What It Is

ISO 22000:2018 is the international certification standard for Food Safety Management Systems (FSMS). It applies to any organization in the food chain, providing a systematic framework to ensure safe food through hazard prevention, compliance with regulations, and effective communication. Built on risk-based thinking and HLS, it integrates HACCP principles with management system discipline using dual PDCA cycles.

Key Components

• **Clauses 4-10Context, leadership, planning, support, operation, evaluation, improvement.
• Core elements: PRPs, hazard analysis, CCPs/OPRPs, traceability, verification.
• Emphasizes documented information over rigid manuals.
• Certification via accredited bodies with staged audits.

Why Organizations Use It

• Meets customer/regulatory demands, enables market access.
• Reduces risks of recalls, contamination, legal issues.
• Builds trust, supports GFSI schemes like FSSC 22000.
• Drives efficiency, integration with ISO 9001/14001.

Implementation Overview

• Phased: gap analysis, PRPs, hazard plans, training, audits.
• Scalable for SMEs to multinationals in food sectors globally.
• Requires 6-12 months typically, with annual surveillance audits.

What It Is

ISO 22301:2019 is the international standard titled Security and resilience — Business continuity management systems — Requirements. It establishes a certifiable framework for implementing a Business Continuity Management System (BCMS) to protect against, reduce the likelihood of, and recover from disruptions. The standard uses a risk-based PDCA (Plan-Do-Check-Act) cycle, providing flexible, high-level requirements adaptable to any organization.

Key Components

• 10 clauses (4-10 core): context, leadership, planning (BIA, risk assessment), support, operation, evaluation, improvement.
• Built on Annex SL for integration with standards like ISO 27001.
• Core principles: resilience, continual improvement, testing.
• Certification model: 3-year validity with annual surveillance audits.

Why Organizations Use It

Organizations adopt it for resilience against cyberattacks, disasters, and supply failures, minimizing downtime and losses. It ensures regulatory compliance (e.g., NIS Directive), enhances stakeholder trust, reduces insurance costs, and provides competitive edges like procurement advantages. Benefits include proactive risk management and reputation protection.

Implementation Overview

Typical approach: gap analysis, BIA, policy development, training, testing, audits. Applicable to all sizes/sectors globally. Key activities: leadership buy-in, documentation, exercises. Two-stage certification (readiness, effectiveness) takes 6-8 weeks post-prep.