Key Clauses of ISO 22000

An auditor who knows clause numbers but not clause intent will miss the point of most findings. A missing signature on a training record and a hazard control plan built on an out-of-date flow diagram both breach the standard, but they do not carry equal risk. Reading the key clauses with their purpose in mind lets you rank what you find and explain why it matters to the people who must fix it.

ISO 22000:2018 has seven requirement clauses, 4 to 10. Each one answers a different question. What are we, and what affects us? Who leads, and who is responsible? What are we trying to achieve, and how will change be handled? What support do people need? How do we control hazards in operation? How do we know the system works? What do we do when it does not, and how do we improve? Work through them in that order when you plan an audit.

Clauses 4 and 5: context and leadership

Clause 4 requires understanding internal and external issues that affect food safety outcomes, understanding interested parties and their relevant requirements, determining the scope of the system, and maintaining the system and its processes. In practice, audit evidence includes the documented scope, lists of legal and customer requirements, and examples where a context change, such as a new export market, triggered system changes. A scope statement that excludes a warehouse where in-scope product is stored is a clause 4 problem with real consequences.

Clause 5 requires top management to demonstrate leadership and commitment, establish a food safety policy appropriate to the organisation, and assign roles and responsibilities, including a food safety team with a team leader who has defined duties. Test leadership by sampling decisions. Did management provide resources for a failing chiller? Did they attend review and close its actions? Did production pressure override a hold decision, and if so, what did leaders do? Policy posters answer none of those questions.

Clauses 6 and 7: planning and support

Clause 6 requires actions to address risks and opportunities, measurable food safety objectives with plans covering what will be done, who is responsible, and when, and planning of changes in a controlled manner. Change is a frequent source of findings: a new ingredient, a faster line speed, a replacement pump installed without informing the food safety team. Ask how changes reach the hazard analysis. If the answer relies on someone remembering to tell someone, the planning process is weak.

Clause 7 covers the resources that make control possible. It includes people, infrastructure, work environment, control of externally provided processes, products, and services, competence, awareness, communication, and documented information. Clause 7.4 on communication deserves attention from auditors because so many failures are communication failures: allergen label changes not reaching the packing line, supplier specification updates sitting in an inbox, customer complaint trends never reaching the food safety team. Follow a recent change through the communication chain and see where it stops.

Clause 8: operation

Clause 8 is the largest and most technical. Its parts include operational planning, prerequisite programmes in 8.2, traceability in 8.3, emergency preparedness in 8.4, hazard control in 8.5, updating of hazard control information in 8.6, verification planning in 8.7, control of monitoring and measuring in 8.8, and control of nonconformities in 8.9, covering corrections, corrective actions, potentially unsafe product, evaluation for release, disposition, and withdrawal.

Within clause 8.5, know the sequence cold. Preliminary information and documents are gathered and kept updated. Hazards are identified and assessed to find significant hazards. Control measures are selected and categorised as managed by operational prerequisite programmes or at critical control points. Combinations of control measures are validated. The hazard control plan then specifies, for each CCP, critical limits and monitoring, and for each OPRP, action criteria and monitoring, together with corrections and corrective actions when limits or criteria are not met. Auditing clause 8.5 out of sequence produces shallow findings; auditing it in sequence exposes where the chain breaks.

Traceability and emergencies

Two parts of clause 8 are often under-audited. Traceability must allow you to link finished product to raw materials and distribution, and to withdraw unsafe product. Test it with a real lot, forward and backward, against time. Emergency preparedness must cover situations such as fire, flood, power failure, and accidental contamination, with response actions and periodic testing where practicable. A plan never tested and unknown to shift staff is weak evidence of preparedness.

Clauses 9 and 10: evaluation and improvement

Clause 9.1 requires determining what needs monitoring and measuring, using valid methods, and analysing results, including verification of prerequisite programmes and the hazard control plan. Clause 9.2 requires internal audits at planned intervals under an audit programme. Clause 9.3 requires management review at planned intervals with defined inputs and outputs. Auditors should check that these three feed each other: verification trends appear in review inputs, review actions are tracked, and audit programmes respond to risk and previous results.

Clause 10 requires controlling nonconformity, evaluating the need for corrective action to eliminate root causes, continually improving the system, and updating it. A site can have tidy clause 8 records and still fail here if the same deviation recurs monthly with a fresh correction each time and no cause ever addressed. Recurrence is the clearest signal that clause 10 is not working.

Key points

• Clauses 4 to 10 each answer a distinct question, from context and leadership through operation to improvement.
• Leadership under clause 5 is tested through decisions and resources, not policy documents alone.
• Clause 6 change planning is a common weak point; changes must reach the hazard analysis.
• Clause 8.5 follows a set sequence from preliminary steps through hazard assessment to the hazard control plan.
• Clauses 9 and 10 fail visibly when the same deviation keeps recurring without root cause action.