Introduction

ISO 22000 contains many technical terms that can be difficult to understand, especially for people who are new to Food Safety Management Systems (FSMS).

Terms such as PRP, OPRP, CCP, hazard, significant hazard, validation, verification, monitoring, traceability, correction, corrective action, and food safety policy are frequently used during food safety audits and daily food safety operations.

Understanding these terms is important because ISO 22000 is not simply about having documented procedures. Food safety professionals must understand what each requirement means and how it applies to real food production activities.

This guide explains the most important ISO 22000 terminologies in simple and practical language, with examples from food manufacturing and processing environments.

What Is ISO 22000?

ISO 22000 is an international standard that specifies requirements for a Food Safety Management System (FSMS) for organizations in the food chain.

It combines management-system principles with food safety controls, including prerequisite programmes (PRPs), hazard analysis, operational controls, communication, verification, and continual improvement.

To understand ISO 22000 properly, it is important to understand the terminology used throughout the standard.

1. Food Safety

Food safety refers to the assurance that food will not cause an adverse health effect when it is prepared and/or consumed according to its intended use.

In simple terms:

Food safety means controlling hazards so that food remains safe for consumers.

For example, pasteurizing milk helps control harmful microorganisms that could cause foodborne illness.

2. Food Safety Management System (FSMS)

A Food Safety Management System (FSMS) is a systematic framework used by an organization to establish, implement, maintain, and continually improve food safety controls.

An FSMS may include:

• Food safety policies
• Objectives
• Procedures
• PRPs
• HACCP studies
• Monitoring programmes
• Traceability systems
• Verification activities
• Internal audits
• Corrective actions
• Management reviews

The purpose is to ensure that food safety is managed systematically rather than through isolated activities.

3. Food Safety Policy

A food safety policy is a formal statement by top management demonstrating the organization’s commitment to food safety.

It normally establishes the organization’s overall direction and commitment toward:

• Producing safe food
• Meeting legal requirements
• Meeting customer requirements
• Communicating food safety responsibilities
• Continually improving the FSMS

The policy should be communicated to relevant personnel and supported by management actions.

4. Food Safety Objective

A food safety objective is a measurable or otherwise assessable result that an organization intends to achieve concerning food safety.

Examples include:

• Reduce customer food safety complaints
• Improve supplier compliance
• Reduce environmental monitoring failures
• Improve completion of food safety training
• Reduce microbiological nonconformities

A good objective should be measurable and monitored.

5. Hazard

A hazard is a biological, chemical, or physical agent in food, or a condition of food, with the potential to cause an adverse health effect.

Examples include:

Biological hazards

• Salmonella
• Listeria monocytogenes
• Escherichia coli
• Staphylococcus aureus
• Parasites

Chemical hazards

• Mycotoxins
• Pesticide residues
• Cleaning chemical residues
• Veterinary drug residues
• Heavy metals
• Undeclared allergens

Physical hazards

• Glass
• Metal fragments
• Stones
• Plastic fragments
• Wood particles

6. Hazard Analysis

Hazard analysis is the process of collecting and evaluating information about hazards and conditions leading to their presence in order to decide which are significant and must be controlled.

During hazard analysis, the food safety team considers:

• Raw materials
• Processing steps
• Equipment
• Personnel
• Environment
• Storage
• Transport
• Intended use of the product

The objective is to identify hazards that require control.

7. Significant Hazard

A significant hazard is a hazard identified through hazard assessment as requiring control measures because it has a reasonable likelihood of occurring and/or could cause an unacceptable health effect if not controlled.

For example, Salmonella contamination may be considered a significant hazard in a food process where the organism could survive and reach the consumer.

Not every identified hazard automatically becomes a significant hazard.

The organization must evaluate hazards using appropriate criteria.

8. Control Measure

A control measure is an action or activity that can be used to prevent, eliminate, or reduce a significant food safety hazard to an acceptable level.

