ISO 22000:2018 Implementation Training

Opens with the question of how quickly you could show what happened after an unsafe meal. It follows XYZ Ltd., a Singapore food processor, through a night shift with and without a system. This training course has 25 modules in three parts. It covers the standard's scope in clause 1, who can use it, the benefits named in its introduction, shall, should, may and can, the history from 2005 to 2018 and the 2024 amendment, six changes, and where FSSC 22000 fits.

What you will be able to do

• Explain why food safety needs a system and not luck
• Describe what ISO 22000:2018 covers and who can use it
• Name the main changes from the 2005 edition

Why it matters

A customer or consumer complaint can arrive any morning, and a system lets you show quickly what happened and what was done.

Practice: Practice: Welcome: why food safety management · 3 questions

Starts with XYZ Ltd., where every check on an old HACCP plan was called a CCP. Walks through the terms of clause 3 in the order met on the floor: food safety hazard and food safety risk, control measure, prerequisite programme, critical control point and operational PRP, critical limit and action criterion, then validation, monitoring and verification, correction and corrective action, traceability, lot, and maintain, retain and update.

What you will be able to do

• Tell a PRP, an OPRP and a CCP apart
• Separate validation, monitoring and verification by when they happen
• Distinguish a correction from a corrective action

Why it matters

When every check is called a CCP, attention spreads thin and the steps that really matter go unwatched.

Practice: Practice: The language of food safety · 3 questions

A bakery in Sydney with a good HACCP plan launches a sesame loaf without telling the food safety team. This part of the training course covers the four key elements, the seven principles, the process approach, Plan-Do-Check-Act running at two levels, and risk-based thinking at the organisational and operational levels. It maps Codex steps to clauses through Annex A, gives a five-stage implementation sequence and explains a gap assessment for XYZ Ltd.

What you will be able to do

• Explain the four key elements of the system
• Describe how the two Plan-Do-Check-Act cycles communicate
• Run a gap assessment that checks the floor, not the folder

Why it matters

A HACCP plan alone controls nothing; the system around it makes sure a change in one department reaches the food safety team.

Practice: Practice: The system and the gap assessment · 3 questions

Contrasts two versions of a chilli powder purchase at XYZ Ltd., one with food fraud on the list of issues and one without. Explains the intended results of the system, where to look for issues, internal versus external issues and how to write them with facts. Covers the 2024 climate change amendment, then the register of interested parties, its requirements and a review date, with a hotel kitchen in Dubai as a second example.

What you will be able to do

• Identify internal and external issues, written as facts
• Decide whether climate change is a relevant issue
• Build a register of interested parties and route their requirements

Why it matters

An issue nobody listed, such as a cheap spice offer, can end in a recall from every supermarket.

Practice: Practice: Issues and interested parties · 3 questions

XYZ Ltd. hires a haulier and has to decide whether delivery sits inside the boundary. The module covers the products and services, processes and production sites a scope must specify, and the test of whether something can influence food safety of end products. It shows XYZ Ltd.'s scope statement, a packaging maker in Manila and a hotel kitchen in Hong Kong, then clause 4.4: establish, implement, maintain, update and improve, with a process map.

What you will be able to do

• Draw the scope around everything that can influence end product safety
• Write a scope statement from products, processes and sites
• Explain what maintain and update mean for the system

Why it matters

Leaving out the delivery, the night shift or the outside events removes exactly the activities where food safety often fails.

Practice: Practice: The scope and the FSMS · 3 questions

Starts on the night shift at XYZ Ltd., where a metal detector keeps rejecting packs and nobody has authority to stop the line. Covers the eight points of leadership and commitment in clause 5.1, the six points of the food safety policy, its communication in clause 5.2.2, and the roles in clause 5.3: team leader responsibilities, team composition, the monthly report to top management, and everyone reporting problems to identified persons.

What you will be able to do

• List the eight ways top management shows leadership
• Write a food safety policy that covers the six points
• Appoint the food safety team and name who may stop a line

Why it matters

A named person with real authority on every shift is what turns a doubtful check into a held batch, not a shipped one.

Practice: Practice: Leadership, policy and the team · 3 questions

XYZ Ltd. adds a night shift for a caterer, first unplanned and then planned. Explains risk at two levels, the four reasons in clause 6.1.1, proportionate actions and the six options for addressing a risk. Then clause 6.2: objectives that are measurable and have a five-question plan, and clause 6.3: planning a change, including a change of people. A distribution warehouse in Toronto shows why the plan comes first.

