ISO 22000 is an international standard for food safety management systems. FSSC 22000 is a certification scheme built on ISO 22000 that adds detailed prerequisite programmes and extra requirements. The main practical difference is that FSSC 22000 is recognised by the Global Food Safety Initiative (GFSI), while ISO 22000 on its own is not.
Many large buyers require a GFSI-recognised certificate. For them, ISO 22000 alone is usually not enough.
What each one contains
- ISO 22000: a management system framework covering hazard analysis, HACCP principles, operational controls, verification and continual improvement.
- Prerequisite programmes: the basic hygiene and site conditions. For food manufacturing, FSSC 22000 uses the ISO/TS 22002 series, which sets out these programmes in detail.
- FSSC additional requirements: items such as food fraud mitigation, food defence, allergen management, environmental monitoring and food safety culture.
Why the difference matters
ISO 22000 lets a plant decide how to meet its hygiene basics. That can be done well or badly. FSSC 22000 sets those basics out more strictly and adds checks against fraud and deliberate contamination, which matter for spices because adulteration is a known risk. See how to avoid adulteration when buying spices.
FSSC 22000 audits also follow scheme rules on audit length, auditor competence and, at set intervals, unannounced audits.
How to check a certificate
- Look the site up on the FSSC 22000 public register.
- Check the plant address matches the factory you will buy from.
- Check the scope covers your product and process, such as cleaning, grinding or steam sterilisation.
- Check the certification body and its accreditation.
- Ask for the last audit report and how major findings were closed.
Which one to ask for
A certificate shows a system exists. It does not prove every lot is safe. You still need a spec, lot testing at an accredited lab and checks at loading. Some well-run plants have no GFSI certificate, and some certified plants are weak in practice. Your own audit closes that gap. For product-specific lists, see what certifications a dehydration plant should have.
Start with your customers. If they require a GFSI-recognised scheme, ask for FSSC 22000, BRCGS or another recognised scheme they accept. If they do not, ISO 22000 can still be a sign of a structured plant, but check it more closely on site. In India, many mid-sized spice and seed processors hold ISO 22000 or FSSC 22000, while fewer hold BRCGS. Plants that sterilise or grind for export to food manufacturers are more likely to hold a GFSI-recognised certificate.
How we help
We verify FSSC 22000 or ISO 22000 certificates on the public registers and audit the plant against your own requirements. If your customer needs GFSI recognition, we only shortlist plants that hold it. Ask for a free sourcing review.