Templates and records · ISO 22000

ISO 22000 templates and records

Eleven records that hold up a food safety management system, each with the clause of ISO 22000:2018 that calls for it, its fields and a completed example.

In one sentence

ISO 22000 does not impose forms, but it does require the prerequisite programmes and the hazard control plan to be documented, and evidence to be retained of the hazard analysis, validation of control measures, monitoring of each CCP and OPRP, verification, traceability, handling of potentially unsafe product, supplier evaluation and corrective actions.

Content reviewed on 17 October 2026

Reference edition: ISO 22000:2018 With Amd 1:2024 on climate change
Documents to be maintained: PRPs and hazard control plan Clauses 8.2.4 and 8.5.4: they are updated when the process changes
Records to be retained: Monitoring, verification, traceability, corrections… They are the evidence that the plan is being applied
Minimum period set by the standard: Shelf life of the product Only for traceability evidence (8.3)
Format: Free The standard asks for the content, not the template

Contents

ISO 22000 templates and records

Clauses are cited using the numbering of ISO 22000:2018, the current edition. ISO is preparing a third edition that may renumber them; when it is published it will have its own transition period.

Frequently asked questions

What people ask us before getting started

Which records are mandatory under ISO 22000?

Among others, evidence of competence (7.2), evaluation of external providers (7.1.6), external communication (7.4.2), traceability (8.3), validation of control measures (8.5.3), monitoring of CCPs and OPRPs (8.5.4.3), verification (8.8), corrections, corrective actions and decisions on potentially unsafe product (8.9), internal audits (9.2), management review (9.3) and system nonconformities (10.1).

Is the ISO 22000 HACCP plan the same as the one the law requires?

It shares the method: the Codex Alimentarius principles, which in the European Union are mandatory under Article 5 of Regulation (EC) 852/2004. ISO 22000 adds OPRPs — control measures for significant hazards that are monitored against action criteria rather than critical limits — and brings them into a single hazard control plan.

Are these records valid for FSSC 22000?

Yes. FSSC 22000 is built on ISO 22000:2018 and adds its own requirements on top, so all these records are still needed and the scheme asks for a few more, such as the food fraud vulnerability assessment.

Keep your ISO 22000 records without loose templates

We'll show you the module running with data similar to yours.

Request a demo

Keep exploring

Sources

Where each figure comes from

References to the official text in force. If a standard is revised, this page is updated and the review date says so.

ISO 22000:2018 — Food safety management systems. Requirements for any organization in the food chain ISO · 2018 ed., with Amd 1:2024
ISO 22002-100:2025 — Prerequisite programmes on food safety. Part 100: requirements for the food, feed and packaging chain ISO · 29 July 2025
General Principles of Food Hygiene, CXC 1-1969 Codex Alimentarius (FAO/WHO) · 2020 revision

ISO 22000 templates and records

In one sentence

ISO 22000 templates and records

Prerequisite programmes (PRP) plan

Hazard analysis

Validation of control measures

HACCP/OPRP plan

CCP and OPRP monitoring

PRP and plan verification

Potentially unsafe product

Traceability and recall exercise

Emergency plan

Supplier evaluation

Nonconformities and corrective actions

What people ask us before getting started

Which records are mandatory under ISO 22000?

Is the ISO 22000 HACCP plan the same as the one the law requires?

Are these records valid for FSSC 22000?

Keep your ISO 22000 records without loose templates

Related pages

ISO 22000, without folders or surprises

ISO 22000 · Food safety

Where each figure comes from