FSSC 22000 Certification in USA
Understanding FSSC 22000 Version 7, food safety certification requirements and the upgrade process
FSSC 22000 is a food safety management system certification scheme owned and managed by Foundation FSSC. It has three layers: ISO 22000 requirements, sector prerequisite programs from the ISO 22002 series, and FSSC additional requirements.
About IAS and FSSC 22000: IAS is not an FSSC-licensed certification body and does not issue FSSC 22000 certificates. This page explains the scheme. For certification, use the official directory of licensed certification bodies.
Current scheme
FSSC 22000 Version 7: current scheme requirements
Version 7 was published on May 1, 2026. It is the current scheme, not a draft. Source: Foundation FSSC scheme documents and Version 7 FAQ.
- Scheme version
- FSSC 22000 Version 7Published May 1, 2026, with a 12-month implementation period.
- FSMS standard
- ISO 22000:2018Still the normative FSMS standard. The FSSC version number is not the ISO edition.
- Prerequisite programs
- ISO 22002-x:2025Common requirements in ISO 22002-100, used with a sector part. Replaces the ISO/TS 22002 series.
- Other changes
- Categories and requirementsUpdated category definitions, additional requirements, food loss and waste, packaging design and audit duration rules.
Official sources: Scheme documents (opens fssc.com in a new tab) · Version 7 FAQ (opens fssc.com in a new tab)
Licensing
Who can certify to FSSC 22000?
Only certification bodies with a signed licence agreement with Foundation FSSC, and accreditation for the scheme, can audit and certify to FSSC 22000. Accreditation alone is not a licence.
IAS is not an FSSC-licensed certification body. IAS does not conduct FSSC audits, Version 7 upgrade audits, or issue FSSC 22000 certificates. IAS offers FSSC 22000 training through its training partner EAS, and separate ISO 22000 certification, which is not FSSC 22000.
The scheme
What is FSSC 22000 certification?
Certification evaluates a management system and its food safety controls within a defined scope. It does not guarantee product safety, regulatory compliance or acceptance by any retailer.
- Ownership and governance
- Foundation FSSC owns the scheme, publishes the requirements and licenses certification bodies. A Board of Stakeholders makes scheme decisions.
- Management system certification
- An accredited, licensed certification body audits the site against the scheme and makes an independent certification decision.
- Food chain scope
- The certificate states the food chain category and the products and processes covered at the site.
- Surveillance and recertification
- Surveillance audits within each calendar year (the first within 12 months of the initial decision), at least one of them unannounced every three years, and recertification before the certificate expires.
- GFSI recognition
- FSSC 22000 is recognized by the Global Food Safety Initiative. Recognition applies to the scheme, not to any particular certification body.
Requirements
Understanding the three layers of FSSC 22000
Summaries in our own words. They do not replace the scheme documents or the standards.
Version 7
What changed in FSSC 22000 Version 7?
The changes we could confirm in Foundation FSSC’s Version 7 documents. For the complete list, read FSSC’s “Changes Version 6 and Version 7” documents on the scheme documents page (opens fssc.com in a new tab).
| Area | Version 6 | Version 7 | Practical implication | Applies to |
|---|---|---|---|---|
| Prerequisite programs | ISO/TS 22002-x technical specifications | ISO 22002-x:2025 series; common requirements in ISO 22002-100 | Review PRPs against Part 100 plus your sector part | All categories with PRP standards (not FII) |
| Food chain categories | Version 6 category structure | Updated category and subcategory definitions in Part 1 | Confirm your category and the PRP standards that follow from it | All |
| Packaging manufacturers | Sector PRP for packaging | ISO 22002-100 + ISO 22002-4; not ISO 22002-1 | Packaging-only sites use Part 4 | Category I |
| Product design and development | Additional requirement on product development | New item 2.5.13(g): packaging design principles linked to food loss and waste reduction | Organizations that design primary packaging consider food loss and waste in design | Organizations designing primary packaging |
| Food loss and waste | Food loss and waste requirement | 2.5.16 requires reduction; does not apply to category I. ISO 22002-100 clause 8.1 requires safe management | Policy and objectives to reduce food loss and waste | All except I |
| Audit duration | Reductions for small, simple organizations | Minimum 1.5 days for organizations with fewer than 20 FTE and no more than 2 HACCP studies; “simple process” condition removed | Small sites may have shorter audits; certification bodies can still increase time | Small organizations |
| Upgrade | — | Full upgrade audit at next due audit, May 1, 2027 – April 30, 2028 | Plan the next audit as a full Version 7 audit | All Version 6 certified organizations |
Food safety and quality culture, food defense, food fraud, environmental monitoring and equipment management remain additional requirements in Version 7. Check FSSC’s change documents for any wording changes that affect you.
