TheArtOfService
Back to Frameworks

ISO 22000:2018

Self-Assess
International
v2018
8 domains
70 controls
Verified

Framework summaries on this platform are AI-assisted interpretations for educational and compliance planning purposes. They do not reproduce or replace the official standards. Refer to the authoritative source for the definitive text. Framework names and trademarks belong to their respective organisations.

Framework Domains (8)

Clause 0 – ISO 22000:2018

8 controls
Controls in the Clause 0 – ISO 22000:2018 domain of ISO 22000:2018 — 8 controls
CodeTitle
iso-22000-2018::0.1General
iso-22000-2018::0.2FSMS principles
iso-22000-2018::0.3Process approach
iso-22000-2018::0.3.1General
iso-22000-2018::0.3.2Plan-Do-Check-Act cycle
iso-22000-2018::0.3.3Risk-based thinking
iso-22000-2018::0.3.3.1General
iso-22000-2018::0.3.3.2Organizational risk management

Context of the organization – ISO 22000:2018

4 controls
Controls in the Context of the organization – ISO 22000:2018 domain of ISO 22000:2018 — 4 controls
CodeTitle
iso-22000-2018::4.1Understanding the organization and its context
iso-22000-2018::4.2Understanding the needs and expectations of interested parties
iso-22000-2018::4.3Determining the scope of the food safety management system
iso-22000-2018::4.4Food safety management system

Improvement – ISO 22000:2018

3 controls
Controls in the Improvement – ISO 22000:2018 domain of ISO 22000:2018 — 3 controls
CodeTitle
iso-22000-2018::10.1Nonconformity and corrective action
iso-22000-2018::10.2Continual improvement
iso-22000-2018::10.3Update of the food safety management system

Leadership – ISO 22000:2018

5 controls
Controls in the Leadership – ISO 22000:2018 domain of ISO 22000:2018 — 5 controls
CodeTitle
iso-22000-2018::5.1Leadership and commitment
iso-22000-2018::5.2Policy
iso-22000-2018::5.2.1Establishing the food safety policy
iso-22000-2018::5.2.2Communicating the food safety policy
iso-22000-2018::5.3Organizational roles, responsibilities and authorities

Operation – ISO 22000:2018

22 controls
Controls in the Operation – ISO 22000:2018 domain of ISO 22000:2018 — 22 controls
CodeTitle
iso-22000-2018::8.1Operational planning and control
iso-22000-2018::8.2Prerequisite programmes (PRPs)
iso-22000-2018::8.3Traceability system
iso-22000-2018::8.4Emergency preparedness and response
iso-22000-2018::8.4.1General
iso-22000-2018::8.4.2Handling of emergencies and incidents
iso-22000-2018::8.5Hazard control
iso-22000-2018::8.5.1Preliminary steps to enable hazard analysis
iso-22000-2018::8.5.2Hazard analysis
iso-22000-2018::8.5.3Validation of control measure(s) and combinations of control measures
iso-22000-2018::8.5.4Hazard control plan (HACCP/OPRP plan)
iso-22000-2018::8.6Updating the information specifying the PRPs and the hazard control plan
iso-22000-2018::8.7Control of monitoring and measuring
iso-22000-2018::8.8Verification related to PRPs and the hazard control plan
iso-22000-2018::8.8.1Verification
iso-22000-2018::8.8.2Analysis of results of verification activities
iso-22000-2018::8.9Control of product and process nonconformities
iso-22000-2018::8.9.1General
iso-22000-2018::8.9.2Corrections
iso-22000-2018::8.9.3Corrective actions
iso-22000-2018::8.9.4Handling of potentially unsafe products
iso-22000-2018::8.9.5Withdrawal/recall

Performance evaluation – ISO 22000:2018

8 controls
Controls in the Performance evaluation – ISO 22000:2018 domain of ISO 22000:2018 — 8 controls
CodeTitle
iso-22000-2018::9.1Monitoring, measurement, analysis and evaluation
iso-22000-2018::9.1.1General
iso-22000-2018::9.1.2Analysis and evaluation
iso-22000-2018::9.2Internal audit
iso-22000-2018::9.3Management review
iso-22000-2018::9.3.1General
iso-22000-2018::9.3.2Management review input
iso-22000-2018::9.3.3Management review output

Planning – ISO 22000:2018

3 controls
Controls in the Planning – ISO 22000:2018 domain of ISO 22000:2018 — 3 controls
CodeTitle
iso-22000-2018::6.1Actions to address risks and opportunities
iso-22000-2018::6.2Objectives of the food safety management system and planning to achieve them
iso-22000-2018::6.3Planning of changes

Support – ISO 22000:2018

17 controls
Controls in the Support – ISO 22000:2018 domain of ISO 22000:2018 — 17 controls
CodeTitle
iso-22000-2018::7.1Resources
iso-22000-2018::7.1.1General
iso-22000-2018::7.1.2People
iso-22000-2018::7.1.3Infrastructure
iso-22000-2018::7.1.4Work environment
iso-22000-2018::7.1.5Externally developed elements of the food safety management system
iso-22000-2018::7.1.6Control of externally provided processes, products or services
iso-22000-2018::7.2Competence
iso-22000-2018::7.3Awareness
iso-22000-2018::7.4Communication
iso-22000-2018::7.4.1General
iso-22000-2018::7.4.2External communication
iso-22000-2018::7.4.3Internal communication
iso-22000-2018::7.5Documented information
iso-22000-2018::7.5.1General
iso-22000-2018::7.5.2Creating and updating
iso-22000-2018::7.5.3Control of documented information

