What do BRCGS, IFS and FSSC 22000 share, and what sets them apart?

All three are recognised by GFSI and rest on the same foundation: HACCP, prerequisite programmes, traceability, allergens, fraud, food defence and food safety culture. What separates them comes down to three points: who writes the standard, how the audit is scored and how audits are organised over time.

GFSI writes no standard. It compares certification programmes with its benchmarking requirements which, according to its page of recognised programmes, are not a food safety standard and cannot be used to audit or certify any business. Each programme owner writes its own text and audit rules; a certification body audits the site and issues the certificate. A consultant prepares the site and never certifies it.

Point of comparison

BRCGS Food Safety

IFS Food

FSSC 22000

Owner

BRCGS

IFS Management GmbH, owned by the retail federations HDE and FCD

Foundation FSSC, a Dutch not-for-profit organisation

Origin

British retail

Created in 2003 by German (HDE) and French (FCD) retail

ISO 22000 structure

Current version

Issue 9; Issue 10 in preparation, no date announced

Version 8, mandatory since 1 January 2024

Version 7, published May 2026; v6 audits possible until 30 April 2027

What the GFSI page shows

Issue 9 recognised; undergoing benchmarking against version 2024 of the requirements

Version 8 recognised; undergoing benchmarking against version 2024

Version 6 recognised; Version 7 undergoing benchmarking against version 2024

Who certifies

Certification body approved by BRCGS

Body accredited to ISO/IEC 17065:2012 and under contract with IFS

Body licensed by the Foundation, accredited to ISO/IEC 17021-1 and ISO 22003-1

The last row is not an administrative detail. GFSI’s benchmarking requirements allow two certification routes: product certification, under ISO/IEC 17065, and management system certification, under ISO/IEC 17021-1 together with ISO 22003-1. IFS Food follows the first route and assesses products and processes, requirement by requirement. FSSC 22000 follows the second and audits a management system built on ISO 22000:2018.

SQF, owned by SQFI in the United States, and GLOBALG.A.P., which certifies farms, are compared further down. All twelve recognised programme owners are presented on our page GFSI standards compared.

How is each standard built?

BRCGS and IFS are stand-alone standards, written as lists of audit requirements. FSSC 22000 combines an ISO standard, ISO prerequisite programmes and additional requirements. The knock-out requirements carry different names: fundamental requirements at BRCGS, KO requirements at IFS. FSSC 22000 names none, but a critical non-conformity suspends the certificate.

Element

BRCGS Food Safety Issue 9

IFS Food version 8

FSSC 22000 Version 7

How the text is organised

Nine chapters; chapter 8 (high-risk and high-care zones) and chapter 9 (traded products) apply depending on the site

Part 1 certification protocol, Part 2 audit checklist in five chapters, Part 3 requirements for certification bodies and auditors

ISO 22000:2018, ISO 22002-100:2025 and the sector-specific part, additional requirements 2.5.1 to 2.5.18

Decisive requirements

12 fundamental requirements

10 KO requirements

No knock-out requirement named; minor, major or critical non-conformities

Access to the text

Free of charge on the BRCGS online store

Official text downloadable from the IFS website, in French among other languages

Scheme published by the Foundation, with the English version as the only binding one; ISO 22000 and ISO 22002-x to be purchased

The five chapters of the IFS Food version 8 checklist are: governance and commitment; food safety and quality management system; resource management; operational processes; measurements, analyses and improvements. The BRCGS chapters and the list of the twelve fundamental requirements are covered in our guide to BRCGS certification in Morocco; the three building blocks of FSSC 22000 in our FSSC 22000 Version 7 consultant guide.

One topic, three treatments

The topics are the same; their weight in the audit is not. The table matches the clauses we work on first in a gap analysis, according to the official texts.