What you will be able to do

• Separate organisational risks from food safety hazards
• Write a measurable objective with a plan to achieve it
• Plan a change to the system before it is made

Why it matters

A change made first and documented later, such as a new night shift, is how a gap reaches a customer's auditor.

Practice: Practice: Risks, objectives and planning changes · 3 questions

XYZ Ltd. outgrows its blast chillers in one version of the story and plans capacity in the other. Walks through the six parts of clause 7.1: general resources, people and the agreement for external experts, infrastructure, the work environment, five conditions for externally developed elements such as a model plan, and evaluation of external providers. Explains outsourced processes, with a bakery in Manila and a warehouse in Hong Kong.

What you will be able to do

• Plan the resources a food safety system needs, internal and external
• Adapt an externally developed element to your own processes
• Set criteria to evaluate, monitor and re-evaluate external providers

Why it matters

Outsourcing moves the work but never the responsibility, so a weak provider has to be found before it affects your food.

Practice: Practice: Resources and external providers · 3 questions

XYZ Ltd. switches to a cheaper cheese sauce base that contains egg, and the labels say nothing. The module covers competence and the competence matrix, multi-disciplinary knowledge, awareness of the policy and objectives, and communication outside the organisation with customers, consumers and authorities. It then lists the thirteen changes clause 7.4.3 says the team must hear about in time, with a change notice example.

What you will be able to do

• Show competence by what people do on the line, not attendance
• Build awareness of the policy and objectives into induction
• Set up channels so the team hears of changes in time

Why it matters

One uninformed purchasing decision, such as an undeclared allergen, can mean withdrawn meals; this training course shows how to prevent it.

Practice: Practice: Competence, awareness and communication · 3 questions

At XYZ Ltd. an old metal detector check sheet stays on the line after the routine changes. The module covers the three sources of documented information in clause 7.5.1, why the amount differs by organisation, and the three verbs with examples. It then covers creating and updating in clause 7.5.2, control in clause 7.5.3, external origin documents, protection from alteration, and retention periods, with a paper-based bakery in New York.

What you will be able to do

• Identify the three sources of documented information
• Apply maintain, retain and update to each requirement
• Control documents so the current version is where the work is done

Why it matters

An old check sheet on the line, found by a customer's auditor, shows how quickly weak document control undoes good work.

Practice: Practice: Documented information · 3 questions

A supermarket auditor visits XYZ Ltd. and finds pests in the back store while the cooking area shines. Covers criteria and control for processes in clause 8.1, the definition of PRPs, the four tests in clause 8.2.2, and choosing PRPs from law, customer requirements and the ISO/TS 22002 series. All twelve areas of clause 8.2.4 are listed, with a PRP programme list, a hotel kitchen in Mumbai and a packaging maker in Toronto.

What you will be able to do

• Select PRPs from legal, customer and ISO/TS 22002 sources
• Cover the twelve areas of clause 8.2.4 in a programme list
• Separate who monitors a PRP from who verifies it

Why it matters

A perfect HACCP plan cannot save a site whose basics fail; the PRPs are what an auditor finds first.

Practice: Practice: Operational planning and PRPs · 3 questions

A spice supplier warns XYZ Ltd. about one lot of chilli powder, first with no lot records and then with a tested system. Explains the definitions of traceability and lot, the chain from supplier lot to dispatch, why rework must be logged, and a five-step test with a quantity reconciliation. Then clause 8.4: examples of emergencies, the four parts of response, an emergency plan, and testing it, with a packaging maker in Manila.

What you will be able to do

• Link supplier lots, rework and dispatch in one traceability chain
• Test traceability back and forward and reconcile quantities
• Write and test an emergency plan for your own site

Why it matters

A traced lot means withdrawing two production lots, not a week of production, when a supplier sends a warning. This training course teaches the test.

Practice: Practice: Traceability and emergencies · 3 questions

XYZ Ltd. builds a hazard analysis for a new sauce from a two-year-old spice sheet that now contains milk powder. The module shows how the five Codex preliminary steps map to clause 8.5.1, then covers the documented information for raw materials and product contact materials, end product characteristics, intended use with reasonable misuse and vulnerable groups, flow diagrams, on-site confirmation on every shift, and a warehouse in Hong Kong.

