ISO Certifications

ISO 22000 Certification: Food Safety Management System

ISO 22000 is the international standard for Food Safety Management Systems. Cianaa audits Food Safety Management Systems across the supply chain against ISO 22000, with certification issued by an independently accredited certification body, so you can demonstrate systematic food safety controls to customers, retailers and regulators.

HACCP-integrated FSMS GFSI upgrade pathway FSANZ & MPI aligned
ANZ-aligned
★ ISO 22000:2018
Food Safety Management
Full FSMS · HACCP + PRP integration
PRPs
HACCP
OPRPs
CCPs
GFSI-aligned — FSSC 22000 pathway
3-year cert · annual surveillance
Trusted by food safety teams across ANZ
SparkDatacomVodafoneHumm GroupCCLFidelityIllionPlan BXplore
Overview

What Is ISO 22000 Certification?

ISO 22000:2018 is the international standard for Food Safety Management Systems (FSMS). It integrates the principles of Hazard Analysis and Critical Control Points (HACCP) with the systematic management system approach of ISO’s High Level Structure — creating a comprehensive framework for identifying, preventing, and controlling food safety hazards throughout the food supply chain.

ISO 22000 applies to all organisations in the food chain — from primary production and food processing through to transport, storage, retail, catering, and the suppliers of equipment, packaging, cleaning products, and other food contact materials. It provides a single internationally recognised standard that satisfies the food safety management requirements of customers, retailers, and regulators across multiple markets.

Cianaa’s auditors bring food safety sector experience to ISO 22000 audits, whatever your position in the food supply chain, whether you are a primary producer, food manufacturer, logistics provider or food service organisation. We audit whether your FSMS genuinely controls food safety hazards, not just whether the paperwork exists.

Benefits

Benefits of ISO 22000 Certification

ISO 22000 certification delivers food safety, commercial, and regulatory benefits across the food supply chain.

Customer & Retailer Acceptance

Major food retailers, foodservice buyers, and brand owners increasingly require ISO 22000 or equivalent GFSI-recognised certification from their supply chain partners.

Regulatory Alignment

ISO 22000 aligns with food safety regulations in Australia (Food Standards Australia New Zealand), New Zealand (MPI), and international markets — supporting export compliance.

Systematic Hazard Control

The HACCP-based approach ensures food safety hazards are identified, assessed, and controlled through scientifically validated critical control points — reducing the risk of food safety incidents.

International Market Access

ISO 22000 certification is recognised globally — facilitating export to markets that require documented food safety management system compliance from suppliers.

Reduced Recall & Incident Risk

Systematic prerequisite programmes and HACCP controls reduce the risk of product contamination, food safety incidents, and the significant financial and reputational costs of recalls.

GFSI Scheme Alignment

ISO 22000 forms the basis of FSSC 22000, which is a GFSI-recognised scheme. Starting with ISO 22000 provides a clear upgrade path to full FSSC 22000 certification if required.

Key Requirements

What ISO 22000 Requires

ISO 22000:2018 uses the High Level Structure and integrates HACCP requirements with a systematic management system framework.

Clause 4–5

Context, Leadership & Policy

Organisational context, food safety policy, top management commitment, and roles and responsibilities for food safety.

Clause 6

Planning

Food safety objectives, risk and opportunity management, and planning for changes to the FSMS.

Clause 7

Support

Resources, competence, awareness, communication (internal and external), and documented information management.

Clause 8.2

Prerequisite Programmes (PRPs)

Establishment and maintenance of PRPs covering infrastructure, cleaning, pest control, personnel hygiene, and supplier management.

Clause 8.5

Hazard Analysis (HACCP)

Hazard identification, assessment, selection of control measures, HACCP plan development, and validation of control measures.

Clause 9–10

Performance Evaluation & Improvement

Monitoring, internal audit, management review, nonconformity management, and continual improvement of the FSMS.

Process

The ISO 22000 Certification Process

Cianaa assesses you at every stage of certification — from Stage 1 through to Stage 2 audit and ongoing surveillance.

1
Optional

Pre-audit

Voluntary pre-audit against ISO 22000:2018 — identify nonconformities before the formal audit clock starts.

2
Year 1

Initial Audit

Stage 1 documentation review plus Stage 2 on-site audit of your FSMS, PRPs and HACCP plan, conducted by Cianaa’s auditors under the accredited certification body’s programme.

3
Year 1

Certification Decision

We submit our audit report and recommendation to the accredited certification body, which makes the certification decision. If granted, the certificate is valid for a 3-year cycle.