Topic

BRCGS Food Safety Issue 9

IFS Food version 8

FSSC 22000 Version 7

Management commitment and culture

Fundamental requirement 1.1; culture plan reviewed at least once a year

Policy that includes food safety culture, broken down into objectives (1.1.1); staff responsibilities as KO No. 1 (1.2.1)

Additional requirement 2.5.8: objectives, a plan with targets and timelines, results presented at management review

HACCP

Fundamental requirement 2

Monitoring of each CCP as KO No. 2 (2.3.9.1)

Hazard analysis and hazard control plan under ISO 22000:2018

Personnel hygiene and training

Training as fundamental requirement 7.1

Personnel hygiene as KO No. 3 (3.2.2)

ISO 22002-100:2025 prerequisite programmes

Traceability

Fundamental requirement 3.9: test at least once a year, achievable within 4 hours

KO No. 7 (4.18.1)

ISO 22000:2018, clause 8.3; carcass traceability in category C0 (2.5.14)

Internal audits

Fundamental requirement 3.4: at least four dates spread over the year

KO No. 8 (5.1.1): programme planned over 12 months, completed within 15 months at most

ISO 22000:2018, clause 9.2

The practical consequence: the same gap does not have the same effect. At IFS, a D on a KO requirement deducts 50% of the points and rules out the certificate. At BRCGS, a major non-conformity against the statement of intent of a fundamental requirement weighs directly on the certification decision; the exact consequence is set by the audit protocol of the Standard. At FSSC 22000, everything depends on the severity the auditor assigns: minor, major or critical.

The other KO requirements of IFS Food version 8 cover compliance with customer agreements (4.1.3), raw material specifications (4.2.1.3), foreign material (4.12.1), recall and withdrawal (5.9.1) and corrective actions (5.11.3).

How is the audit result scored?

BRCGS gives a grade, IFS Food a percentage and a level, FSSC 22000 a simple grading of non-conformities. For a buyer, the grade and the score are information on top of the certificate: it can require a minimum.

Scoring

BRCGS Food Safety Issue 9

IFS Food version 8

FSSC 22000 Version 7

Result

Grade from AA to D, according to the number and level of non-conformities; “+” after an unannounced audit

Percentage score: at least 95% for Higher level, at least 75% and below 95% for Foundation level

No score: minor, major or critical non-conformities

What prevents certification

A critical non-conformity, or too high a number and level of non-conformities (BRCGS080); the scale is in the audit protocol

More than one Major non-conformity, a score below 75% or a KO scored D; a single Major requires a follow-up audit

At the initial audit, a critical fails the audit; a major not closed means repeating stage 2

After the audit

Evidence of correction within 28 days; certificate issued no later than 42 calendar days after the first audit day

Action plan completed within four weeks; certificate valid for 12 months

Correction, root cause analysis and action plan within 28 calendar days

Effect on what follows

Grade C or D: an audit every six months

Major closed by a follow-up audit: certificate at Foundation level, even above 95%

Critical during the cycle: suspension within three working days, full on-site follow-up audit

IFS scoring uses an A to D scale for each requirement; it is explained on our IFS certification page. SQF also scores its audits, and SQFI states that the scoring is updated with Edition 10; the applicable scale is in the SQF Code of each edition.

What we see in gap analyses: sites aiming for IFS Higher level or a BRCGS AA grade prepare differently. They do not just avoid major findings; they chase the B scores and minor non-conformities that pull the score or the grade down.

Which audit model: frequency, unannounced audits, cycle?

All three require unannounced audits, with three different mechanisms. BRCGS and IFS audit the whole standard every year; FSSC 22000 follows a three-year cycle, as ISO certifications do.

Organisation

BRCGS Food Safety Issue 9

IFS Food version 8

FSSC 22000 Version 7

Frequency

12 months; 6 months at grade C or D

Recertification audit every year, against the full checklist

Three-year cycle: initial audit in two stages, two surveillance audits, recertification

Unannounced audits

At least one every three years; the year is notified within three months after the audit; window of the last four months of the cycle

At least one audit in three; window from 16 weeks before to 2 weeks after the anniversary date; year of the first unannounced audit notified at least six months ahead

At least one unannounced surveillance audit per three-year period

Non-audit days

Ten at most (five for six-monthly audits), with a justified reason, notified four weeks ahead

Ten operational days at most, in three periods at most

Blackout days agreed in advance with the certification body, with no number set by the scheme (Part 3, section 5.4.2)

Partly remote audit

Blended audit at recertification only, remote part capped at 50%

Full on-site audit on consecutive working days; split audit with a remote part only in exceptional circumstances

ICT method possible; from 1 May 2027, both parts are conducted against v7

For a seasonal exporter, two rules matter. IFS provides that, for seasonal products, the usual window does not apply: the unannounced audit takes place during the declared production season, with no blackout period. BRCGS reduces the number of excluded days pro rata when the season is shorter than the four-month window.

