FSSC 22000 Version 6: What It Is, Who Needs It, and How to Get Certified

For organisations that want GFSI recognition built on an ISO foundation, one scheme stands out: FSSC 22000. Now in its sixth version, it has become one of the most widely adopted food safety certifications in the world, spanning everything from ingredient manufacturing to packaging production. This guide unpacks what FSSC 22000 v6 actually consists of, which businesses it serves, what a compliant management system looks like, and the audit journey from stage 1 to a three-year certification cycle. It is intended for quality leaders, food safety team members, and executives weighing their certification options.

What is FSSC 22000?

FSSC 22000 (Food Safety System Certification 22000) is a complete, GFSI-recognised certification scheme for food safety management systems. Rather than inventing requirements from scratch, it assembles three proven components into a single certifiable package:

1. ISO 22000 — the international food safety management system standard, contributing the management-system architecture.
2. Sector-specific prerequisite programme (PRP) technical specifications — such as the ISO/TS 22002 series or equivalents, defining the concrete hygiene and infrastructure requirements for each food chain category.
3. The FSSC additional requirements — scheme-specific obligations covering management of services, product labelling, food defence, food fraud mitigation, allergen management, environmental monitoring, and transport, among others.

From ISO 22000, the scheme inherits the High-Level Structure shared by modern ISO management standards, the Plan-Do-Check-Act cycle, risk-based thinking applied at both organisational and operational levels, and the integration of prerequisite programmes with HACCP principles.

Version 6 strengthens alignment with the updated ISO 22000 and raises the bar in areas that reflect where the industry is heading: food safety culture, quality management, equipment management, and environmental sustainability considerations, all shaped by current GFSI benchmarking expectations.

Who needs FSSC 22000 certification?

One of the scheme's great strengths is its breadth. Scope is defined through the food chain categories, and eligible organisations include:

• Food and feed manufacturers across virtually all product types.
• Food packaging producers — a category where FSSC has particularly strong adoption.
• Catering operations serving prepared food at scale.
• Retail and wholesale operations.
• Transport and storage providers supporting the food chain.

The typical driver is a customer mandate for GFSI-recognised certification — from multinational brand owners, retailers, and manufacturers who use GFSI benchmarking to rationalise their supplier approval. Organisations that already operate ISO management systems (ISO 9001 in particular) often favour FSSC 22000 because its ISO backbone integrates seamlessly with what they already run.

Key benefits of certification

• Full GFSI recognition, satisfying retailer and manufacturer requirements worldwide and opening doors that unbenchmarked certificates cannot.
• An ISO-based structure that integrates readily with ISO 9001, ISO 14001, and other management systems — one framework, not a patchwork.
• Reduced duplication of customer audits, freeing technical teams from a rolling calendar of second-party inspections.
• Demonstrable, improved control of food safety hazards, from PRP discipline through to validated hazard control plans.
• A robust engine for continual improvement, driven by the PDCA cycle, internal audit, and management review.

Because FSSC 22000 covers both food and packaging manufacturing, corporate groups can standardise on a single scheme across diverse sites — a quiet but significant efficiency gain.

What's inside the management system?

An FSSC 22000 v6 system weaves together management-system and operational elements:

• Context, leadership, and policy — understanding interested parties, defining scope, and demonstrating top-management commitment, including a planned and measured food safety culture.
• Planning — risks and opportunities at the organisational level, food safety objectives, and change management.
• Support — resources, competence and training, communication, and documented information control.
• Prerequisite programmes built on the applicable ISO/TS 22002 specification: infrastructure, cleaning, pest control, personnel hygiene, utilities, and waste.
• The hazard control plan — HACCP-based analysis identifying CCPs and operational PRPs, with validated control measures, monitoring, and corrections.
• FSSC additional requirement elements: food defence threat assessment, food fraud vulnerability assessment and mitigation plans, allergen management, environmental monitoring programmes, labelling controls, and management of purchased services and transport.
• Performance evaluation — monitoring and measurement, internal audit, and management review.
• Continual improvement, closing the PDCA loop.

How the scheme is structured

Structurally, certification is assessed against the three stacked layers: the ISO 22000 clauses (following the High-Level Structure from context through improvement), the sector PRP specification for your food chain category, and the FSSC additional requirements. All three carry equal weight in the audit — a common pitfall is polishing the ISO 22000 layer while under-documenting the additional requirements, which auditors examine closely.

The road to certification

FSSC 22000 follows the classic accredited certification pathway:

1. Gap analysis against all three scheme components for your category.
2. Implementation — building PRPs, conducting the hazard study, documenting the system, and training the team.
3. Operational evidence — running the system to generate records: monitoring data, internal audits, a management review.
4. Stage 1 audit — the certification body reviews documentation and readiness.
5. Stage 2 audit — the full on-site assessment of implementation and effectiveness; non-conformities must be resolved before certification.
6. Surveillance and recertification — annual surveillance audits within a three-year certification cycle, including provisions for unannounced audits in line with scheme rules.

Plan realistically: most organisations need several months between gap analysis and stage 1, with the hazard study and PRP evidence-building typically on the critical path.

How AGS can help

The three-layer architecture of FSSC 22000 v6 means three layers of documentation to get right — and that is exactly what the AGS FSSC 22000 v6 Management System Toolkit delivers. This Advanced-tier package of 70 files provides professionally structured, fully editable manuals, procedures, forms, and compliance matrices spanning the ISO 22000 requirements, prerequisite programmes, and the FSSC additional requirements, including food defence and food fraud documentation that auditors scrutinise most. Every template is designed for rapid tailoring to your products, category, and site realities, compressing months of drafting into weeks of focused adaptation. If your goal is a confident stage 1, a clean stage 2, and a system your team can actually live with, the AGS toolkit is the strongest possible starting point.

View the toolkit →