Examples include:

• Pasteurization
• Cooking
• Refrigeration
• Metal detection
• Filtration
• Cleaning and sanitation
• Supplier controls
• Allergen controls

Control measures must be appropriately selected and managed.

9. Prerequisite Programme (PRP)

A Prerequisite Programme (PRP) consists of basic conditions and activities necessary to maintain a hygienic environment suitable for producing safe food.

PRPs provide the foundation upon which the food safety system operates.

Examples include:

• Personal hygiene
• Cleaning and sanitation
• Pest control
• Waste management
• Water quality
• Equipment hygiene
• Facility maintenance
• Storage
• Transport
• Chemical control

The exact PRPs required depend on the organization’s activities and applicable sector requirements.

10. Operational Prerequisite Programme (OPRP)

An Operational Prerequisite Programme (OPRP) is a control measure or combination of control measures applied to prevent or reduce a significant food safety hazard to an acceptable level.

OPRPs are identified through hazard analysis.

Examples may include:

• Sieve control
• Allergen changeover controls
• Environmental hygiene controls
• Specific temperature controls
• Foreign-material control

The important point is that an OPRP is specifically linked to controlling a significant food safety hazard.

11. Critical Control Point (CCP)

A Critical Control Point (CCP) is a step at which control can be applied and is essential to prevent or eliminate a food safety hazard or reduce it to an acceptable level.

A classic example is pasteurization of milk.

If a specific pasteurization step is essential for controlling pathogenic microorganisms, it may be identified as a CCP.

A CCP normally has:

• Critical limits
• Monitoring procedures
• Defined responsibilities
• Corrective actions
• Verification activities

12. PRP vs OPRP vs CCP

These three terms are frequently confused.

Term	Main Purpose	Example
PRP	Provides basic hygienic conditions	Cleaning and sanitation
OPRP	Controls a significant hazard through operational control	Allergen changeover control
CCP	Essential process step for controlling a significant hazard	Validated pasteurization step

A simple way to remember them is:

PRP = foundation

OPRP = operational hazard control

CCP = critical hazard control point

The classification should always be based on the organization’s documented hazard analysis rather than assumptions.

13. Critical Limit

A critical limit is a measurable value that separates acceptability from unacceptability.

Critical limits are associated with CCPs.

Examples may include:

• Temperature
• Time
• pH
• Water activity
• Pressure

For example, a validated thermal process may establish a minimum temperature and time combination that must be achieved.

If the critical limit is not met, the affected product must be controlled according to the organization’s procedures.

14. Action Criterion

An action criterion is a measurable or observable specification used for monitoring an OPRP.

This is an important distinction from a critical limit.

CCP → Critical limit

OPRP → Action criterion

Action criteria define the acceptable operating conditions for an OPRP.

15. Monitoring

Monitoring is the process of conducting a planned sequence of observations or measurements to assess whether control measures are operating as intended.

Examples include:

• Recording pasteurization temperature
• Checking refrigerator temperature
• Monitoring sanitizer concentration
• Checking metal detector performance
• Measuring pH

Monitoring provides information that allows the organization to determine whether controls remain effective.

16. Verification

Verification is the confirmation, through objective evidence, that specified requirements have been fulfilled.

Examples include:

• Reviewing monitoring records
• Internal audits
• Microbiological testing
• Environmental monitoring
• Calibration verification
• Inspection
• Trend analysis

For example, reviewing pasteurization records to confirm that the required parameters were consistently achieved is a verification activity.

17. Validation

Validation is obtaining evidence that a control measure or combination of control measures is capable of achieving the specified food safety outcome.

Validation asks:

“Will this control actually work?”

Verification asks:

“Are we implementing the control as planned?”

For example, scientific evidence and process studies may be used to validate a pasteurization process.

18. Validation vs Verification

This is one of the most important distinctions in food safety management.