Upgrade center
FSSC 22000 Version 7 transition and upgrade guide
Every organization certified to Version 6 must upgrade. The upgrade audit is a full audit against Version 7 at your next due audit; it is not a paperwork exercise and cannot be a standalone audit.
- Certification body responsibilities
- Your licensed certification body plans the upgrade audit, applies Version 7 audit duration rules and issues a Version 7 certificate on a positive decision.
- Announced or unannounced
- An upgrade audit can be announced or unannounced, depending on when your last and next unannounced audits fall.
- Confirm your plan
- Agree the date and arrangements with your licensed certification body. IAS cannot conduct upgrade audits.
Upgrade checklist
Your ticks stay in this browser only.
Prerequisite programs
Understanding ISO 22002 prerequisite programs
Under Version 7, ISO 22002-100:2025 sets common PRP requirements, used with the sector part for your category (Scheme Part 1, Table 1). This is educational guidance; your certification body confirms what applies.
| Category | Description | PRP standards |
|---|---|---|
| BIII | Pre-process handling of plant products | ISO 22002-100:2025 + ISO 22002-1:2025 |
| C0 | Animal primary conversion | ISO 22002-100:2025 + ISO 22002-1:2025 |
| CI | Processing of perishable animal products | ISO 22002-100:2025 + ISO 22002-1:2025 |
| CII | Processing of perishable plant-based products | ISO 22002-100:2025 + ISO 22002-1:2025 |
| CIII | Processing of mixed perishable products | ISO 22002-100:2025 + ISO 22002-1:2025 |
| CIV | Processing of ambient-stable products | ISO 22002-100:2025 + ISO 22002-1:2025 |
| D | Animal feed and feed processing | ISO 22002-100:2025 + ISO 22002-6:2025 |
| E | Catering / food service | ISO 22002-100:2025 + ISO 22002-2:2025 |
| FI | Retail, wholesale and e-commerce | ISO 22002-100:2025 + ISO 22002-7:2025 |
| FII | Brokering, trading and e-commerce (no physical handling) | ISO 22000:2018 only; no ISO 22002 part listed |
| G | Transport and storage | ISO 22002-100:2025 + ISO 22002-5:2025 |
| I | Production of food packaging and packaging material | ISO 22002-100:2025 + ISO 22002-4:2025 |
| K | Production of (bio)chemicals | ISO 22002-100:2025 + ISO 22002-1:2025 |
Category finder
Identify the relevant FSSC food chain category
A preliminary educational result. Final category, scope and eligibility are decided by a licensed certification body.
Additional requirements
Understanding the FSSC additional requirements
Version 7 has 18 additional requirements (Scheme Part 2, section 2.5). Applicability is shown as printed in the scheme; not every requirement applies to every category.
Hazard control
HACCP and food safety hazard management in FSSC 22000
Hazards are biological, chemical, physical or allergens. Hazard analysis decides which are significant and whether each is controlled by PRPs, OPRPs or CCPs, with monitoring, validation, verification and corrective action.
Educational example only. It is not a HACCP plan. No control can be classed as a CCP or OPRP without your own validated, product- and process-specific hazard analysis.
Comparison
FSSC 22000 vs ISO 22000 vs HACCP
Related, not interchangeable.
| FSSC 22000 | ISO 22000 | HACCP | |
|---|---|---|---|
| Primary purpose | Certification scheme for food safety management | FSMS requirements standard | Hazard analysis and control method |
| Framework | ISO 22000 + ISO 22002 PRPs + additional requirements | Harmonized structure plus HACCP principles | Codex Alimentarius principles |
| PRP requirements | Specified ISO 22002 parts by category | General PRP requirements | Assumed prerequisites |
| Additional requirements | 18 scheme requirements | None | None |
| Certification | Only FSSC-licensed, accredited certification bodies | Accredited certification bodies | No single accredited international certification; regulatory HACCP is inspected by authorities |
| GFSI recognition | Recognized scheme | Not on its own | Standalone HACCP certificates are not GFSI-recognized |
| Typical use | Manufacturers and suppliers whose buyers require a GFSI-recognized scheme | Organizations wanting an ISO-based FSMS | Regulatory compliance and basic supplier requirements |
| IAS offering | Training only (through EAS) | ISO 22000 certification | HACCP training |
GFSI
Understanding FSSC 22000 and GFSI recognition
GFSI recognition helps buyers trust a scheme, but buying requirements are set by each buyer.
