FSSC 22000 vs ISO 22000
FSSC 22000 and ISO 22000 are closely related, because FSSC 22000 uses ISO 22000 as its basis. The difference lies in what Foundation FSSC adds: sector-specific PRP requirements, 18 additional requirements and broad recognition by the GFSI . This page looks at it from the FSSC side: what do you get extra?
If you want to read it from the ISO 22000 side (“do I need to upgrade to FSSC?”), use the page ISO 22000 vs FSSC 22000 instead. That page focuses on the choice from an existing ISO system.
In short: ISO 22000 shows that you control food safety. FSSC 22000 adds GFSI recognition and extra requirements that large retailers and brands often make mandatory.
What does FSSC 22000 add on top of ISO 22000?
FSSC 22000 does not replace ISO 22000. It extends it. Three things are added.
| Addition | What does it mean in practice? |
|---|---|
| GFSI recognition | Large retailers accept the scheme as proof of food safety |
| Sector-specific PRPs | Mandatory prerequisites per sector (ISO/TS 22002-x) |
| 18 additional requirements | Extra requirements, such as food fraud, food defence and culture |
1. GFSI recognition: the commercial difference
This is the core. ISO 22000 on its own is not a GFSI-recognised scheme. FSSC 22000 is, and has been since 2010. For many international retailers and brands, a GFSI-recognised scheme is a firm purchasing requirement.
For example, a Dutch biscuit manufacturer has ISO 22000, but a large retailer requires GFSI recognition. The manufacturer does not start again. Instead, it extends its existing ISO 22000 system to FSSC 22000.
2. Sector-specific PRPs: stricter basic conditions
ISO 22000 requires prerequisite programmes (PRPs), but leaves the details to you. FSSC 22000 sets out a fixed PRP specification for each sector, taken from the ISO/TS 22002 series. As a result, the requirements on hygiene, building and maintenance are more concrete and easier to compare. The full explanation is on requirements of the scheme.
3. Additional requirements: 18 extra requirements
FSSC 22000 adds 18 requirements that ISO 22000 does not state explicitly. Think of food fraud, food defence, allergen management and food safety culture. These requirements cover risks that matter in modern supply chains. You can find all 18 on additional requirements.
Differences in audits
The audit regime also differs. With FSSC 22000, at least one unannounced audit per three-year cycle is mandatory. With ISO 22000, it is not. Read more about the audit process.
| Topic | ISO 22000 | FSSC 22000 |
|---|---|---|
| Type | International ISO standard | Certification scheme based on ISO 22000 |
| GFSI recognised? | No (on its own) | Yes |
| PRP content | Free to define | Fixed sector specification |
| Extra requirements | None | 18 additional requirements |
| Unannounced audit | Not mandatory | Mandatory, at least once per cycle |
| Managed by | ISO | Foundation FSSC |
When is FSSC 22000 worth it?
FSSC 22000 is mainly worthwhile if customers or retailers explicitly ask for GFSI recognition. If nobody asks for it, ISO 22000 is often a good and lighter choice.
Do not choose FSSC automatically because it sounds “stricter”. The scheme is heavier to implement and maintain. First check whether your customers really require it.
Growing from ISO 22000 to FSSC 22000
Already have ISO 22000? Then the step to FSSC 22000 is manageable. You add the sector-specific PRPs and the additional requirements to your existing system. The step-by-step plan shows how that works.