Retailer and distributor supplier requirements vary. Some buyers ask for a particular food safety certification scheme, while others accept different evidence depending on the product, risk and supply arrangement. ISO 22000 should therefore be a requirements decision, not an assumed price of entry.
The honest answer is: it depends on what you're pitching, to whom, and whether your operation can actually sustain the system. Here's a plain-English way to think about it.
What ISO 22000:2018 actually is
ISO 22000:2018 is an international standard that specifies requirements for a food safety management system (FSMS). It integrates HACCP principles with system management, communication and prerequisite programs. Certification is voluntary and performed by an independent certification body; ISO itself does not certify organisations.
The published 2018 edition has a 2024 climate-action amendment. A new edition is under development as ISO/DIS 22000, so check the current status and transition arrangements before starting a long implementation project.
It is not the only scheme used in food supply chains. A buyer may name ISO 22000, FSSC 22000, SQF, BRCGS or another program, and these are not automatically interchangeable. Ask the buyer for the accepted scheme, scope, certification status and deadline before committing.
What it actually costs
Implementation and certification cost includes more than the certification body's fees. Scope the work in three parts:
- Build — developing and implementing the FSMS: hazard analysis, control measures, prerequisite programs, documented procedures, records, internal audits and management review.
- Certification — selecting a competent certification body, completing its initial assessment process and budgeting for the ongoing audit cycle in its proposal.
- Maintenance — the ongoing running cost: staff time for records, internal audits, management reviews, corrective actions. This is the part that keeps costing after the certificate is on the wall.
The effort depends on the operation's size, complexity, current system, scope and buyer deadline. Obtain a scoped implementation plan and certification quotation rather than relying on a generic timeline.
Certification is one form of independent assurance at the time of assessment. Maintaining and improving the food safety management system remains ongoing work.
What it can support
Certification can provide independently assessed evidence that an FSMS meets ISO 22000 requirements. This may support customer due diligence or market access where the customer accepts that standard, but it does not guarantee a listing or replace the buyer's product, commercial and supplier checks.
The management-system work can also improve clarity around responsibilities, hazard controls, verification and corrective action when it is implemented and maintained in practice.
When to hold off
ISO 22000 may be premature if the business has not yet implemented its applicable legal requirements, hazard controls and routine records. Certification assesses a working system; documentation alone is not enough.
Confirm what each specific buyer requires before committing to a scheme. Ask which standards are accepted, what certification scope is required and the deadline. Use that information with a scoped implementation assessment and certification-body quotation; do not infer the right scheme or timeline from another supplier's path.
Key takeaways
- ISO 22000:2018 is a full food safety management system, certified by an external auditor — not just a HACCP plan.
- Cost includes implementation, certification and ongoing maintenance; obtain scoped quotations.
- Certification may support customer assurance where the buyer accepts ISO 22000, but it does not guarantee a listing.
- Implement applicable legal requirements and core food safety controls before seeking certification.
- Check the specific scheme each target retailer wants (ISO 22000, SQF, BRCGS, FSSC 22000) before committing.
A sensible sequence
First document the buyer's accepted scheme and deadline. Next define the sites, products and processes in scope, assess the existing system against the current standard, and obtain certification-body timing and cost information. Use that evidence to decide whether to implement now, stage the work, or wait for a firmer opportunity.
Primary source and review note
This article was reviewed on 12 August 2026 against the official ISO 22000:2018 standard page and the status of ISO/DIS 22000. Recheck ISO's status page and the target buyer's requirements before acting. This article is general decision guidance, not certification advice.