Validation	Verification
Establishes whether a control is capable of working	Confirms the control is being implemented effectively
Usually performed before or when introducing a control	Performed routinely or periodically
Based on scientific/technical evidence	Based on records, audits, testing, inspections, etc.
Example: validating a pasteurization process	Example: reviewing pasteurization records

A simple memory aid:

Validation = Can it work?

Verification = Is it working as planned?

19. Correction

A correction is an action taken to eliminate a detected nonconformity.

It addresses the immediate problem.

For example, if a product is found outside the required storage temperature, an immediate correction may involve placing the product under controlled conditions and evaluating its disposition.

Correction deals with the immediate situation.

20. Corrective Action

Corrective action is an action taken to eliminate the cause of a nonconformity and prevent recurrence.

For example, repeated temperature deviations may require investigation into:

• Refrigeration equipment
• Calibration
• Employee practices
• Monitoring frequency
• Preventive maintenance

The organization should identify and address the root cause.

Therefore:

Correction = Fix the immediate problem

Corrective action = Address why the problem happened

21. Root Cause

The root cause is the underlying reason why a nonconformity occurred.

For example:

Problem: Finished product temperature exceeded the specified limit.

A superficial explanation might be:

“Employee forgot to monitor temperature.”

Further investigation might reveal:

“Temperature monitoring responsibilities were not clearly assigned and the monitoring schedule was not communicated.”

The second explanation may represent a deeper root cause.

Common root cause analysis tools include:

• 5-Why analysis
• Fishbone/Ishikawa analysis
• Process mapping
• Fault-tree analysis

22. Nonconformity

A nonconformity occurs when a requirement has not been fulfilled.

Examples include:

• Failure to complete required monitoring
• Equipment not calibrated as required
• Incomplete traceability records
• Failure to meet a specified food safety criterion
• Procedure not being followed

Nonconformities should be documented, evaluated, corrected, and addressed through appropriate corrective action.

23. Traceability

Traceability is the ability to follow the history, application, movement, and location of an object through specified stages of production, processing, and distribution.

In a food factory, traceability can connect:

Supplier → Raw material → Production batch → Packaging → Finished product → Customer

An effective traceability system is particularly important during product withdrawals and recalls.

24. Product Withdrawal

Product withdrawal involves removing a product from the supply chain before it reaches the consumer or while it remains within the distribution chain.

For example, a manufacturer may discover a food safety issue in products still held at its warehouse and remove them before they reach consumers.

25. Product Recall

A product recall occurs when unsafe or potentially unsafe food has reached consumers or the market and action is required to remove it.

Recall systems should include:

• Identification of affected products
• Communication
• Product recovery
• Regulatory notification where required
• Product disposition
• Investigation
• Corrective action

Traceability is essential for effective recalls.

26. Food Safety Team

The food safety team is a group of competent individuals responsible for developing, implementing, maintaining, and updating the FSMS.

The team should have appropriate knowledge and experience relevant to the organization’s food safety hazards and processes.

Depending on the organization, the team may include:

• Food safety manager
• Microbiologist
• Quality assurance personnel
• Production personnel
• Maintenance personnel
• Laboratory personnel
• Engineering personnel
• Procurement representatives

Food safety should be a multidisciplinary responsibility.

27. Food Safety Team Leader

The food safety team leader coordinates the activities of the food safety team.

Responsibilities may include:

• Coordinating hazard analysis
• Ensuring the FSMS is established and maintained
• Organizing food safety team meetings
• Coordinating updates to the HACCP-based system
• Reporting FSMS performance to management
• Ensuring relevant personnel understand their responsibilities

28. Interested Party

An interested party is a person or organization that can affect, be affected by, or perceive itself to be affected by a decision or activity.

Examples in the food industry include:

• Customers
• Consumers
• Suppliers
• Employees
• Regulatory authorities
• Certification bodies
• Contractors
• Shareholders
• Local communities

Organizations should determine which interested parties are relevant to their FSMS.

29. Outsourced Process

An outsourced process is a process that an organization needs for its FSMS but chooses to have performed by an external provider.

