ISO 22000:2018: every control, and what you already have

55 controls 85 frameworks share controls with it International verified against its source document

Every control below is one this framework asks for. The right hand column counts how many other frameworks in our corpus carry the same control, which is the difference between doing this work once and doing it again for the next standard.

ISO 22000:2018 Food Safety Management System Evidence & Implementation Kit

55 controls is the documentation set somebody has to write. This is that set, already written: an adopt-ready artifact for every control in policy and procedure text you edit rather than draft, and the evidence checklist an auditor asks for against each.

See what is in it, $249

The same set every buyer of this kit receives. Nothing here is produced on request.

What you already have

Frameworks whose controls overlap this one, most first. If you run any of them, the count is roughly what you have already evidenced.

If you run	Shared controls
ISO 9001:2015	45	measure it →
ISO 27701:2019	37	measure it →
ISO 37001:2016	31	measure it →
ISO 14001:2015	30	measure it →
ISO 22301:2019	30	measure it →
ISO 45001:2018	30	measure it →
ISO 37301:2021	29	measure it →
ISO/IEC 42001:2023	27	measure it →
ISO 50001:2018	25	measure it →
ISO 55001:2014	23	measure it →
ISO 22000	22	measure it →
FSSC 22000	18	measure it →

Every control

Code	Control	Also in
`10.1`	Nonconformity and corrective action	29
`10.2`	Continual improvement	34
`10.3`	Update of the food safety management system	4
`4.1`	Understanding the organization and its context	27
`4.2`	Understanding the needs and expectations of interested parties	21
`4.3`	Determining the scope of the food safety management system	10
`4.4`	Food safety management system	12
`5.1`	Leadership and commitment	35
`5.2`	Policy	12
`5.2.1`	Establishing the food safety policy	5
`5.2.2`	Communicating the food safety policy	3
`5.3`	Organizational roles, responsibilities and authorities	32
`6.1`	Actions to address risks and opportunities	27
`6.2`	Objectives of the food safety management system and planning to achieve them	11
`6.3`	Planning of changes	11
`7.1`	Resources	10
`7.1.2`	People	3
`7.1.3`	Infrastructure	6
`7.1.4`	Work environment	2
`7.1.5`	Externally developed elements of the food safety management system	1
`7.1.6`	Control of externally provided processes, products or services	10
`7.2`	Competence	12
`7.3`	Awareness	10
`7.4`	Communication	42
`7.4.2`	External communication	5
`7.4.3`	Internal communication	5
`7.5`	Documented information	26
`7.5.2`	Creating and updating	11
`7.5.3`	Control of documented information	11
`8.1`	Operational planning and control	24
`8.2`	Prerequisite programmes (PRPs)	12
`8.3`	Traceability system	13
`8.4`	Emergency preparedness and response	14
`8.4.2`	Handling of emergencies and incidents	5
`8.5`	Hazard control	5
`8.5.1`	Preliminary steps to enable hazard analysis	3
`8.5.2`	Hazard analysis	4
`8.5.3`	Validation of control measure(s) and combinations of control measures	3
`8.5.4`	Hazard control plan (HACCP/OPRP plan)	3
`8.6`	Updating the information specifying the PRPs and the hazard control plan	5
`8.7`	Control of monitoring and measuring	4
`8.8`	Verification related to PRPs and the hazard control plan	1
`8.8.1`	Verification	10
`8.8.2`	Analysis of results of verification activities	0
`8.9`	Control of product and process nonconformities	1
`8.9.2`	Corrections	1
`8.9.3`	Corrective actions	4
`8.9.4`	Handling of potentially unsafe products	0
`8.9.5`	Withdrawal/recall	0
`9.1`	Monitoring, measurement, analysis and evaluation	26
`9.1.2`	Analysis and evaluation	7
`9.2`	Internal audit	32
`9.3`	Management review	32
`9.3.2`	Management review input	31
`9.3.3`	Management review output	31

Tell me when ISO 22000:2018 files something new

One email when a public company newly discloses something this framework governs, naming the company and what our corpus says it puts in scope. Nothing else, and one click to stop.

What an auditor will ask you to produce

The artefacts named on the failure modes this framework speaks to.

Internal audit plan including VPs
Audit reports with findings and management responses
External assurance statement where applicable
Internal audit programme
Auditor competence records
Audit reports and findings
Improvement actions traced to review, audit and investigation outputs
Evidence that improvements were implemented and their effect evaluated
Improvement actions traced to review, audit and incident outputs
Evidence of implementation and evaluation

How programmes fail on this

Failure modes named by this framework and others. Each opens the full record.

Findings closed without verification named by 5 frameworks
Improvement limited to closing audit findings named by 4 frameworks
Opportunities never identified named by 3 frameworks
No review after a real incident named by 3 frameworks
Contractor competence not verified named by 3 frameworks
Effectiveness never reviewed named by 3 frameworks

What this page is

A control-level reference for ISO 22000:2018, drawn from our framework corpus. Control codes and titles are references to the standard, not reproductions of it. The overlap counts and the auditor artefacts are our own work and are the part you will not find elsewhere.

Measure this against what you already run · All frameworks · Today's edition