- Keep flow diagrams verified on site and dated, because the audit starts there
- Maintain the hazard analysis and the hazard control plan on their review dates
- Hold prerequisite programmes under version control with a verification schedule
- Run the traceability and mock recall exercises and record the reconciliation
- Carry every critical limit deviation through correction, root cause and verification
ISO 22000:2018
The food safety management standard. It folds the HACCP principles and prerequisite programmes into a management system, so hazard control and document control run as one system.
- 4Context of the organization4
- 5Leadership4
- 6Planning3
- 7Support8
- 8Operation16
- 9Performance evaluation3
- 10Improvement2
ISO 22000, in practice.
Food safety management systems. Requirements for any organization in the food chain.
Anyone in the food chain: growers, processors, packers, transporters, retailers and the businesses that supply equipment or packaging to them.
The clause numbers and titles above are the standard's own public structure. The standard itself is copyright of its issuing body and you buy it from them. What we add is the interpretation underneath, and that lives in your workspace.
Every month, on a schedule you can check.
This is the running work for this standard specifically. The general shape is the same across all of them.
- Flow diagrams with on-site verification signature and date
- Hazard analysis worksheets and CCP determination rationale
- CCP and OPRP monitoring records with corrections
- Calibration certificates for monitoring equipment, traceable
- Mock recall report with reconciliation percentage and elapsed time
Each one is filed against the requirement it satisfies as the work happens, so the pack for the next visit already exists.
Standards that share the structure.
ISO 9001:2015
The quality management standard most certified organisations start with, and the one most other management system standards borrow their structure from.
ISO 22301:2019
The continuity standard, built around one question: when the thing you deliver stops, how quickly does it come back, and who decided that was fast enough.
SOC 2 (TSC 2017, rev. 2022)
Not a certification but an attestation. An independent auditor reports on whether your controls were designed properly, and for Type II, whether they operated over a period.
Name a clause in ISO 22000 and we will open it.
The requirement, the control attached to it, the evidence that satisfies it, and the audit checklist it generates. Nothing prepared in advance, because there is nothing to prepare.
