24K subscribers
Stay ahead of shifting global regulations. Subscribe for exclusive insights on EUDR compliance, audit-ready traceability, and the digital tools required to secure your position in the premium international export market.
A step-by-step guide for African food manufacturers, processors, and packers ready to achieve FSSC 22000 certification — covering what the standard requires, how it compares to BRC and ISO 22000, the full audit process, realistic costs, and how to select an accredited certification body.
If you process or manufacture food in Africa and you want to supply supermarkets, food manufacturers, or importers in Europe, the UK, or North America, you will almost certainly be asked for FSSC 22000 certification — or an equivalent GFSI-benchmarked standard like BRC. FSSC 22000 is the most widely accepted food safety certification scheme in the world, with over 17,000 certified sites across 130+ countries.
This guide is written for African food processors approaching FSSC 22000 for the first time — whether you're a mango pulp processor in Ghana, a coffee packager in Ethiopia, a nut processor in Kenya, or a dried herb producer in Tanzania. The framework is the same regardless of what you process.
FSSC 22000 (Food Safety System Certification 22000) is an internationally recognised certification scheme managed by the Foundation FSSC, a Dutch non-profit. It was first published in 2009 and has since been revised through multiple versions — the current version is Version 6, mandatory since April 2024.
The scheme is based on three core components: ISO 22000:2018 (the international food safety management standard), ISO/TS 22002-1:2009 (sector-specific Pre-Requisite Programs for food manufacturing), and a set of additional FSSC requirements covering areas like food fraud prevention, food defence, allergen management, environmental monitoring, and food safety culture.
FSSC 22000 specifically targets the food manufacturing, processing, and packing sectors — not farms. If you operate a farm, GlobalG.A.P. is the relevant certification. If you operate a food processing or packing facility, FSSC 22000 (or BRC) is what your buyers will ask for.
GFSI benchmarked. ISO-based, systems-oriented. Strong in Europe, Asia, and increasingly globally. Version 6 adds food loss/waste and quality culture requirements. Accepted by most European retailers. 3-year cycle with unannounced audit.
GFSI benchmarked. More prescriptive and product-focused. Stronger preference in UK retail. Issue 9 (2023) emphasises food safety culture. Graded (AA to D) based on performance. Often required by UK multiple retailers specifically.
Not GFSI benchmarked. Not accepted by major retailers as equivalent to FSSC 22000 or BRC. Valuable as an internal management system, but insufficient for most EU and UK buyer requirements. Useful stepping stone to FSSC 22000.
For most African food processors targeting EU and UK markets, the choice is between FSSC 22000 and BRC. Many consultants recommend FSSC 22000 as the first GFSI standard for African processors because of its ISO foundation — making it easier to integrate with other ISO management standards (ISO 9001, ISO 14001) that may already be in place or planned.
FSSC 22000 Version 6 (published March 2023, mandatory since April 2024) adds four new elements that African processors must address: (1) food loss and waste reduction commitments, (2) enhanced food safety culture requirements with measurable KPIs, (3) strengthened allergen management including environmental monitoring, and (4) updated food fraud vulnerability assessment requirements. Any processor certified under Version 5.1 must have transitioned to Version 6 by now.
| Area | What Auditors Examine |
|---|---|
| Food Safety Management System | Documented FSMS, management review, internal audits, corrective action system |
| HACCP Plan | Hazard analysis, CCPs, critical limits, monitoring procedures, verification |
| Pre-Requisite Programmes (PRPs) | GMP, hygiene, pest control, cleaning, allergen management, cross-contamination prevention |
| Food Safety Culture | Leadership commitment, employee engagement, KPI tracking, continuous improvement evidence |
| Food Fraud Prevention | Vulnerability assessment, mitigation plans, approved supplier programme |
| Food Defence | Threat assessment, facility security, access control measures |
| Allergen Management | Allergen identification, segregation, environmental monitoring, labelling controls |
| Environmental Monitoring | Pathogen monitoring programme, zoning, corrective action when positives found |
| Food Loss and Waste | Policy, measurement system, targets, improvement actions (V6 new requirement) |
Before contacting a certification body, assess your current food safety management system against FSSC 22000 V6 requirements. A qualified consultant or internal team can complete a gap analysis in 1–3 days. The output is a prioritised list of gaps — this drives your implementation project plan and gives you a realistic timeline to readiness.
Address all identified gaps. This is the longest phase — typically 3–12 months depending on your starting point. Key deliverables include: documented HACCP plan, written PRPs, food fraud vulnerability assessment, allergen management procedure, food defence threat assessment, environmental monitoring programme, and internal audit schedule.