4
Year 2

Surveillance Audit 1

Year 2 surveillance — confirms ongoing conformity, HACCP effectiveness, and continual improvement of the FSMS.

5
Year 3

Surveillance Audit 2

Year 3 surveillance — covers remaining clauses not sampled in Year 2 to maintain certification status.

6
Year 4

Recertification

Full recertification audit — renews your ISO 22000 certificate for another 3-year cycle.

Why Cianaa

Why Choose Cianaa for ISO 22000 Certification?

Food Safety Sector Expertise

Our team has experience across food manufacturing, primary production, food logistics, and catering — so our auditors assess ISO 22000 requirements in real food chain contexts.

HACCP Audit Depth

We audit how your HACCP plan works within the ISO 22000 management system, testing that critical control points are validated and monitored in practice, not just documented.

Independent, Not Advisory

We do not write your documentation, PRP programmes or HACCP plan. That separation is what makes our audit findings credible to your customers and regulators.

Regulatory Alignment

Our auditors understand the FSANZ Food Standards Code and MPI requirements, so the audit takes account of the regulatory obligations your FSMS already serves.

Asia-Pacific Based

Based in Australia and New Zealand, we understand FSANZ, MPI, and regional export market food safety requirements for local food businesses.

GFSI Upgrade Pathway

ISO 22000 is the foundation of FSSC 22000, so ISO 22000 certification is a natural first step if you later need a GFSI-recognised scheme.

Complimentary · No Obligation

Book a Free ISO 22000 Scoping Call

A complimentary 30-minute call with one of our ISO 22000 auditors to establish your scope and a realistic path to a Stage 2 audit. It is a scoping conversation, not a consulting engagement. If you want to know where you stand before Stage 1, ask about an independent pre-audit assessment.

Scope, definedWhich sites, products and processes belong inside the FSMS boundary.
How the audit runsHow Stage 1 and Stage 2 would be planned for your operation.
Realistic timelineEffort and calendar estimate to your Stage 2 audit.
Scheme questionWhether your customers require ISO 22000 alone or a GFSI-recognised scheme, which is worth confirming with them.
Book Your Scoping Call →
30-minute scoping callISO 22000 auditorNo obligation
Ready to Certify

Scope Your ISO 22000 Certification Audit

Speak with our ISO 22000 auditors to scope your certification audit. Certification is issued by an independently accredited certification body.

Get in Touch →
FAQ

Frequently Asked Questions

What is the difference between ISO 22000 and HACCP?
HACCP (Hazard Analysis and Critical Control Points) is a systematic approach to identifying and controlling food safety hazards — it is a methodology, not a management system standard. ISO 22000 incorporates HACCP principles as a core component of a broader Food Safety Management System that also includes prerequisite programmes, management system governance, continual improvement, and external communication requirements. ISO 22000 certification requires a fully operational HACCP plan as part of the FSMS.
Is ISO 22000 the same as FSSC 22000?
No, but they are related. FSSC 22000 (Food Safety System Certification 22000) is a GFSI-recognised scheme that builds on ISO 22000 by adding additional requirements (ISO/TS 22002 sector-specific PRPs and FSSC-specific additional requirements). ISO 22000 alone is not GFSI-recognised, but it forms the foundation of FSSC 22000. Organisations seeking GFSI recognition (required by many major retailers) need FSSC 22000 rather than ISO 22000 alone.
Does ISO 22000 satisfy food retailer requirements?
For many food retailers and brand owners, ISO 22000 alone may not be sufficient — they may require GFSI-recognised certification (FSSC 22000, BRC, SQF) from their suppliers. However, ISO 22000 is widely accepted for B2B food supply arrangements and in markets where GFSI recognition is not specifically required. We recommend confirming your specific customer and retailer requirements before selecting the appropriate scheme.
What food businesses does ISO 22000 apply to?
ISO 22000 applies to all organisations in the food chain, including: primary producers (farming, fishing, horticulture), food manufacturers and processors, food packaging and ingredient suppliers, food transport and storage providers, retailers and foodservice operators, and providers of equipment, cleaning agents, and other food contact materials. The standard is designed to be applicable regardless of size or complexity.
How long does ISO 22000 certification take?
Implementation timelines vary based on the size of your organisation, the complexity of your food processes, and how mature your existing food safety practices are. A small food manufacturer with established HACCP plans may achieve certification in 4–8 months. Larger or more complex operations starting from a lower baseline may take 9–15 months. Our pre-audit produces a realistic timeline for your specific situation.