Introduction to ISO 22000: Scope and Benefits

A small sauce maker loses a supermarket contract after a labelling error ships a product containing mustard without declaring it. No one was ill, but the retailer no longer trusts the maker’s controls. A food safety management system built on ISO 22000 would not guarantee zero errors. It would make that error far less likely by controlling allergen information, label verification, supplier data, and change management as connected processes.

Understanding scope and benefits helps you audit with judgement. If you do not know what the organisation claims its system covers, you cannot judge whether evidence is sufficient. If you do not know why the organisation adopted the standard, you cannot judge whether its objectives and planning make sense.

Scope of ISO 22000

Clause 1 states that ISO 22000:2018 specifies requirements for a food safety management system that enables an organisation directly or indirectly involved in the food chain to plan, implement, operate, maintain, and update a system providing products and services that are safe according to their intended use. It applies regardless of size or complexity.

Organisations in scope include primary producers, feed producers, food manufacturers, transport and storage providers, caterers, retailers, and producers of equipment, packaging material, cleaning agents, additives, and ingredients. Indirect participants matter because their products and services can introduce hazards: a packaging film migrating chemicals, a cleaning agent leaving residues, or a pest control service applying chemicals incorrectly.

Each organisation must also define its own FSMS scope under Clause 4.3: the products, services, processes, and production sites included. Scope statements must be available as documented information. As an auditor, check scope carefully at the opening meeting. Exclusions that remove a high-risk process still performed on site, a warehouse omitted from traceability, or a product line excluded without justification undermine the audit and any certificate.

Intended Outcomes and Benefits

Benefits claimed for ISO 22000 should be stated honestly. Properly implemented, a system based on the standard helps an organisation to:

• Consistently provide safe products and services that meet customer and applicable statutory and regulatory requirements.
• Address risks associated with its objectives at both organisational and operational levels.
• Demonstrate conformity to specified FSMS requirements to customers, regulators, and certification bodies.
• Improve communication of hazards and controls along the food chain, reducing surprises between supplier and customer.
• Provide a structured basis for handling incidents, withdrawals, and recalls through traceability and emergency preparedness.

Benefits do not arrive from a manual alone. Organisations that treat implementation as paperwork gain little. Organisations that use hazard analysis to redesign controls, use verification results to target training, and use management review to allocate resources gain operational benefits: fewer deviations, faster investigations, clearer responsibilities during incidents, and more credible tenders where customers require a recognised system.

Be cautious with exaggerated claims. ISO 22000 does not replace legal compliance, does not certify that a specific batch is safe, and does not eliminate the need for competent staff. Certification attests that the management system met requirements at the time of audit, based on sampling. Lead auditors should correct misunderstandings about this during opening and closing meetings without diminishing the value of the work.

Who Uses the Standard and How

Different users read the standard differently. Implementing organisations use it to build and run the system. Customers use certificates and audit reports as one input to supplier approval, alongside their own audits and performance data. Regulators may recognise the system as evidence of a preventive approach, but legal duties remain separate. Certification bodies use it as audit criteria, combined with accreditation rules.

ISO 22000 Compared With Related Schemes

HACCP alone covers hazard analysis and critical control points for a process. ISO 22000 embeds HACCP principles inside a full management system with leadership, support, performance evaluation, and improvement. FSSC 22000, as noted in professional practice, is a certification scheme that uses ISO 22000 plus ISO/TS 22002-1 PRP requirements and additional scheme requirements. BRCGS and SQF are separate GFSI-recognised schemes with their own requirements. Never audit one scheme against another scheme’s checklist. Identify the criteria for this audit and stay with them.

Deciding Whether the System Fits the Organisation

Proportionality is part of scope. A five-person bakery and a multinational dairy group both must meet the same requirements, but documented information, team structure, and verification methods will differ in scale. Audit effectiveness, not volume. A concise, current, well-understood hazard control plan in a small business can conform fully. A large binder copied from a template, with hazards that do not match the site, does not.

Start every audit by anchoring scope, products, processes, sites, shifts, and outsourced processes. Confirm what has changed since the previous audit. That anchor shapes your sampling plan, your team competence needs, and your conclusions about benefits and conformity.

Scope also shapes commercial reality. Customers often require certification covering specific products or sites before listing a supplier, and a narrow scope can exclude the very product a customer wants to buy. Conversely, an organisation that rushes to include a new site before its system is implemented there risks major findings and suspension. As a lead auditor, test scope decisions for honesty in both directions: nothing the organisation does that affects food safety should hide outside the boundary, and nothing inside the boundary should be claimed before controls, competence, and verification are genuinely operating and evidenced over time.

Key points

• ISO 22000 applies to any organisation in the food chain, direct or indirect, regardless of size.
• Each organisation defines its FSMS scope under Clause 4.3 covering products, services, processes, and sites.
• Main benefits are consistent safe output, risk control, demonstrated conformity, and better communication and incident handling.
• Certification judges the management system by sampling; it does not certify individual batches as safe.
• Audit proportionality: judge effectiveness for the organisation’s scale, not the size of its documentation.