What this changes for a Moroccan site:

  • records must be up to date every day, not the day before a planned audit;
  • every process owner has a trained deputy able to receive the auditor;
  • the contract with the certification body covers the unannounced audit before the window opens;
  • a site certified to BRCGS and IFS follows two separate unannounced calendars, one per standard.

The budget effects of these rules are compared in our article on BRCGS, IFS and FSSC 22000 certification cost.

Who asks for which standard?

The buyer, always. Market habits are only clues, useful to prepare the commercial conversation: BRCGS is widespread among British retailers, IFS among German and French retailers, FSSC 22000 among multinational manufacturers. Two retailers in the same country may require two different standards.

Programme

Origin according to official sources

Where you often meet it

The question to ask in writing

BRCGS Food Safety

British retail

British retailers and their importers

“What minimum grade, and do you require the unannounced programme?”

IFS Food

HDE and FCD federations, 2003

German and French retail, manufacturers who align their suppliers

“Do you require Higher level or IFS Star status?”

FSSC 22000

Foundation FSSC, ISO 22000 structure

Multinational manufacturers

“Do you accept a v6 certificate until the v7 upgrade?”

SQF

SQFI, Arlington, Virginia

A clue to its origin: North American buyers who name it

“Edition 9 or Edition 10, and from when?”

GLOBALG.A.P. IFA v6

A European retail initiative (EUREPGAP)

Importers and retailers of fresh fruit and vegetables

“GFS or Smart edition, with which add-ons?”

When the request stays generic, “a GFSI-recognised certificate”, any programme recognised for your scope qualifies in principle. Have it confirmed in writing, with the version. Our method for choosing which food safety certification to export with sets out the questions to ask and how to cross-check the answers of several customers.

SQF or GLOBALG.A.P.: which one for primary production?

The one the buyer names. GLOBALG.A.P. IFA v6 certifies the farm, from growing to post-harvest handling, and only its GFS edition is designed for GFSI recognition. SQF covers the farm through its primary production codes, but also the packhouse, the factory and the warehouse under the same name, as PrimusGFS does.

Criterion

GLOBALG.A.P. IFA v6

SQF

Scope

Farm, up to post-harvest handling

Codes for plant and animal primary production, aquaculture, manufacturing and storage

Editions and versions

Smart or GFS; GFS designed for GFSI recognition

Edition 9 audited; Edition 10 published in March 2026, audits expected from January 2027

What the GFSI page shows

IFA GFS v6 listed for plants (BI, BIII) and aquaculture (AII); v6.1 undergoing benchmarking

Edition 9 listed; Edition 10 undergoing benchmarking

Social dimension

GRASP add-on, voluntary except in specific cases, outside GFSI recognition

Not covered here

Who decides

The buyer

The buyer

According to SQFI’s Edition 10 FAQ, Edition 9 remains the only GFSI-recognised SQF programme until Edition 10 is recognised, and Edition 10 requires every site to have a food safety culture assessment plan. According to GLOBALG.A.P.’s IFA page, buyer requirements generally determine which edition a producer implements.

A packhouse (scope BIII) sits on the border: GFSI lists for it, among others, GLOBALG.A.P., PrimusGFS, BRCGS, IFS, FSSC 22000 and SQF. The detail for each link in the chain is on our page GLOBALG.A.P. IFA v6, SQF and PrimusGFS.

How do you choose, and can you combine two standards?

Choose in this order: each buyer’s written requirements, the site’s real scope, your other customers, your existing organisation, then the savings of a common foundation. Yes, you can combine: the foundation is built once, but each audit remains a full audit, with its own scoring and calendar.

Your situation

Likely choice

Watch point

One buyer names a standard

That one, without looking for an equivalent

Version, grade or level, audit programme

Two buyers name two standards

Both, on a common foundation

Two unannounced audit calendars

The request is generic (“GFSI”)

The standard that also serves your other customers

Recognition for your scope and your version

The site also targets ISO 9001:2026 or ISO 14001:2026

FSSC 22000, if your buyers accept it

ISO standards to purchase, three-year cycle

A farm or a producer group

GLOBALG.A.P. IFA v6 GFS, SQF or PrimusGFS, depending on the buyer

Edition, add-ons, certification option

Before booking an audit, check these points:

The case of an exporter serving three buyers with different requirements is worked through in our case study of a Moroccan exporter facing three buyers. To follow the GFSI recognition status of the new versions, read our update on GFSI recognised standards in 2026.