- What GFSI is
- The Global Food Safety Initiative is an industry-driven organization that benchmarks food safety certification programs against its requirements.
- Scheme recognition
- FSSC 22000 is a GFSI-recognized scheme. Recognition applies to the scheme; it does not license certification bodies.
- Why buyers ask for it
- Some purchasers require a GFSI-recognized certificate from suppliers as part of their supplier approval.
- Check your buyer’s requirement
- Ask for the written requirement: which schemes, which scope, which certification bodies. No scheme guarantees approval by any named retailer.
Industries
US food industry applications
Typical risks and controls by sector. Category examples are indicative; your certification body decides. These are not IAS client examples.
US regulation
FSSC 22000 and US food safety regulatory requirements
FSSC 22000 certification is not FDA approval. It does not replace FDA registration, federal or state inspections, or preventive controls obligations. Requirements differ by commodity, facility and activity. General information, not legal advice.
- FSMA preventive controls
- 21 CFR 117 (human food) and 21 CFR 507 (animal food): CGMP, hazard analysis and risk-based preventive controls for many registered facilities, subject to exemptions.
- Allergen controls
- Nine major food allergens under federal law, including sesame; allergen preventive controls where required.
- Supply-chain programs
- Required where a supplier controls a hazard, under the preventive controls rules.
- Traceability
- The Food Traceability Rule (21 CFR 1 Subpart S) for foods on the Food Traceability List; FDA states it will not enforce before July 20, 2028.
- FSVP
- Foreign Supplier Verification Program (21 CFR 1 Subpart L) for many importers.
- USDA FSIS
- Most meat, poultry and egg products, with HACCP under 9 CFR 417.
- State and local
- Retail and food service, often based on the FDA Food Code.
Readiness check
How prepared is your organization for FSSC 22000?
Eighteen questions, no personal details. Answers stay in your browser and are never sent. The result is educational, not an official readiness determination.
Certification process
The FSSC 22000 certification process
A general overview of how licensed certification bodies certify. IAS does not perform FSSC audits. Certification is never guaranteed.
Audit scheduling
Understanding FSSC audit scheduling and unannounced audits
From Scheme Version 7, Part 3. Not all audits are unannounced, and an unannounced audit cannot simply be replaced by a scheduled remote audit.
| Announced | Unannounced | |
|---|---|---|
| When | Initial certification (Stage 1 and 2), and surveillance and recertification audits that are not unannounced | At least one surveillance audit in each three-year period after initial certification; the initial audit cannot be unannounced |
| Notice | Dates agreed in advance | No advance notice; the audit plan is shared at the opening meeting. Where visas or security require it, a time window (typically 30 days) may be given |
| Conduct | During normal operations | During normal operating hours across shifts; starts with a facility inspection within one hour of arrival. Rescheduled if no production is running |
| Refusal | — | Certificate suspended within 3 working days; withdrawn if the audit is not completed within 6 months |
| Voluntary option | — | Organizations may choose to have all surveillance audits unannounced |
| Remote | ICT may support parts of an on-site audit (IAF MD 4) | Full remote audits only after a serious event under the scheme addendum, at most twice in a row |
Surveillance audits fall within each calendar year, the first no later than 12 months after the initial decision. Audits cannot be skipped, and missed surveillance leads to suspension.
Documentation
Documents commonly reviewed during FSSC 22000 audits
The source column shows where each item comes from. What you actually need depends on your category and the requirements that apply; not every facility needs identical documents.
| Document or record | Source of the requirement |
|---|---|
| FSMS scope and food safety policy | ISO 22000:2018 |
| Food safety objectives | ISO 22000:2018 |
| Product descriptions and intended use | ISO 22000:2018 |
| Process flow diagrams | ISO 22000:2018 |
| Hazard analysis | ISO 22000:2018 |
| Hazard control plan (HACCP/OPRP) | ISO 22000:2018 |
| PRP programs and verification records | ISO 22002 series |
| Monitoring, verification and validation records | ISO 22000:2018 |
| Supplier approval and monitoring | FSSC additional requirement |
| Food defense threat assessment and plan | FSSC additional requirement |
| Food fraud vulnerability assessment and plan | FSSC additional requirement |
| Allergen management plan | FSSC additional requirement |
| Environmental monitoring program and results | FSSC additional requirement |
| Traceability records and tests | ISO 22000:2018 |
| Withdrawal and recall tests | ISO 22000:2018 |
| Competence records | ISO 22000:2018 |
| Internal audit results | ISO 22000:2018 |
| Management review records | ISO 22000:2018 |
| Corrective action records | ISO 22000:2018 |
| Food safety and quality culture plan | FSSC additional requirement |
| Food loss and waste policy and objectives | FSSC additional requirement |
| Label approval records | FSSC additional requirement |
| Equipment purchase and change records | FSSC additional requirement |
Educational checklist; confirm against the scheme documents.
