FSSC 22000 stands for Food Safety System Certification 22000. It is a GFSI recognised scheme used to certify food safety management systems. Certification involves an independent audit against a globally accepted set of requirements.
For buyers and sourcing teams, FSSC 22000 certification provides useful evidence that a supplier has an independently audited food safety management system. It sits alongside BRCGS and IFS Food as a widely recognised certification in the sector. Some customers also request or require it as a condition of supply.
FSSC 22000 combines three sets of requirements. Understanding those components makes it easier to see who the scheme applies to, what the audit covers and how it differs from ISO 22000 and BRCGS.
The three components of FSSC 22000
FSSC 22000 is not a single standard. It is a certification scheme made up of three components. An organisation must meet the applicable requirements in each component to achieve certification.
ISO 22000
The international standard for food safety management systems. It sets out the core requirements: hazard analysis, a management system structure, and a process for continual improvement.
Sector specific prerequisite programmes (the ISO 22002 series)
These programmes cover the day-to-day conditions that support food safety, including hygiene, pest control, equipment maintenance and site design. The applicable standard depends on the sector. Examples include ISO 22002-1 for food manufacturing and ISO 22002-4 for food packaging manufacturing.
FSSC Additional Requirements
A set of requirements developed by the FSSC Foundation that go beyond ISO 22000, covering areas such as food fraud, food defence, allergen management, environmental monitoring, and food safety culture. The latest version of the scheme also includes requirements on food loss and waste.
Together, these three elements are what allow FSSC 22000 to achieve GFSI recognition, which ISO 22000 alone does not have.
Who needs FSSC 22000
FSSC 22000 covers several parts of the food supply chain, not only food manufacturing. It may be relevant to organisations involved in:
- Food and feed manufacturing
- Food packaging production
- Storage and transport
- Catering
- Retail and wholesale
For ingredient suppliers and formulators, certification can be an important part of customer approval. Larger manufacturers with GFSI-aligned supplier approval processes may ask for FSSC 22000 or another recognised scheme, depending on their own requirements.
How certification works
The certification process follows a consistent pattern, regardless of which certification body carries out the audit.
- Implementation comes first. The organisation develops and operates a food safety management system that meets ISO 22000, the relevant prerequisite programme and the FSSC Additional Requirements. Before the certification audit, it should be able to demonstrate that the system is operating, supported by completed internal audit and management review activities.
- Initial certification audit. Carried out in two stages by an accredited certification body. Stage one reviews documentation and readiness; stage two assesses the system in practice.
- Certification. If successful, the certificate is issued and the organisation is listed on the FSSC public register, which buyers can use to verify certification status directly.
- Surveillance audits. Conducted annually to confirm the system continues to meet requirements, including at least one unannounced audit within each three year cycle.
- Recertification. Required every three years to maintain certification.
Audit findings are graded according to their severity and their effect on the system’s ability to deliver safe food. The applicable grading, correction deadlines and certification consequences are set by the scheme rules. In practice, this means internal monitoring matters throughout the certification cycle, not only before an audit.
FSSC 22000 vs ISO 22000 vs BRCGS
The three terms are often used together, but they do not mean the same thing.
FSSC 22000 vs ISO 22000
ISO 22000 is the foundational standard. FSSC 22000 is built on it, adding sector specific prerequisite programmes and the FSSC Additional Requirements. A business can be certified to ISO 22000 alone, but that certification is not GFSI recognised. FSSC 22000 was developed specifically to close that gap.
FSSC 22000 vs BRCGS
BRCGS is a separate GFSI recognised scheme with its own standard and audit framework. It is not built on ISO 22000. Both schemes are widely used, but customer requirements can vary. The practical choice usually depends on the markets being supplied, customer acceptance and how well the scheme fits the organisation’s existing management system.
Why this matters for sourcing decisions
For procurement and technical teams, certification provides an independently verified starting point for supplier approval. It can support risk assessment and reduce duplication during onboarding. It does not replace checks on the certified site, certification scope or the product being purchased.
Practical note for sourcing teams
Check certification status directly on the FSSC public register rather than relying on supplier documentation alone.
Confirm certification covers the specific site and scope relevant to the product being sourced, particularly for multi-site suppliers where certification can vary by location.
FAQ
ISO 22000, the relevant sector specific prerequisite programme from the ISO 22002 series, and the FSSC Additional Requirements covering areas such as food fraud, food defence and environmental monitoring.
Yes. FSSC 22000 is a GFSI recognised certification scheme. This recognition is one reason many food businesses and buying organisations accept it within supplier approval processes.
Yes. HACCP principles are incorporated into the ISO 22000 requirements that underpin FSSC 22000. Certification therefore indicates that the organisation has implemented a HACCP-based approach within its food safety management system.
ISO 22000 is the underlying food safety management standard. FSSC 22000 adds sector specific prerequisite programmes and additional requirements on top of ISO 22000, which is what allows it to achieve GFSI recognition.
Both are GFSI recognised certification schemes, but they are structured differently. FSSC 22000 is built on the ISO 22000 management system standard, while BRCGS uses its own standard and audit framework. Many buyers accept either.
The current scheme version includes additional requirements covering areas such as food defence, food fraud mitigation, environmental monitoring, food safety culture, and food loss and waste.
Summary
When reviewing a supplier, check that the certificate is current and that its site and scope cover the product you intend to buy. FSSC 22000 can provide useful evidence of an independently audited food safety management system, but it should form part of the wider supplier approval process rather than replace it.
