How was this comparison put together?
By reading the two official texts side by side, with no intermediate summary. The “Version 6” column cites the April 2023 scheme; the “Version 7” column cites the May 2026 scheme, checked against the Foundation’s document that shows every change in red, Changes Version 6 and Version 7 – Scheme. A point appears here only if it has been checked in both texts. The others are listed at the end, pending verification.
To understand what each change means on the ground, read our guide to FSSC 22000 Version 7 changes. This comparison is the quick-reference version, useful for a quality manager preparing the upgrade as well as for a buyer reviewing suppliers’ certificates.
What changes in the core and the scope?
The prerequisite programmes, the granularity of categories and a few scope rules. ISO 22000:2018 remains the management system standard in both versions.
Point | Version 6 | Version 7 |
|---|---|---|
PRPs (Part 2 §2.4) | ISO/TS 22002-x technical specifications and BSI/PAS 221 | ISO 22002-x series: ISO 22002-100:2025 plus the sector part |
Manufacturing PRPs (C, BIII, K) | ISO/TS 22002-1:2009 | ISO 22002-100:2025 + ISO 22002-1:2025 |
Packaging PRPs (I) | ISO/TS 22002-4:2013 | ISO 22002-100:2025 + ISO 22002-4:2025 |
Transport and storage PRPs (G) | ISO/TS 22002-5:2019 | ISO 22002-100:2025 + ISO 22002-5:2025 |
Retail and wholesale PRPs (FI) | BSI/PAS 221:2013 | ISO 22002-100:2025 + ISO 22002-7:2025 |
ISO 22000:2018 (§2.3) | Standard cited on its own | “Including any amendments issued by ISO” |
Sub-subcategories | No table | Table 1.1 (C0-1 to K-2), for auditor competence |
Multi-site certification | E, FI, FII, G | BIII, E, FI, FII, G |
Wholesale on the main site | No explicit rule | Subcategory FI added to the manufacturing category |
Off-site warehouse also storing for a sister company | Separate certification of the warehouse | Category G added to the main site’s certificate |
Off-site warehouse storing for third-party customers | Separate certification of the warehouse | Outside the main site’s scope; separate G certification possible |
Off-site storage included in the audit | Same entity, same system | Same entity, same system, same country |
Accreditation framework | IAF MLA | Global ACI MRA |
The detail of the PRPs, category by category and for a Moroccan plant, is in our article on ISO 22002-100:2025 and the sector PRPs.
What changes in the additional requirements?
Thirteen headings of section 2.5 carry a change, of substance or of reference; five stay the same in substance.
Heading | Version 6 | Version 7 |
|---|---|---|
2.5.1 a Laboratories | Analyses for safety verification or validation; reference to ISO 17025 | Analyses of critical parameters, performed in accordance with the applicable requirements of ISO/IEC 17025 |
2.5.1 b and d Purchasing, specifications | C, D, I, FII, G, K | BIII added; specifications based on scientific principles where there is no legislation |
2.5.2 d Printing | Category I only | Any site that prints labels or packaging |
2.5.3 Food defence | Threat assessment and plan described by FSSC | On top of ISO 22002-100:2025 clause 16.2; competent personnel |
2.5.4 Food fraud | Vulnerability assessment and plan described by FSSC | On top of ISO 22002-100:2025 clause 16.3; competent personnel |
2.5.6 h Allergens | “Not applicable” possible in category D | Extended to pet food |
2.5.8 Culture | Objectives, four elements, plan, management review | Plus: sufficient resources, demonstrable commitment from all personnel |
2.5.10 Transport and storage | Requirement specific to FI (BSI/PAS 221 clause 9.3) | Removed; references updated (ISO 22002-100 clause 11.1) |
2.5.11 Hazard control | References to ISO/TS 22002-1 and -6 | References to ISO 22002-1:2025 and ISO 22002-6:2025, clause 12 |
2.5.12 PRP verification | BIII, C, D, G, I, K | BIII, C, D, E, FI, G, I, K |
2.5.13 Design | Shelf-life testing for all categories covered | Testing limited to BIII, C, D, K; new g) packaging design |
2.5.14 | Personnel health status (D) | Carcass traceability (C0) |
2.5.16 Food loss and waste | Policy and objectives | Objectives with measurable targets and deadlines |
2.5.18 Multi-site | E, F, G | BIII, E, F, G; internal auditor training on ISO 22002-x |
The same in substance: 2.5.5 (logo), 2.5.7 (environmental monitoring), 2.5.9 (quality control), 2.5.15 (equipment) and 2.5.17 (informing the certification body within 3 working days). The culture change in v7 is detailed in our article on FSSC 22000 food safety culture.
