New ISO 22002 prerequisite programme (PRP) framework, auditor competency requirements, multi-site certification, and implementation timelines are the most asked questions from sites that are seeking a better understanding of the transition to FSSC 22000 Version 7.
Here we have gathered some of the most asked questions and answered at once.
Question 1: How should multi-site organisations transit to ISO 22002-100, and are there any major changes to the multi-site certification scheme?
For organisations using the FSSC 22000 multi-site certification scheme, there are a few key changes to the certification approach introduced by Version 7.
The current requirements for the central office, audit communications and resources, oversight of participating sites and centralised food safety management are largely unchanged from Version 6. The major update is the addition of Category BIII (B3) under multi-site certification and updated calculation time for the central office audit duration.
In terms of documentation on PRPs, organisations must determine if their current PRP procedures meet ISO 22002-100 and make the appropriate revisions. Usually, this means aligning and reorganising existing documentation rather than building an entirely new PRP system. Organisations should:
-
Assess their system in line with the new requirements in comparison with existing PRPs.
-
Fill gaps in documentation.
-
Establish the appropriate pre-requisite programme ISO 22002 standards for their sector.
-
Use consistent implementation across all participating sites.
Question 2: For Food Defense and Food Fraud, what evidence will auditors look for to verify competence in management?
Under FSSC 22000 requirements, organisations must ensure that the personnel responsible for Food Defense threat assessment and Food Fraud vulnerability mitigation possess appropriate knowledge and competence.
Depending on the organisation's operations and context, objective evidence demonstrating competence may include:
- Completion of appropriate training in Food Defense and Food Fraud assessment methodologies.
- Practical understanding of the site’s operations, processes, and supply chain.
- Relevant experience within the product sector or related food industry activities.
- Active involvement within the food safety team.
The audit process focuses on confirming that the responsible personnel possess the necessary competence to effectively develop, implement, and maintain the documented mitigation plans.
Question 3: If my organisation manufactures, packages and transports food, which ISO 22002 prerequisite programme (PRP) standards is applicable?
The introduction of ISO 22002-100:2025 creates a common PRP baseline that applies across multiple sectors of the food supply chain. Organisations operating across several activities should implement ISO 22002-100 together with the sector-specific standards relevant to their operations.
In this specific case, as the site is involved in food manufacturing, packaging and transportation, this means:
- ISO 22002-100:2025 provides the common prerequisite programme requirements applicable across sectors.
- ISO 22002-1:2025 applies to food manufacturing.
ISO 22002-5:2025 applies where the organisation falls within FSSC 22000 Category G, i.e. where it provides physical storage and/or transport services to other organizations, including sister companies. Where a manufacturer only stores or transports its own manufactured products and does not provide such services to others, these activities remain covered under the applicable manufacturing category.
ISO 22002-100 outlines the common requirements and as such the sector-specific standards do not duplicate them. On the contrary, they add controls which are specific to each activity.
Organisations should therefore determine which FSSC 22000 scope categories are applicable and apply ISO 22002-100 in conjunction with the respective sector-specific PRP standards.
Question 4: Which PRP standards apply to food packaging manufacturers?
Two PRP standards shall be adopted for food packaging manufacturers:
- ISO 22002-100:2025, which specifies the PRP requirements common to all sectors.
- ISO 22002-4:2025, which specifies the PRP requirements applicable to food packaging material manufacturing organisations.
Implementing the applicable requirements supports the organisations in establishing appropriate prerequisite controls for food safety.
Question 5: Are artwork management and print control requirements mandatory for every certification category?
Artwork management and print control requirements exist wherever products are packaged using printed packaging materials or printed labels. This means the requirements apply to any organisation with products utilising printed packaging or labels, regardless of certification.
category. The goal is to help prevent mislabelling, ensure compliance with regulatory requirements, avoid mistaken artwork usage and product nonconformities which are packaging based.
Question 6: Do multi-site cold chain storage operations require separate audits for every site?
This is not necessarily. For multi-site organisations under Category G, all sites shall be audited where the organisation has 20 sites or fewer. Where the organisation has more than 20 sites and meets the applicable sampling criteria, site sampling may be applied in accordance with FSSC 22000 V7 requirements. Where sampling is applied, the Certification Body shall ensure that all sites are audited over the applicable certification cycle.
Question 7: Should a new beverage manufacturer apply for FSSC 22000 Version 6 or Version 7 now?
Organisations taking certification in 2026 will need to be audited against FSSC 22000 Version 6. As per the FSSC transition schedule:
- Version 7 audits will start on 1 May 2027.
- Organisations should complete their migration by 30 April 2028.
Therefore, a Version 7 initial audit option will not be available until 1 May 2027. Organisations that are only beginning certification this year should adopt Version 6, but prepare for the changes in Version 7 so as to implement and be prepared for the same prior to their transition audit in 2027.
FSSC 22000 Version 7 introduces changes to the PRP framework, auditor competency requirements and food chain categorization. Organisations should review the applicable Version 7 Scheme requirements and determine any changes needed within their FSMS, PRP arrangements and personnel competence in preparation for their applicable Version 7 audit.
Additional information on FSSC 22000 Version 7 requirements and the official transition process is available from Foundation FSSC.
If you need further assistance with FSSC 22000 Version 7 upgrade, check out what gap assessment and training services we can provide at our Support Hub.
Our certification activities are provided by independent Certification Bodies, separately from any consulting activities. Impartiality is safeguarded by Eurofins Assurance’s relevant policies to avoid conflicts of interest.