New ISO 22002 prerequisite programme (PRP) framework, auditor competency requirements, multi-site certification, and implementation timelines are the most asked questions from sites that are seeking a better understanding of the transition to FSSC 22000 Version 7.
Here we have gathered some of the most asked questions and answered at once.
Question 1: For Food Defense and Food Fraud, what evidence will auditors look for to verify competence in management?
Auditors will look for these attributes which demonstrate that the personnel responsible for managing Food Defense and Food Fraud have:
- Completed appropriate training in Food Defense and Food Fraud.
- A clear understanding of the organisation's operations and processes.
- Relevant experience within the product sector or similar industries.
- Active involvement as part of the organisation's food safety team.
Such objective evidence is to prove that the personnel are competent to perform their roles. The emphasis is not only on maintaining documented plans but also on ensuring the people responsible for implementing and maintaining those plans possess the necessary knowledge and skills.
Question 2: If my organisation manufactures, packages and transports food, which ISO 22002 prerequisite programme (PRP) standards is applicable?
The introduction of ISO 22002-100:2025 creates a common PRP baseline that applies across multiple sectors of the food supply chain. Organisations operating across several activities should implement ISO 22002-100 together with the sector-specific standards relevant to their operations.
In this specific case, as the site is involved in food manufacturing, packaging and transportation, this means:
- ISO 22002-100:2025 provides the common prerequisite programme requirements applicable across sectors.
- ISO 22002-1:2025 applies to food manufacturing.
Additionally, ISO 22002-5:2025 will apply only if the organisation performs dedicated transport activities for other organisations in addition to transporting their own manufactured products. In other words, ISO 22002-5:2025 is only applicable if the certifying site is a transport service provider for other food companies in the supply chain.
ISO 22002-100 outlines the common requirements and as such the sector-specific standards do not duplicate them. On the contrary, they add controls which are specific to each activity. Organisations should therefore determine which FSSC 22000 scope categories are applicable and apply ISO 22002-100 in conjunction with the respective sector-specific PRP standards.
Question 3: Which PRP standards apply to food packaging manufacturers?
Two PRP standards shall be adopted for food packaging manufacturers:
- ISO 22002-100:2025, which specifies the PRP requirements common to all sectors.
- ISO 22002-4:2025, which specifies the PRP requirements applicable to food packaging material manufacturing organisations.
Implementing all the requirements defined in both PRP standards will ensure that the organisation implements and follows all relevant controls, thereby ensuring safe and quality product.
Question 4: How should multi-site organisations transit to ISO 22002-100, and are there any major changes to the multi-site certification scheme?
For organisations using the FSSC 22000 multi-site certification scheme, there are a few key changes to the certification approach introduced by Version 7.
The current requirements for the central office, audit communications and resources, oversight of participating sites and centralised food safety management are largely unchanged from Version 6. The major update is the addition of Category BIII (B3) under multi-site certification and updated calculation time for the central office audit duration.
In terms of documentation on PRPs, organisations must determine if their current PRP procedures meet ISO 22002-100 and make the appropriate revisions. Usually, this means aligning and reorganising existing documentation rather than building an entirely new PRP system. Organisations should:
- Conduct gap analysis of the site against ISO 22002-100 in comparison with existing PRPs.
- Fill gaps in documentation.
- Establish the appropriate pre-requisite programme ISO 22002 standards for their sector.
- Use consistent implementation across all participating sites.
Question 5: Are artwork management and print control requirements mandatory for every certification category?
Artwork management and print control requirements exist wherever products are packaged using printed packaging materials or printed labels. This means the requirements apply to any organisation with products utilising printed packaging or labels, regardless of certification.
category. The goal is to help prevent mislabelling, ensure compliance with regulatory requirements, avoid mistaken artwork usage and product nonconformities which are packaging based.
Question 6: Do multi-site cold chain storage operations require separate audits for every site?
Yes, this requires an audit of all sites that are included within the scope of certification. If there is a large number of sites that fulfil the requirements for site sampling, then the minimum number of sample sites, as applicable, need to be audited. If sampling is not applied, then all sites need to be audited. This is to ensure that all the sites audited at least once in the 3 year certification cycle when sampling is applied.
Question 7: Should a new beverage manufacturer apply for FSSC 22000 Version 6 or Version 7 now?
Organisations taking certification in 2026 will need to be audited against FSSC 22000 Version 6. As per the FSSC transition schedule:
- Version 7 audits will start on 1 May 2027.
- Organisations should complete their migration by 30 April 2028.
Therefore, a Version 7 initial audit option will not be available until 1 May 2027. Organisations that are only beginning certification this year should adopt Version 6, but prepare for the changes in Version 7 so as to implement and be prepared for the same prior to their transition audit in 2027.
FSSC 22000 Version 7 further develops the current Scheme with respect to aligning prerequisites programmes through ISO 22002-100, strengthening competency expectations and sharpening requirements for sector-specific operations. Although the core principles of certification are unchanged, organizations can take advantage of this transition period to reassess their food safety management systems (FSMS), revise documentation for prerequisite programmes, and prepare personnel for the revised requirements.
If you need further assistance with FSSC 22000 Version 7 upgrade, check out what gap assessment and training services we can provide at our Support Hub.