What Is the Certificate?
FSSC 22000 is a food-safety certification scheme recognised by GFSI. It consists of three components: ISO 22000, a sector-specific prerequisite-programme standard (the ISO/TS 22002 series), and FSSC's own additional requirements. The additional requirements include food defense, food-fraud prevention, allergen management, environmental monitoring, and unannounced audits.
Who Needs It?
- Manufacturers supplying retail chains that require GFSI recognition
- Contract food manufacturers producing for international brands
- Food-packaging manufacturers (ISO/TS 22002-4)
- Feed manufacturers (ISO/TS 22002-6)
- Firms whose exports require a food-safety certificate
Is It Mandatory?
Not legally mandatory; effectively mandatory commercially. A GFSI-recognised scheme is a precondition for supplying major retail chains and international brands. A distinctive FSSC requirement is that some audits are UNANNOUNCED; this aims to ensure the system is not a facade prepared for audit day.
Scope of the Standard
- All the requirements of ISO 22000
- The sector-specific prerequisite-programme standard: ISO/TS 22002-1 (food manufacturing), -2 (catering), -4 (packaging), -5 (transport and storage), -6 (feed)
- FSSC additional requirement — Management of services and purchased materials
- FSSC additional requirement — Product labelling and print materials
- FSSC additional requirement — Food defense and threat assessment
- FSSC additional requirement — Food-fraud prevention and vulnerability assessment
- FSSC additional requirement — Allergen management
- FSSC additional requirement — The environmental monitoring programme
- FSSC additional requirement — Food safety and quality culture
- FSSC additional requirement — Equipment management and hygienic design
- The unannounced-audit programme
Certification Process
- 1ApplicationThe organisation's field of activity, headcount, number of sites and scope boundaries are determined. The number of audit days is calculated from this information.
- 2Document Review (Stage 1)The management system documentation, scope definition, risk assessment and internal-audit/management-review records are examined; readiness for the on-site audit is assessed.
- 3Certification Audit (Stage 2)It is verified on site that the system is implemented and effective. Findings are classified as major/minor nonconformity or observation.
- 4Closing NonconformitiesThe organisation submits a root-cause analysis and corrective action plan. The certificate is not issued until major nonconformities are closed.
- 5Issuing the CertificateThe certificate is issued after review by an independent decision-maker. The audit team cannot make the certification decision.
- 6Surveillance AuditsA surveillance audit is carried out at least once a year during the certificate's validity. The first surveillance cannot exceed 12 months from the last day of Stage 2.
- 7RecertificationAt the end of three years, the entire system is re-audited; it must be completed before the certificate expires.
Period of Validity
Management system certificates are valid for three years. At least one surveillance audit is carried out per year during this period; the certificate is suspended if surveillance is not carried out. A recertification audit is completed at the end of the third year.
Required Documents
- Trade registry record and operating licence
- The organisation's organisation chart and headcount
- The list of sites/branches within scope
- The management system manual or process documentation
- Internal audit and management review records
- Legal permits, licences and operating documents, if any
- All ISO 22000 documentation
- The food-defense threat assessment and plan
- The food-fraud vulnerability assessment and mitigation plan
- The allergen risk assessment and cross-contamination control records
- The environmental monitoring programme and its results
- Packaging and label approval records
Certification Cost
There is no fixed list price; the cost is calculated based on the following variables and provided in writing in the quote.
- The headcount within scope (directly determines the number of audit days)
- The number of sites and branches; whether multi-site sampling applies
- The activity's risk level and process complexity
- The number of standards to be certified — an integrated audit reduces the number of days
- The three-year cycle: certification + two surveillance audits
Accreditation
Management system certification is carried out within the scope of ISO/IEC 17021-1. The certification body is accredited by an accreditation body party to the IAF multilateral recognition agreement (IAF MLA); This agreement establishes a chain of international recognition that ensures that a document issued in one country is accepted in other countries. EUROLAB has internationally recognized accreditation from IAF member accreditation bodies within the scope of ISO/IEC 17021-1.
The scope under which this scheme can be offered varies according to your product and activity; it is confirmed in writing at the quote stage.
Scope and authorisationsRelated Certifications
Frequently Asked Questions
When does the unannounced audit occur?
The scheme requires at least one audit within the certification cycle to be unannounced. The date is not communicated in advance; the system is therefore expected to be audit-ready every day.
I have an ISO 22000 certificate — is moving to FSSC hard?
It means the foundation is ready; what needs adding are the ISO/TS 22002 prerequisite requirements and FSSC's additional requirements. In practice, food defense, the food-fraud vulnerability assessment and the environmental monitoring programme demand the most work.