Cost factors
What influences FSSC 22000 certification costs?
Licensed certification bodies quote based on audit duration set by scheme rules, plus travel. IAS does not quote FSSC certification. No prices are published here.
Find a licensed certification body (opens fssc.com in a new tab)- Food chain category Determines requirements and auditor competence.
- Employees (FTE) A main driver of audit duration.
- HACCP studies More studies add time. Small sites (fewer than 20 FTE, no more than 2 HACCP studies) may go down to 1.5 days minimum under Version 7.
- Sites Multi-site certification only for BIII, E, FI, FII and G.
- Products, processes and lines Complexity and hazards.
- Shifts and seasonal activity Unannounced audits cover shifts during normal operation.
- Audit type Surveillance is about one-third and recertification two-thirds of initial audit time, plus FSSC-specific time.
- Version 7 upgrade The upgrade is a full audit at the next due audit.
- Travel Location of sites.
Verification
How to verify FSSC certification and certification bodies
Three separate things, each verified in its own place. One does not imply another, and no entity’s authorization transfers to another.
Scheme licensing
Foundation FSSC licenses certification bodies. Check the body, its licensed categories and status in the certification body directory (opens fssc.com in a new tab).
Accreditation
An accreditation body accredits the certification body for FSSC 22000. Check the accreditation certificate scope with the accreditation body. Accreditation for other standards, such as UQAS accreditation, is not an FSSC licence.
Certificate verification
Check a certified organization, its scope, category and status in the FSSC public register (opens fssc.com in a new tab).
Only certified organizations may use the FSSC 22000 logo, under the scheme’s rules. This page does not display the FSSC logo.
Impartiality
Independent certification and the role of training
Certification bodies must stay independent of what they certify.
- Independent decisions Made by people not involved in the audit.
- Auditor competence Auditors qualified for the food chain category.
- Confidentiality Client information protected.
- Conflicts of interest Auditors do not audit organizations they have advised.
- Complaints and appeals A documented process at each certification body.
- Separation from consultancy Certification bodies may not implement HACCP plans or management systems for their clients. General education and public training courses are not client-specific consultancy.
Training
FSSC 22000 Lead Auditor and Internal Auditor training
Training is delivered by EAS (Empowering Assurance Systems), IAS’s training partner. Course recognition is not FSSC certification body licensing, and training is not a route to certification.
| Course | Duration | Recognition | Details |
|---|---|---|---|
| FSSC 22000 Lead Auditor | 5 days (40 hours) | CQI-IRCA certified course: PR375 (Version 6) and PR380 (Version 7) | Course page |
| FSSC 22000 Internal Auditor | 2 days (16 hours) | EAS certificate of completion; not CQI-IRCA certified | Course page |
Training schedule · Lead Auditor training · Internal Auditor training · All ISO training
FAQ
FSSC 22000 technical questions
35 answers based on the Version 7 scheme documents.
What is FSSC 22000?
A food safety management system certification scheme owned and managed by Foundation FSSC. It combines ISO 22000, sector prerequisite programs from the ISO 22002 series and FSSC additional requirements.
What is the current FSSC scheme version?
Version 7.
When was Version 7 published?
May 1, 2026.
What is the difference between Version 6 and Version 7?
Version 7 replaces the ISO/TS 22002 PRP specifications with the ISO 22002-x:2025 series (with common requirements in ISO 22002-100), updates food chain categories and several additional requirements, adds packaging design principles linked to food loss and waste, and changes audit duration rules for small organizations. Foundation FSSC publishes a full list of changes.
What is the final date for Version 6 audits?
April 30, 2027.
When must upgrade audits occur?
Between May 1, 2027 and April 30, 2028, at your next due audit. The upgrade audit is a full audit against Version 7.
What are the main Version 7 requirements?