Examples include:

• External laboratory testing
• Pest control
• Calibration
• Equipment maintenance
• Transportation
• Cleaning services

Outsourcing does not remove the organization’s responsibility for ensuring that the process is appropriately controlled.

30. Competence

Competence refers to the ability to apply knowledge and skills to achieve intended results.

A food microbiologist, for example, should possess the appropriate knowledge and skills to perform assigned microbiological testing correctly.

Competence may be demonstrated through:

• Education
• Training
• Experience
• Assessment
• Practical demonstration

Training alone does not automatically prove competence.

31. Documented Information

ISO 22000 uses the term documented information to cover information that an organization needs to control and maintain.

This can include:

Documents

• Procedures
• Policies
• Specifications
• Work instructions
• HACCP plans

Records

• Monitoring results
• Training records
• Calibration records
• Audit reports
• Laboratory results
• Corrective action records

The organization must control documented information appropriately.

32. Continual Improvement

Continual improvement means repeatedly improving the suitability, adequacy, and effectiveness of the FSMS.

Improvement can come from:

• Audit findings
• Corrective actions
• Customer complaints
• Food safety incidents
• Trend analysis
• Management reviews
• Employee suggestions
• New technology

The objective is to make the food safety system increasingly effective.

33. Risk

In ISO management systems, risk generally relates to the effect of uncertainty on intended results.

In the context of an FSMS, organizations consider risks and opportunities that can affect the ability of the system to achieve its intended outcomes.

Food safety hazard analysis is a more specific process concerned with identifying and controlling hazards associated with food.

This distinction is important because management-system risk and food safety hazard analysis are related but are not identical concepts.

34. Opportunity

An opportunity is a favorable circumstance or possibility that can help an organization improve its FSMS or achieve its intended results.

Examples include:

• Introducing automated temperature monitoring
• Improving laboratory testing
• Upgrading sanitation equipment
• Improving employee training
• Developing better supplier controls

Organizations should consider appropriate opportunities when planning their FSMS.

35. Food Chain

The food chain includes the sequence of organizations and activities involved in the production, processing, distribution, and handling of food.

It can include:

Primary production → Processing → Packaging → Storage → Transport → Distribution → Retail → Food service → Consumer

ISO 22000 is designed to apply across this chain.

36. Top Management

Top management refers to the person or group of people who directs and controls an organization at the highest level.

Top management is responsible for providing leadership and ensuring that the FSMS is properly supported.

This includes providing:

• Personnel
• Infrastructure
• Training
• Equipment
• Financial resources
• Time
• Management attention

Food safety cannot be sustained without appropriate management commitment.

37. Food Safety Culture

Food safety culture refers broadly to the shared values, beliefs, attitudes, and behaviors within an organization that influence how food safety is understood and practiced.

A strong food safety culture can be seen when employees:

• Follow hygiene requirements
• Report food safety problems
• Understand why procedures matter
• Stop or escalate unsafe activities
• Take responsibility for food safety
• Support corrective actions

Food safety culture is demonstrated through behavior rather than simply through written policies.

38. Environmental Monitoring

An Environmental Monitoring Programme (EMP) is a systematic programme for assessing the microbiological or other relevant conditions of the production environment.

Depending on the type of food operation, environmental monitoring may involve:

• Production surfaces
• Equipment
• Drains
• Floors
• Walls
• Personnel contact areas
• Air
• Water

Environmental monitoring is particularly important in facilities producing foods where environmental pathogens could create significant risks.

39. Food Safety Performance

Food safety performance refers to how effectively an organization is achieving its intended food safety results.

Performance can be evaluated using indicators such as:

• Microbiological results
• Customer complaints
• Nonconformities
• Audit findings
• CCP deviations
• OPRP failures
• Supplier performance
• Product withdrawals
• Corrective action trends

Organizations should use performance information to drive improvement.

40. Food Safety Incident

A food safety incident is an event or situation that may compromise the safety of food.

