measure selection and classification (oPRP vs CCP) |
Hazard analysis procedure (§8.5.2.1)
Hazard ID + acceptable levels (§8.5.2.2)
Likelihood × severity matrix (§8.5.2.3)
oPRP/CCP selection (§8.5.2.4)
|
| 8.5.3 |
Validation of control measure(s) and combinations of control measures — before implementation and after modification |
Validation procedure (§8.5.3)
Standard validation report
|
| 8.5.4 |
Hazard control plan (HACCP/oPRP plan) — for each CCP and each oPRP: hazards to control, critical limits or action criteria, monitoring, corrections, responsibilities, records |
Hazard control plan (§8.5.4.1)
Critical limits & action criteria (§8.5.4.2)
CCP monitoring sheet (§8.5.4.3)
oPRP monitoring sheet (§8.5.4.3)
Actions on non-compliance (§8.5.4.4)
|
| 8.6 to 8.8 |
Updating PRP information and HACCP plan, metrology control (calibrated equipment with NIST-traceable / international references), verification — with monitoring/verification segregation |
Update procedure (§8.6)
Monitoring equipment control (§8.7)
Calibration & verification plan
Verification procedure (§8.8.1)
Verification result analysis (§8.8.2)
|
| 8.9 |
Control of nonconforming products and processes: general, corrections, corrective actions, disposition of potentially unsafe products (release evaluation, NC product disposition), withdrawal/recall with simulations (FDA Reportable Food Registry) |
Nonconformity control (§8.9.1)
Corrections (§8.9.2)
Corrective actions (§8.9.3)
Potentially unsafe products (§8.9.4)
Withdrawal/recall + drills (§8.9.5)
|
| 9.1 |
Monitoring, measurement, analysis, and evaluation — confirmation of overall performance, trend identification, audit program planning |
Monitoring & measurement procedure (§9.1.1)
Data analysis & evaluation (§9.1.2)
|
| 9.2 |
Internal audit — audit program, competent and impartial auditors, reports to food safety team and management |
Internal audit procedure (§9.2)
Annual audit program
ISO 22000 audit checklist + standard report
|
| 9.3 |
Management review — with the 7 input elements a) to g) of §9.3.2 (including 9 sub-items on performance in c)), output elements with decisions, updates, and actions |
Management review procedure (§9.3.1)
Standard agenda + minutes (§9.3.2 and §9.3.3)
|
| 10.1 to 10.3 |
Improvement: nonconformity and corrective action handling, continual improvement, FSMS update by the food safety team at planned intervals |
Nonconformities and corrective actions (§10.1)
Continual improvement (§10.2)
FSMS update (§10.3)
|
| Annex A + FSMA / FDA |
Cross-references and master documentation: mapping with the 7 HACCP principles of Codex (Annex A of the standard); correspondence with FDA FSMA / 21 CFR 117 / USDA-FSIS / FDA labeling regulations (FDA Big 9 allergens including sesame since 2023); FSMS manual |
ISO 22000 ↔ Codex HACCP matrix (Annex A)
ISO 22000 ↔ FSMA / FDA matrix
FSMS Manual
|
| Not included |
Site- and product-line-specific elements — which must be built case by case by the food safety team (§5.3), because ISO 22000:2018 requires hazard analysis based on the actual characteristics of products, processes, and environment (§8.5.1 and §8.5.2) |
Filled-in hazard analysis (per product and process)
Scientifically validated CCPs (per process)
Specific validated oPRPs
Filled-in flow diagrams (per product line)
Shelf-life and aging studies
Microbiological challenge tests
Thermal validation (specific time/temperature pairs)
|