Frequently asked questions about FSSC 22000
Below are the most asked questions about FSSC 22000, with short and honest answers. Each question refers to a page with more explanation. The basics are on the overview page. More about the requirements is on requirements of the scheme. The audit process is described at the audit.
Is FSSC 22000 an ISO standard?
No. FSSC 22000 is a certification scheme, not an ISO standard. The scheme uses ISO 22000 as its basis, but it is managed by Foundation FSSC, a foundation under Dutch law, not by the International Organization for Standardization. You cannot buy the scheme from NEN or ISO.org. FSSC 22000 is recognised by the GFSI (Global Food Safety Initiative), just like ISO standards such as ISO 22000.
Is FSSC 22000 mandatory?
Not by law. No Dutch or European law requires FSSC 22000 certification. The requirement comes from the market: large retailers, brands and buyers make GFSI recognition a firm purchasing requirement. If you supply such customers, the scheme is in practice mandatory for you.
What is the difference from ISO 22000?
ISO 22000 is the international standard for food safety management. FSSC 22000 builds on it and adds three components: sector-specific PRPs, 18 additional requirements and GFSI recognition. The result is more work during implementation, but also broader market acceptance. Read the full story on FSSC 22000 vs ISO 22000.
Which version of FSSC 22000 applies now?
As of June 2026, version 6 is the valid audit framework. Version 6 became mandatory on 1 April 2024. Version 7 was published in May 2026, but V6 audits are allowed up to and including 30 April 2027. After that, the upgrade period starts. Everything about the timeline is on version 6 and 7.
How much does FSSC 22000 cost?
There is no official rate. The indicative total costs in year 1 lie between €12,000 and €40,000 or more, depending on company size and complexity. Consultancy, training, internal hours and audit fees are the main cost items. Always request several quotes. Read more on costs and timeline.
How long does certification take?
That depends heavily on your starting position. If you start from zero, plan for 10 to 14 months. With an existing ISO 22000 system, it often takes 3 to 6 months less. More about the timeline is on costs and timeline.
Is the audit unannounced?
Partly yes. The initial certification audit and recertification are always announced. For the annual surveillance audits, at least one audit per 3-year cycle is mandatory unannounced. The certification body gives a window of nine months within which the visit takes place. Read more on the audit process.
What are the additional requirements?
The additional requirements are 18 extra requirements from Foundation FSSC on top of ISO 22000. They cover topics such as food fraud, food defence, allergen management, food safety culture and environmental monitoring. All 18 are explained on additional requirements.
Who manages FSSC 22000?
Foundation FSSC, a foundation under Dutch law. The foundation is non-commercial, has no shareholders or members and is based in the Netherlands. It publishes the scheme, sets the requirements and accredits certification bodies through recognised accreditation bodies.
What is FSSC 24000?
FSSC 24000 is a separate scheme from Foundation FSSC, but it has nothing to do with food safety. It concerns social management systems: employment relations, health and safety at work, and ethics. FSSC 24000 is based on PAS 24000 and is recognised by the Social Supply Chain Initiative (SSCI) of the Consumer Goods Forum. Do not confuse it with FSSC 22000.
FSSC, BRCGS or IFS: which should I choose?
That depends on your sales market, not on the substantive quality of the scheme. All three are GFSI-recognised and equivalent in basic safety. FSSC is strong in international supply chains and among ISO-based organisations. BRCGS dominates British retail. IFS is leading in Germany and France. Read the detailed comparison on FSSC vs BRCGS vs IFS.
How long is an FSSC 22000 certificate valid?
Three years. During that period, annual surveillance audits take place. After three years, a recertification audit follows for a new cycle.