What changes in audit duration and the cycle?
The duration formula and several cycle rules that v6 left implicit. FTE stands for full-time equivalents.
Point | Version 6 | Version 7 |
|---|---|---|
FSSC time, fewer than 100 FTE, no more than 2 HACCP studies | 1 day | 0.5 day |
Reduction of the base duration | Up to 0.25 day | Prohibited |
Small-site exemption | Simple process, fewer than 20 FTE, 1 HACCP study | Fewer than 20 FTE, no more than 2 HACCP studies, all categories |
Minimum duration | 2 days | 1.5, 2 or 2.5 days; at least 2 days in C, D, K |
Rounding | Half day | Quarter day |
Skipping an audit in the cycle | No explicit rule | Prohibited |
Recertification more than 6 months before expiry | No rule | New 3-year cycle, current certificate shortened |
Relocation | At least a Stage 2 at the new site | Withdrawal within 3 working days once activity stops; Stage 2 within 6 months |
Blackout days (unannounced) | “May” be agreed | “Shall” be agreed |
Unannounced audit with no production | No rule | Audit rescheduled |
Full remote audits | After a serious event | Same, never more than two in a row |
Certificate | Decision, initial certification, issue and expiry dates | Plus: effective date, dates of the last unannounced audit, new decision after an unannounced audit |
Technical review | Required | Written procedure mandatory |
Translated report | English, or the audit language by agreement; translations checked by the certification body | Same, under the translation rules set by the Foundation |
The consequences for your quote are analysed in our article on FSSC 22000 v7 audit duration.
What changes for auditors and certification bodies?
Qualification becomes stricter and more specialised.
Point | Version 6 | Version 7 |
|---|---|---|
Consultancy experience accepted | Food safety or quality, 6 months at most | Food safety only, 6 months at most |
Lead auditor course | 40 hours, FSMS or QMS | 40 hours, recognised by a competent body (CQI/IRCA, for example), covering ISO 19011 and ISO/IEC 17021-1 |
PRP training | 3 hours per PRP standard | 3 hours on ISO 22002-100 and the relevant parts |
Further training (3.5.1 g) | Accreditation requirements (ISO 22003-1, ISO/IEC 17021-1) | Mandatory Foundation training, harmonisation included |
Approval | By the certification body | Profile pre-approved by the Foundation |
Competence | By subcategory, with subdivisions set by each certification body for the broadest ones (CIV, I) | By subcategory and sub-subcategory defined by the Foundation; assessed at every extension |
Artificial intelligence | No rule | Mandatory governance framework if the certification body uses AI (Part 3 §9) |
Accreditation bodies’ witness audits | FSSC 22000 audits | Same; audits against another scheme and simulated audits excluded |
Annex 2 adds two reporting rules. A PRP nonconformity is raised against the clause of ISO 22002-100, unless it concerns a requirement specific to the sector part. Several deviations against the same requirement form a single nonconformity, assessed to decide whether it is a systemic issue. The report must also confirm the climate change analysis in the context of the management system.
What does not change between v6 and v7?
The nonconformity regime and the backbone of the cycle. That is good news: your nonconformity handling procedures remain valid.
Rule | Both versions |
|---|---|
Nonconformity grades | Minor, major, critical; no “opportunities for improvement” |
Minor | Action plan approved by the certification body within 28 calendar days |
Major | Closed within 28 calendar days, otherwise suspension |
Critical | Suspension within 3 working days; response within 14 days; follow-up audit between 6 weeks and 6 months |
Cycle | 3 years, two annual surveillance audits, first surveillance within 12 months |
Unannounced audit | At least one surveillance audit per 3-year period; never the initial audit |
Time on the shop floor | At least 50% of audit duration |
Interpreter | At least 20% more time |
Auditor rotation | No more than two 3-year cycles at the same site |
Which points remain to be checked?
Those that are still moving or depend on paid texts. Keep them on your watch list until the upgrade.
To turn this comparison into an action plan, follow our FSSC 22000 v6 to v7 upgrade plan.