What you will be able to do

• Describe raw materials and end products for hazard analysis
• Identify intended use, reasonable misuse and vulnerable groups
• Draw a flow diagram and confirm it on site on every shift

Why it matters

A hazard analysis can only be as good as its inputs, and a careful analysis of a process that does not exist controls nothing.

Practice: Practice: Preliminary steps for hazard analysis · 3 questions

A hotel catering kitchen in Dubai uses a generic hazard list that never mentions nuts. The module covers the four stages of hazard analysis, the definition of a food safety hazard including allergens, the five sources of knowledge, and what to look at around each step. It then covers acceptable levels, assessing likelihood and severity before controls with Sterling's recommended three by three grid, and the documented information required.

What you will be able to do

• Identify hazards that are reasonably expected, named with cause and step
• Set the acceptable level of each hazard in the end product
• Assess likelihood before controls to find significant hazards

Why it matters

A hazard missed in the analysis is one that no later control will catch, so a generic list copied from elsewhere is a real exposure.

Practice: Practice: Hazard analysis · 3 questions

A bakery in London calls twelve controls CCPs and the cream filling step gets no more attention than the mop. The module compares PRPs, OPRPs and CCPs, then shows the systematic approach: likelihood and severity of failure, location, combinations, and whether limits can be measured. XYZ Ltd. categorises four measures. Validation is covered: four evidence sources, worst-case studies and re-validation after any change.

What you will be able to do

• Categorise each control measure as an OPRP or a CCP with recorded reasons
• Validate control measures before use, at the worst case
• Re-validate after changes such as a new tray or oven

Why it matters

When everything is a CCP the few steps that matter are lost among the ticks, and unvalidated controls only appear to work.

Practice: Practice: Control measures and validation · 3 questions

A chilled-food warehouse in Manila records a night-time temperature rise perfectly, but nobody looks until the weekly review. The module covers the six things the hazard control plan holds for each CCP and OPRP, with rows for XYZ Ltd.'s cooking CCP and label-check OPRP. It explains limits against action criteria, Sterling's operating target, monitoring frequency, who evaluates, corrections written in advance and display at the step.

What you will be able to do

• Write a plan row with the six required elements
• Set monitoring that catches a failure while product is still on site
• Name who monitors, who evaluates and what correction applies

Why it matters

When corrections are decided in advance, nobody has to improvise at two in the morning when a limit is missed.

Practice: Practice: The hazard control plan · 3 questions

A hotel catering kitchen in Toronto probes every batch, yet one probe reads high and nobody ever checks. The module covers the four kinds of information updated after a change, with an XYZ Ltd. spice blend example. It then covers calibration or verification at set intervals, a calibration register, status labels, safeguarding, looking back at earlier results when an instrument is wrong, and validating software before use.

What you will be able to do

• Update material, product and flow information after each change
• Keep a calibration register with status labels
• Assess earlier results when an instrument is found out of tolerance

Why it matters

A reading is only as good as its instrument, and one faulty probe can put weeks of records in doubt.

Practice: Practice: Updating, and monitoring tools · 3 questions

A bakery in New York has its hygiene supervisor sign off her own cleaning checks, and dough residue is found in a mixer. The module covers what verification planning defines, the five things it confirms, and the rule that the person monitoring does not verify. It shows XYZ Ltd.'s verification plan, a PRP site inspection, product tests above acceptable levels, and the analysis of results under clause 9.1.2 with a metal detector trend.

What you will be able to do

• Plan verification with purpose, methods, frequency and responsibility
• Keep verification independent of the person who monitors
• Analyse results together to spot trends before an incident

Why it matters

Records nobody analyses are only a cost; analysed together, they can stop the next incident while it is still small.

Practice: Practice: Verification, and its analysis · 3 questions

A chilled-food warehouse in Hong Kong resets a chiller alarm and loads the vans without asking how warm the food became. The module separates correction from corrective action, then covers the rules for CCP and OPRP failures, the three conditions for release, three routes of disposition, and a cause-finding example at XYZ Ltd. It ends with withdrawal and recall, a timed mock recall, a sleeve fault in packaging and held pallets.

What you will be able to do

• Hold and control affected product before anything else
• Decide release or disposition on evidence, by an authorised person
• Test withdrawal and recall with a timed mock recall

Why it matters

Fixing the machine is not enough; only dealing with the food keeps a deviation from becoming a headline.

