What makes up the cost of ISO 22000 certification?

Five items and one resource: the certification body’s audit, works, testing, consulting, training, and your teams’ time. Only the first can be read in a certification body’s quote; the others depend on your starting gap, which the gap analysis establishes.

Item

What makes it vary

What reduces it

Recurring?

Certification audit

Category, number of HACCP studies, headcount, sites, travel, language

A well-defined scope, an auditor who speaks the site’s language

Yes, every year

Works and equipment

Condition of the buildings, separation of zones, detection equipment, hygienic design

A gap analysis that costs them early and schedules them outside the production season

Mostly in the first year

Laboratory testing

Verification plan, cleaning validation, allergens, finished products

A testing plan based on the hazard analysis, not on habit

Yes

Consulting

Starting gap, team autonomy, days on site

Available process owners who write their own documents

Decreasing

Training

Number of people and levels: operators, food safety team, internal auditors

On-site sessions, partly fundable in Morocco (see the funding section below)

Yes, refreshers

Standards and documentation

ISO 22000:2018, ISO 22002-100:2025, sector part

Buying the right texts once

At each new edition

Internal time

Availability of the food safety manager and of process owners

A schedule that avoids peak season

Ongoing

The most variable item is almost always the works. In our gap analyses, it is most often a damaged floor, missing separation of flows or insufficient ventilation that moves the budget. That is why a serious budget starts with a site visit, never with a package price.

Think over three years, too. The certificate sits within a cycle made of a two-stage initial audit, two annual surveillance audits and a recertification. The first-year budget is only part of the real cost.

How does the certification body calculate the audit duration?

Under ISO 22003-1:2022, the standard for bodies that certify food safety management systems. The FSSC 22000 Version 7 scheme, which uses it as a basis, sums up the formula: a duration Ds equal to the sum of a basic time linked to the food chain category, a time linked to the number of HACCP studies and a time linked to the headcount in full-time equivalents (FTE).

Three parameters therefore weigh on the duration of an ISO 22000 audit:

  • the category: food processing is not calculated like a warehouse or a trading business;
  • the number of HACCP studies: each family of products or processes with distinct hazards adds time;
  • the headcount: counted in FTE; ask the certification body to specify how it counts seasonal workers.

The values of these three times and the rule for counting seasonal workers are set in ISO 22003-1:2022, a paid text: ask the certification body to attach its detailed calculation to its offer.

The number of sites, off-site activities, and the time for preparation and report writing are added. A serious quote details the calculation; a quote that announces a duration without justifying it deserves a written question.

How long does it take to get certified?

It depends on the starting point, and above all on the period needed to produce evidence. The Stage 2 auditor reads records completed during real production: a system written in a few weeks does not shorten that period.

For a Moroccan plant, the starting point is usually its sanitary authorisation from ONSSA (Office national de sécurité sanitaire des produits alimentaires, Morocco’s national food safety office) and the HACCP plan filed with it.

Starting point

What sets the timeline

Relative duration

Living HACCP plan, compliant buildings, team in place

Formalising the system, internal audit, management review

Short

ONSSA authorisation, old HACCP plan, some works

Hazard analysis to redo, PRPs to justify, works to schedule

Medium

Minimal HACCP plan, major works, no dedicated manager

Works, recruiting or training a manager, a culture to build

Long

Two factors often stretch the schedule of a Moroccan plant: production seasons, which rule out works and tie up managers, and the availability of the certification body’s auditors on the desired dates. Book the audit date early, and count backwards.

What will the move to FSSC 22000 cost afterwards?

Less than a first certification, because the ISO 22000 foundation is reused, but more than a routine ISO 22000 audit. FSSC 22000 Version 7 adds audit time, mandatory prerequisite programmes and additional requirements, and it changes the rules of the cycle.

What Version 7 adds

Effect on the budget

FSSC time added to the ISO 22003-1 duration: 0.5 day below 100 FTE, 1 day from 100 to 249 FTE (no more than 2 HACCP studies), 1.5 days from 250 FTE or from 3 HACCP studies

Every audit in the cycle gets longer; no reduction allowed

At least 0.25 day of preparation and, as a rule, 1 day of report writing

Time charged on top of the audit

ISO 22002-100:2025 and the sector part mandatory, except trading without physical handling

Purchase of the standards, cross-reference table, possible works

Additional requirements 2.5.1 to 2.5.18: allergens, environmental monitoring, culture, quality control, food loss and waste

Laboratory testing, written plans, team time

At least one unannounced surveillance audit per three-year cycle

A site that is ready at all times, not only on the announced date

Interpreter: duration increased by at least 20%

Prefer an auditor who speaks the site’s language

Small organisations have a rule of their own: according to the Foundation FSSC FAQ, a site with fewer than 20 FTE and no more than two HACCP studies can go down to 1.5 audit days.

The choice of certification body at the ISO 22000 stage matters. An FSSC-licensed body must already be accredited for ISO 22000:2018 under ISO/IEC 17021-1 and ISO 22003-1:2022 (Part 4 of the scheme): it can carry both certifications. However, the transfer provided for by the scheme only covers existing FSSC 22000 certificates. For a site already certified to ISO 22000, the scheme provides for a transition audit (Part 3, §5.8): the accredited ISO 22000 certificate must still be valid and cover an equivalent scope, but it does not have to come from the same certification body. This audit starts a new certification cycle, meets the objectives of a stage 2 audit and lasts at least two-thirds of Ds plus the FSSC time, without going below the scheme’s minimum durations; a stage 1 audit is at the certification body’s discretion. It leads to an FSSC 22000 certificate valid for three years. The FSSC cost items are detailed in our article on FSSC 22000 certification cost in Morocco, and the full path in the case study of a Moroccan dairy.

Which funding can you use, and how do you avoid extra costs?

Training can be partly funded, the certification audit cannot. For Moroccan companies, the project’s training courses (ISO 22000, HACCP team, internal audit) may fall under the special training contracts (CSF) of OFPPT, under the CSF procedures manual (May 2006, amended by Amendment No. 2 of 2 June 2014), the Office de la formation professionnelle et de la promotion du travail, Morocco’s vocational training office: up to 70% for planned training delivered by an external provider and 40% for unplanned training, with ceilings set according to the vocational training tax (TFP) the company has declared. The GIACs, inter-professional advisory groups organised by sector, can fund 70% of training engineering, capped at MAD 100,000 excluding VAT, under the GIAC procedures manual (March 2003, Amendment No. 1 of 2 June 2014); for the food industry, this is the food-industry GIAC (GIAC Agro). These figures remain indicative, before ceilings, with no commitment.

No amount can be promised in advance: it depends on your TFP, on your planning and on the acceptance of the file. Our CSF and OFPPT funding page offers a simulation based on your actual situation.

Before signing a consulting or certification quote, check these points.