Only FSSC-licensed and accredited certification bodies can issue FSSC 22000 certificates. In Africa, active certification bodies include Bureau Veritas, SGS, TÜV SÜD, Intertek, DNV, NSF, FoodChain ID, and Kiwa ASI. Request quotes from at least two. Ask about: audit duration estimate, auditor Africa experience, travel cost structure, and local office presence.
The Stage 1 audit is a documentation review — the auditor assesses your FSMS documentation, HACCP plans, PRPs, and overall readiness for the Stage 2 on-site audit. Stage 1 can be conducted remotely or on-site. Non-conformities raised at Stage 1 must be addressed before Stage 2 can proceed. Allow 4–8 weeks between Stage 1 and Stage 2.
The main certification audit — conducted at your production facility. The auditor observes actual production, interviews staff at multiple levels, reviews records, and verifies that your documented FSMS matches actual practice. Duration: 2–5 days depending on facility size. Non-conformities are classified as minor (corrective action within 28 days) or major (corrective action before certificate is issued).
After non-conformities are closed and verified, the certification body's independent review board issues your FSSC 22000 certificate. The certificate is valid for 3 years and lists your facility name, address, scope (product categories), and certification body. Your site appears on the FSSC public certified organisation database within weeks of certification.
Surveillance audits are conducted annually in years 2 and 3 of your certification cycle. One of these must be unannounced — the certification body will arrive without prior notice and inspect your facility in normal operating conditions. Surveillance audits are shorter than the initial certification audit but cover the same scope.
| Cost Component | Estimated Range (USD) | Notes |
|---|---|---|
| Gap analysis (consultant) | 1,500–4,000 | 1–3 days; varies by facility size |
| FSMS implementation support | 2,000–8,000 | Consultancy for documentation and system design |
| Staff training | 500–2,000 | HACCP, FSSC V6, internal auditor training |
| Stage 1 audit | 800–2,000 | Document review — often remote |
| Stage 2 audit (initial) | 2,500–7,000 | On-site; includes auditor travel and per diem |
| Annual surveillance audit | 1,500–4,000 | Per year; unannounced audit in this range |
| Total first-year (all-in) | 6,000–20,000 | Highly variable by facility size and complexity |
For smaller processors: If your facility is under 20 employees or early-stage, consider the FSSC 22000 Development Program — a structured pathway for SMEs to build food safety capability and progress towards full FSSC 22000 certification in stages. This reduces the initial financial and operational burden significantly. Ask your prospective certification body if they offer this programme.
EU buyers can verify any claimed FSSC 22000 certification at the official public database: fssc.com/fssc-22000/certified-organizations/. Search by company name or location. The database shows the certification scope, certificate validity period, and certifying body. A certificate not appearing in this database — or one that appears with a different scope than claimed — should be treated as a potential red flag.
FSSC 22000 is a GFSI-benchmarked food safety management system certification scheme required by major EU, UK, and US retailers and food manufacturers as a condition of trade. In Africa, it is most relevant for food processors, manufacturers, and packers — not farms. Farm-level certification uses GlobalG.A.P.
FSSC 22000 and BRC are both GFSI-benchmarked and accepted by major retailers. FSSC 22000 is more systems-oriented (ISO-based); BRC is more prescriptive and favoured in UK retail. ISO 22000 alone is not GFSI benchmarked and is generally not accepted as equivalent by retail buyers. Companies already ISO 22000 certified can upgrade to FSSC 22000 with significantly less additional work.
From starting implementation to receiving the certificate typically takes 6–18 months depending on your existing food safety maturity. The on-site audit itself takes 2–5 days. Companies with basic HACCP and GMP systems in place can achieve certification in 6–9 months; those starting from scratch should plan for 12–18 months.
FSSC 22000 follows a 3-year certification cycle. After initial certification (Stage 1 + Stage 2), surveillance audits occur annually — one of which must be unannounced. A full recertification audit every three years renews the certificate.
No — FSSC 22000 is a private buyer requirement, not an EU regulatory requirement. EU food safety law (EC 178/2002 and related regulations) is separate. However, major European retailers and food manufacturers mandate GFSI-benchmarked certification (FSSC 22000 or BRC) as a commercial condition of trade.
Verify any claimed certificate at the official FSSC public database at fssc.com. Search by company name or country. The database shows the certified scope, validity period, and certifying body. Any discrepancy between the claimed and listed certificate should be investigated before trade proceeds.
ExportReady helps EU buyers identify and verify FSSC 22000 certified African processors — and helps African processors prepare for their first certification audit.
Access the Platform