Practice: Practice: Nonconformities and recall · 3 questions

XYZ Ltd. logs its metal detector rejects neatly but nobody reads the trend until a fragment reaches a customer. The module covers the five decisions of clause 9.1.1, how clause 9.1 differs from CCP monitoring, valid methods, and a one-page monitoring plan. It lists the data clause 9.1.2 includes, the five reasons for analysis, where the results go, and a monthly report, with a packaging maker in Mumbai.

What you will be able to do

• Decide what to monitor, how, when and who analyses it
• Analyse monitoring, verification and audit results for the five reasons
• Report the analysis to top management and the management review

Why it matters

Records protect food only when someone analyses them; otherwise a customer finds the trend before you do.

Practice: Practice: Monitoring, measurement, analysis and evaluation · 3 questions

XYZ Ltd. squeezes its audits into one week, misses rework, and the certification body finds the gap. The module covers the purpose of internal audit and the audit programme in clause 9.2.2, built from the importance of processes, changes, monitoring results and previous audits. It shows a year's programme, audit criteria and scope, impartial auditors, a simple audit method, one finding followed through, and evidence to retain.

What you will be able to do

• Build an audit programme from importance, changes and data
• Define criteria and scope and choose impartial auditors
• Verify each correction and corrective action before closing a finding

Why it matters

Auditing where the risk is, months before the certification body arrives, leaves time to find, fix and verify the gaps.

Practice: Practice: Internal audit: the implementer's view · 3 questions

Before its busiest season, XYZ Ltd. sees blast chiller alarms rising and the minutes say only noted, in one version, while the other version decides on capacity. The module covers suitability, adequacy and effectiveness, the inputs in clause 9.3.2 including the nine areas of performance, presenting trends against the objectives, a five-step way to run the review, the outputs in clause 9.3.3 and an action plan with owners and dates.

What you will be able to do

• Prepare the inputs of clause 9.3.2 as trends with a decision asked
• Record outputs on improvement, resources, policy and objectives
• Give every decision one owner and one date

Why it matters

A review that only notes the data lets a known trend, such as an overloaded chiller, turn into held and destroyed product.

Practice: Practice: Management review: inputs and outputs · 3 questions

XYZ Ltd. repeats a missed allergen changeover check because its first fix was a new form, not a schedule change. The module separates nonconformity, correction and corrective action, shows where clause 8.9 and clause 10.1 apply, and lists the five steps of clause 10.1.1 with a record and a why method. It then covers the means of continual improvement in clause 10.2 and update at planned intervals and at once in clause 10.3.

What you will be able to do

• Follow the five steps of clause 10.1.1 to remove a cause
• Tell a correction from a corrective action
• Update the system at planned intervals and when something changes

Why it matters

A finding is closed only when its cause is gone, and a repeated problem is how a supermarket's auditor puts an account on review.

Practice: Practice: Nonconformity, improvement, update · 3 questions

XYZ Ltd. takes three days to find cooking validation evidence for a catering customer's questionnaire, then answers the same day with an evidence map. The module recaps maintain, retain and update, then goes through clauses 4 to 7, the four groups of clause 8, and clauses 9 and 10. It covers other records authorities and customers require, retention periods, which items are your choice, and a master list.

What you will be able to do

• Tell which records are maintained, retained or only your choice
• Build an evidence map listing each clause, owner and location
• Control documented information so required records are found quickly

Why it matters

Knowing what the standard asks for, and where it is kept, lets you answer a customer's questionnaire the same day.

Practice: Practice: The documented information you need · 3 questions

A supermarket asks XYZ Ltd. for a food safety certificate, and the company that buys a binder loses the contract. The module starts with top management, the food safety team and project roles, then a gap assessment. It lays out three stages of the road map, eight readiness checks, stage 1 and stage 2 of the certification audit, life after the certificate, and FSSC 22000 as an option, ending with what comes next in this training course.

What you will be able to do

• Plan a dated road map with outputs, owners and dates
• Check readiness against eight points before the certification audit
• Explain stage 1 and stage 2 and where FSSC 22000 fits

Why it matters

A certificate follows a system that already runs, so starting with commitment, a team and a gap assessment saves the contract.

Practice: Practice: Your road map and certification readiness · 3 questions