ISO 22000:2018, the applicable ISO 22002:2025 parts, and the 18 FSSC additional requirements that apply to your category.
What is ISO 22002-100?
ISO 22002-100:2025 sets prerequisite program requirements common to all sectors. It is used together with a sector part such as ISO 22002-1 for food manufacturing.
Which prerequisite programs apply?
It depends on your food chain category. For example, food manufacturing uses ISO 22002-100 and ISO 22002-1; packaging uses ISO 22002-100 and ISO 22002-4; transport and storage uses ISO 22002-100 and ISO 22002-5.
How are food chain categories selected?
From the activities and products at your site, using the scheme’s category definitions. Your licensed certification body confirms the category.
What is the difference between ISO 22000 and FSSC 22000?
ISO 22000 is a standard. FSSC 22000 is a certification scheme that uses ISO 22000 plus sector PRPs and additional requirements, and only licensed certification bodies can certify to it.
What is the difference between HACCP and FSSC 22000?
HACCP is a hazard analysis method. FSSC 22000 includes HACCP principles within a full management system and scheme requirements.
Is FSSC 22000 GFSI-recognized?
Yes, FSSC 22000 is a GFSI-recognized scheme. Recognition applies to the scheme; each certification body must also be licensed and accredited.
Do all retailers accept FSSC 22000?
No single scheme is accepted by every buyer. Check each customer’s written requirements.
Is FSSC 22000 mandatory under US law?
No. It is voluntary unless a customer requires it.
Does FSSC certification replace FDA requirements?
No. It is not FDA approval and does not replace FDA registration, inspections or preventive controls obligations.
What is food defense?
Protecting products from intentional adulteration, through a threat assessment and a food defense plan.
What is food fraud vulnerability assessment?
An assessment of how vulnerable your materials and products are to fraud, such as substitution or dilution, followed by a mitigation plan.
What is allergen management?
Controls over allergens in materials, processes, cleaning and labeling, documented in an allergen management plan.
What is environmental monitoring?
A risk-based program that samples the processing environment to verify hygiene controls. It applies to categories BIII, C, I and K.
What is food safety culture?
The shared values and behaviors that affect food safety. The scheme requires a documented food safety and quality culture plan with objectives and timelines.
What is required for food loss and waste?
Additional requirement 2.5.16 requires a policy and objectives to reduce food loss and waste, for all categories except packaging manufacturing.
How do announced and unannounced audits work?
Initial certification audits are announced. After that, at least one surveillance audit in each three-year period must be unannounced. Organizations can choose to have all audits unannounced.
What is a Stage 1 audit?
A readiness review of your FSMS and scope before Stage 2.
What is a Stage 2 audit?
An on-site audit of implementation and effectiveness.
What happens when nonconformities are found?
They are graded minor, major or critical and must be corrected within scheme timeframes. A critical nonconformity leads to suspension.
How much does FSSC 22000 certification cost?
Licensed certification bodies quote based on audit duration, which depends on category, employees, HACCP studies and sites, plus travel. IAS does not quote FSSC certification.
How long does certification take?
It depends on how mature your system is and how quickly findings are closed. No reliable fixed timeline can be given.
Can multiple facilities be included?
Multi-site certification is only allowed for categories BIII, E, FI, FII and G. Other sites are normally certified individually.
How do I find a licensed certification body?
Use Foundation FSSC’s official certification body directory.
Can IAS issue FSSC 22000 certificates?
No. IAS is not an FSSC-licensed certification body and does not conduct FSSC audits or issue FSSC 22000 certificates. IAS offers FSSC 22000 training through EAS and separate ISO 22000 certification.
How do I verify a certificate?
Check the Foundation FSSC public register of certified organizations.
Can ISO 22000 certification be upgraded to FSSC 22000?
Not by upgrading a certificate. You need certification by a licensed certification body against the full scheme, including PRPs and additional requirements.
What training is available?
FSSC 22000 Lead Auditor training through EAS (CQI-IRCA certified courses PR375 for Version 6 and PR380 for Version 7) and FSSC 22000 Internal Auditor training (EAS certificate; not CQI-IRCA certified).
How do I learn more about FSSC Version 7?
Read the official scheme documents and Version 7 FAQ on fssc.com.
Next steps
What do you need?
Choose what fits. IAS can help with training and ISO 22000 certification; FSSC 22000 certification comes from a licensed certification body.
Choose an option to see your next step.
Related resources
Official scheme sources and related IAS pages.