Examples include:

• Microbiological contamination
• Chemical contamination
• Allergen mislabeling
• Foreign material contamination
• Product tampering
• Loss of critical processing control

Organizations should have procedures for responding to incidents and protecting consumers.

Quick Reference: ISO 22000 Terms You Should Know

Term	Simple Meaning
FSMS	System for managing food safety
Food safety hazard	Biological, chemical, or physical agent capable of causing harm
Hazard analysis	Identifying and evaluating food safety hazards
PRP	Basic conditions needed for hygienic food production
OPRP	Operational control for a significant hazard
CCP	Critical step essential for controlling a significant hazard
Critical limit	Boundary between acceptable and unacceptable at a CCP
Action criterion	Criterion used to control an OPRP
Monitoring	Checking whether controls are operating as planned
Validation	Demonstrating that a control can work
Verification	Confirming that requirements are being fulfilled
Correction	Immediate action to fix a detected problem
Corrective action	Action to eliminate the cause and prevent recurrence
Traceability	Ability to follow the history and movement of food
Nonconformity	Failure to meet a requirement
Food safety team	Competent team responsible for the FSMS
PRP	Foundational hygiene and operational conditions
Continual improvement	Ongoing improvement of the FSMS

The Most Commonly Confused ISO 22000 Terms

Some terms are particularly important during food safety audits.

Validation vs Verification

Validation: Can the control measure achieve the intended food safety result?

Verification: Are we implementing the system and controls as planned?

Correction vs Corrective Action

Correction: Fix the immediate problem.

Corrective action: Eliminate the cause and prevent recurrence.

PRP vs OPRP vs CCP

PRP: Provides the basic hygienic foundation.

OPRP: Controls a significant hazard through an operational control.

CCP: A critical step where control is essential for managing a significant hazard.

Monitoring vs Verification

Monitoring: Routine observation or measurement of a control.

Verification: Confirmation that the system and controls are functioning as intended.

Understanding these distinctions is essential for anyone working with ISO 22000, HACCP, food safety audits, quality assurance, or microbiological quality control.

Why Understanding ISO 22000 Terminology Matters

Knowing the terminology is more than an academic exercise.

Food safety professionals use these terms when:

• Developing HACCP studies
• Conducting internal audits
• Preparing for certification audits
• Writing procedures
• Investigating nonconformities
• Developing corrective actions
• Conducting verification activities
• Communicating with auditors
• Training employees

Incorrectly using terms such as CCP, OPRP, validation, verification, correction, and corrective action can result in confusion and weaknesses within the FSMS.

A strong food safety professional should therefore understand both the terminology and how each concept is applied in practice.

Final Thoughts

ISO 22000 provides a structured approach to managing food safety throughout the food chain, but its terminology can initially appear complicated.

Understanding terms such as FSMS, PRP, OPRP, CCP, hazard analysis, critical limit, monitoring, validation, verification, traceability, correction, and corrective action makes it much easier to interpret and implement the standard.

For food safety professionals, the goal should not simply be to memorize definitions. The real objective is to understand how each concept works within an actual food safety management system.

Whether you work as a food microbiologist, quality assurance officer, production manager, food safety auditor, laboratory analyst, HACCP team member, or food safety consultant, a strong understanding of ISO 22000 terminology will improve your ability to implement, audit, and continuously improve food safety systems.

References

International Organization for Standardization (ISO). ISO 22000:2018 — Food safety management systems — Requirements for any organization in the food chain.

International Organization for Standardization (ISO). ISO 22000:2018/Amd 1:2024 — Food safety management systems — Requirements for any organization in the food chain — Amendment 1: Climate action changes.

Codex Alimentarius Commission. General Principles of Food Hygiene (CXC 1-1969), Revised 2022.

Food and Agriculture Organization of the United Nations (FAO) & World Health Organization (WHO). Codex Alimentarius — Food Safety and Hygiene.