Requirements of FSSC 22000
The requirements of FSSC 22000 consist of three building blocks: the ISO 22000 management system requirements, sector-specific prerequisite programmes (PRPs) and the additional requirements of Foundation FSSC . Together they determine what an auditor checks, under supervision of the RvA (Dutch Accreditation Council) .
So the scheme asks more than ISO 22000 alone. You must prove not only that your system is correct on paper, but also that it works on the shop floor. Below we explain the three building blocks.
Important: FSSC 22000 does not add a separate “checklist”. Every element affects your daily processes, from purchasing to final inspection.
On this page
We cover the three building blocks of FSSC 22000 and what they ask of you in practice. Use the cards to jump to the right section.
The management system: policy, hazard analysis and improvement.
1. ISO 22000 requirementsSector-specific prerequisites such as hygiene and building maintenance.
2. PRP requirementsThe 18 extra requirements that FSSC adds on top of ISO 22000.
3. Additional requirements1. ISO 22000 requirements: the management system
The first building block is ISO 22000 itself. This is the international standard for food safety management. Its operational core is HACCP plus PRPs, with critical control points (CCPs) and operational prerequisite programmes (OPRPs).
An auditor checks the following:
- an up-to-date hazard analysis with supported control measures;
- CCPs and OPRPs with limits and monitoring;
- traceability and the ability to withdraw products from the market (recall);
- supplier assessment and follow-up of deviations.
For example, a meat processor records cold storage temperature as a CCP, with a limit and a logbook. You can find a deeper explanation of HACCP and PRPs at HACCP and PRPs. For how to assess hazards per process step, see the hazard analysis for HACCP.
2. PRP requirements: the prerequisites
The second building block is the prerequisite programmes (PRPs), also called basic conditions. These are the hygiene and environmental conditions that must always be in order. Think of cleaning, pest control, building maintenance and personal hygiene.
FSSC 22000 sets out a separate PRP specification for each sector, taken from the ISO/TS 22002 series. Which one you use depends on your food chain category.
| PRP specification | Sector |
|---|---|
| ISO/TS 22002-1 | Food production and processing |
| ISO/TS 22002-2 | Catering and food service |
| ISO/TS 22002-4 | Production of food packaging |
| ISO/TS 22002-5 | Transport and storage |
| ISO/TS 22002-6 | Animal feed production |
In July 2025, new versions of the 22002 series were published without the “/TS” designation. FSSC 22000 version 6 continues to use the existing ISO/TS 22002 series. The new series will come back in version 7.
3. Additional requirements: the FSSC requirements
The third building block makes FSSC 22000 unique. Foundation FSSC adds 18 additional requirements that ISO 22000 does not state explicitly. These include food fraud, food defence, allergen management, environmental monitoring and food safety culture.
For example, a juice producer makes a food fraud plan. In it, the company assesses the risk that a supplier mixes in cheaper concentrate. It then takes measures, such as checking origin documents.
We explain the full list of all 18 requirements one by one on additional requirements.
What does this mean for the audit?
An auditor assesses all three building blocks together. They do not only check whether your documents are correct. They also check whether people on the shop floor know how the system works. Read how an audit runs on the audit process.