HACCP (Hazard Analysis & Critical Control Points) is a process methodology. ISO 22000 is a management system that incorporates HACCP plus management-system clauses (leadership, audit, improvement) and prerequisite programmes (PRPs).
Food businesses wanting a certifiable management system that also satisfies HACCP requirements.
All food businesses — HACCP is the foundational hazard-analysis methodology required by virtually every food-safety regulation worldwide.
All ten dimensions head-to-head:
| Aspect | ISO 22000 | HACCP |
|---|---|---|
| Nature | Management system | Hazard analysis methodology |
| Certifiable? | Yes | Not directly — incorporated within other certs (BRCGS, FSSC, SQF) |
| Structure | 10 Annex SL clauses + PRPs | 7 principles, 12 steps |
| Risk approach | Risk-based thinking + HACCP | Hazard analysis only |
| Includes HACCP | Yes — fully embedded | Itself |
| Includes PRPs | Yes (ISO/TS 22002-x) | No — separate consideration |
| Management review | Mandatory annually | Not part of HACCP plan |
| Legal basis | Voluntary | Mandatory under EU 852/2004, US FSMA, UK Food Safety Act |
| Cost (SME) | £5k–£10k cert | Internal cost only — typically free |
| Time to implement | 6–12 months | 2–4 months |
Choose ISO 22000 if you want a certifiable management system; if customers ask for a recognised certificate; if you want to combine with FSSC 22000 for GFSI recognition.
You don’t “choose” HACCP — you implement it because regulations require it. You can also pursue ISO 22000 or BRCGS/FSSC/SQF, all of which incorporate HACCP.
Every certified ISO 22000 site also operates a HACCP plan. You cannot have ISO 22000 without HACCP. HACCP alone (without ISO 22000) is sufficient for basic regulatory compliance but doesn’t produce a recognised certificate.
Yes in most jurisdictions — the EU, US, UK, Canada, Australia all require some form of HACCP plan in their food-safety laws.
Some bodies issue HACCP certificates but they are not GFSI-recognised. Pursue ISO 22000, BRCGS, FSSC 22000 or SQF for recognised certification.
No — ISO 22000 includes HACCP within it. Your HACCP plan is one part of the wider ISO 22000 documentation.
Prerequisite Programmes — basic conditions and activities (cleaning, pest control, personnel hygiene) that maintain a hygienic food production environment. ISO/TS 22002-x specifies them.
Both standards have free interactive gap-analysis tools — no sign-up, no install.