FSSC 22000 Version 7 is Official — What Really Changes for Your Organization
The wait is over: Version 7 of the FSSC 22000 Scheme is officially out. And as I anticipated in my post about the ISO 22002:2025 series update, one of the most awaited moves of this new version was precisely the formal adoption of that new family of Prerequisite Programs. Well, that's exactly what happened: V7 is built on the new ISO 22002-x:2025 series and that alone sets the tone of the whole update.
In this article I'll walk you through what changes, but —more importantly— what each change means in day-to-day operations, so you're not just left with a checklist.
My take before getting into the details
If you ask me how challenging it is to move from V6 to V7, my short answer is: it's a medium-effort upgrade, not disruptive, but with several fine details that will hurt if you don't address them in time.
This is not a transformation comparable to V4-to-V5, when much of the scheme was rewritten. The spirit here is refinement, alignment, and raising the technical bar: new PRPs, more competence required from people, sustainability as a real axis, and clearer category rules. If your system is genuinely alive (and not just documented), the transition will be manageable. If your certification survives "thanks to a binder," it will cost you.
Let's get into the changes.
1. The big technical shift: goodbye PAS and ISO/TS, hello ISO 22002-x:2025
This is the most important structural change and, as I had anticipated, the one that was most expected.
V7 leaves behind the old BSI PAS and ISO/TS 22002-x to adopt the new ISO 22002-x:2025 series, led by ISO 22002-100:2025, which unifies the common requirements across the food chain.
What this means operationally: your system must now reference two PRP standards: Part 100 (general requirements) plus the sector-specific part that applies to your activity (e.g., ISO 22002-1 for food manufacturing). In practice, this means reviewing the mapping of each documented PRP, updating normative references, forms, checklists, and training materials.
If you want to dive deeper into this new family, here is again my full analysis of the ISO 22002:2025 series.
2. Recognition of Global ACI and openness to FSSC 24000
- References to IAF are replaced with the Global Accreditation Cooperation (Global ACI), aligning the scheme with the new global accreditation framework.
- Formal integration with FSSC 24000 (social sustainability) is now possible under the same umbrella.
What this means: for most organizations it's transparent. If you're already working on social sustainability or considering a second certification, this opens the path without duplicating systems.
3. Finer category and subcategory structure
V7 introduces a much more granular subcategory table (thermal processes, dehydrated products, fats and oils, types of packaging materials, etc.).
- Category F (Trade): manufacturers that also do wholesale at their main site must include subcategory FI.
- Category G (Transport): if storage, even off-site, is exclusive to your own product, it is audited under the production category, not under G.
What this means: review your certification scope with a magnifying glass. It's very likely that your current certificate will need adjustments in scope wording and categories, which can also impact audit duration calculations.
4. Changes in requirements for the organization (Part 2)
This is where the real "work" of the transition lives. These are the points you'll be touching the most:
-
2.5.1 Purchasing and services. Analyses for critical food safety parameters must be performed under ISO/IEC 17025, and specifications —when there is no legislation— must be grounded in scientific principles.
What it means: clean up your list of labs and suppliers, and stop holding on to specifications "because that's how it's always been done."
-
2.5.2 Labeling and printed materials. Print and artwork control is no longer exclusive to packaging manufacturers: it applies to any organization that prints its own labels.
What it means: a formal artwork approval procedure, version control, and in-line label verification.
-
2.5.3 Food Defense and 2.5.4 Food Fraud. Assessments must be performed by personnel with demonstrable competence in these areas.
What it means: having the plan is no longer enough; you need evidence of the specific training of whoever built it. If you're interested in this topic, we recently published the Beira VACCP Framework for food fraud.
-
2.5.8 Food Safety and Quality Culture. Top management must guarantee resources to sustain the culture, and commitment must be demonstrable across all personnel, not just at the management level.
What it means: culture measurements, evidence of behavior on the floor, allocated budget. On why this matters, I wrote about culture and process compliance.
-
2.5.12 PRP verification. Routine facility inspections are now also mandatory for Food Service (E) and Retail (FI).
What it means: a formal GMP/PRP inspection program with frequency, owners, and records, in sectors where there used to be much more flexibility.
-
2.5.13 Design and Development. Continuous risk-based shelf-life validation and, for packaging design, consideration of sustainability principles (waste minimization, consumer clarity) without compromising safety.
What it means: embed sustainability criteria into the design brief and make sure your shelf-life studies are reviewed periodically, not just validated once for the entire life of the product.
-
2.5.14 Traceability (new for C0 – Animals). Traceability of all edible parts of the carcass is required, including blood for human consumption.
What it means: applies to primary animal production; review identification, records, and chain of custody.
-
2.5.16 Food Loss and Waste. The strategy must have quantifiable objectives and defined timelines.
What it means: moving from intentions to indicators: baseline, target, measurement frequency, and owner.
5. Artificial Intelligence: heads up, this is not about your operation
This point has caused some confusion, so it's worth clarifying:
The new section on AI (Part 3, Section 9) does not regulate how your company uses AI in production. It regulates how the Certification Body (CB) uses it during audit and certification processes.
What it means for you: very little directly. Your CB must be transparent with you if it uses AI, have an ethical governance framework, perform risk assessments, and —above all— not replace the auditor's human judgment. If during an audit you're told "the AI decided," that does not comply with V7.
Key transition dates
The migration process mirrors the one we went through from V5 to V6: a 12-month transition.
| Milestone | Date |
|---|---|
| Audits allowed against V6 | Until April 30, 2027 |
| Upgrade audits to V7 | From May 1, 2027 to April 30, 2028 |
In other words: you have until April 30, 2028 to be certified under V7. It sounds far away, but considering that most changes touch documentation, personnel competence, calibration, and culture metrics, the smart move is to start the gap analysis before the end of 2026.
Where to consult the official version
I recommend downloading and reviewing the documents directly from the foundation's official site:
👉 Official FSSC 22000 Version 7 documents
In summary
V7 is a version that tightens what used to be loose: personnel competence, real culture indicators, measurable sustainability, and finer traceability. The good news is that the spirit of the scheme didn't change, and if your system actually operates, the migration is more about adjusting and evidencing than reinventing.
My recommendation: build a gap analysis comparing your current system against V7 right away, prioritize what requires training or calibration (because it takes time), and leave purely documentary updates for the end.
With AdminISO, keep your Food Safety Management System aligned with FSSC 22000 V7, centralizing documents, indicators, and evidence in one place. Discover how AdminISO helps you.