Your Compliance Coverage

If you comply with ISO 22000:2018, you already cover:

ISO 9001:2015

79%

55 controls mapped

Compare →

ISO 27701:2019

60%

42 controls mapped

Compare →

ISO 45001:2018

53%

37 controls mapped

Compare →

+ 82 more: ISO 14001:2015 (51%), ISO 37001:2016 (47%)

See all 85 mapped frameworks ↓

Maps to 85 other frameworks

70 total controls
ISO 9001:2015
55 source controls mapped|56 target controls covered
79%
ISO 27701:2019
42 source controls mapped|45 target controls covered
60%
ISO 45001:2018
37 source controls mapped|36 target controls covered
53%
ISO 14001:2015
36 source controls mapped|34 target controls covered
51%
ISO 37001:2016
33 source controls mapped|32 target controls covered
47%
ISO 22301:2019
32 source controls mapped|30 target controls covered
46%
ISO 37301:2021
32 source controls mapped|33 target controls covered
46%
ISO/IEC 42001:2023
31 source controls mapped|31 target controls covered
44%
ISO 50001:2018 - Energy Management Systems
29 source controls mapped|32 target controls covered
41%
ISO 14004:2016
26 source controls mapped|15 target controls covered
37%
ISO 55001:2014
23 source controls mapped|21 target controls covered
33%
ISO 22000
22 source controls mapped|20 target controls covered
31%
ISO 13485:2016
21 source controls mapped|11 target controls covered
30%
ISO 27001:2022
17 source controls mapped|16 target controls covered
24%
AS9100D - Aerospace Quality Management System
17 source controls mapped|26 target controls covered
24%
ISO/IEC 27003:2017
17 source controls mapped|37 target controls covered
24%
ISO 39001:2012 - Road Traffic Safety Management
17 source controls mapped|84 target controls covered
24%
ISO 37301
16 source controls mapped|17 target controls covered
23%
ISO 9001
16 source controls mapped|18 target controls covered
23%
ISO 41001:2018 - Facility Management Systems
16 source controls mapped|85 target controls covered
23%
ISO 22313:2020 - Guidance on Business Continuity Management Systems
16 source controls mapped|74 target controls covered
23%
ISO 19011:2018
16 source controls mapped|31 target controls covered
23%
ISO 55001
15 source controls mapped|16 target controls covered
21%
ISO 56002
15 source controls mapped|79 target controls covered
21%
ISO 31000:2018
14 source controls mapped|5 target controls covered
20%
ISO 30401
14 source controls mapped|16 target controls covered
20%
ISO 37002:2021 - Whistleblowing Management Systems
14 source controls mapped|76 target controls covered
20%
ISO 45001
12 source controls mapped|11 target controls covered
17%
ISO/IEC TR 24028:2020
10 source controls mapped|1 target controls covered
14%
ISO 37001
10 source controls mapped|10 target controls covered
14%
ISO 27005:2022
7 source controls mapped|7 target controls covered
10%
ASIS SPC.1-2009 - Organizational Resilience Standard
7 source controls mapped|7 target controls covered
10%
ISO 28001:2007 Supply Chain Security Management
7 source controls mapped|5 target controls covered
10%
AS9100D:2016 - Quality Management Systems for Aviation, Space, and Defence
7 source controls mapped|13 target controls covered
10%
ISO 19011
6 source controls mapped|6 target controls covered
9%
ISO/IEC 27031:2011
6 source controls mapped|4 target controls covered
9%
ISO/IEC 38500:2024
6 source controls mapped|27 target controls covered
9%
ISO/IEC 23894:2023
5 source controls mapped|11 target controls covered
7%
ISO/IEC 27701:2019
4 source controls mapped|4 target controls covered
6%
ISO/IEC 27557:2022 - Organisational Privacy Risk Management
3 source controls mapped|3 target controls covered
4%
ISO 22320:2018
3 source controls mapped|4 target controls covered
4%
ISO 10006:2003
2 source controls mapped|2 target controls covered
3%
BS 65000:2014 - Guidance on Organizational Resilience
2 source controls mapped|2 target controls covered
3%
ITIL 4
2 source controls mapped|2 target controls covered
3%
ISO 20400:2017 - Sustainable Procurement
2 source controls mapped|2 target controls covered
3%
ISO/IEC 17025:2017 - General Requirements for Testing and Calibration Laboratories
2 source controls mapped|3 target controls covered
3%
ISO/IEC 17025:2017 - General Requirements for Testing and Calibration
2 source controls mapped|2 target controls covered
3%
ISO 15189:2022 - Medical Laboratories Requirements for Quality and Competence
2 source controls mapped|2 target controls covered
3%
NIST SP 800-160
2 source controls mapped|2 target controls covered
3%
ISO/IEC 30111:2019
2 source controls mapped|2 target controls covered
3%
ISO 31000
2 source controls mapped|2 target controls covered
3%
ISO/IEC 27004:2016
2 source controls mapped|2 target controls covered
3%
BRCGS Global Standard for Food Safety Issue 9
2 source controls mapped|2 target controls covered
3%
CSA STAR (Security, Trust, Assurance, and Risk)
1 source controls mapped|1 target controls covered
1%
NIST SP 800-171A Rev 3 - Assessing CUI Security Requirements
1 source controls mapped|1 target controls covered
1%
SQF Code Edition 9 - Safe Quality Food
1 source controls mapped|1 target controls covered
1%
SOC 1 (SSAE 18 / ISAE 3402)
1 source controls mapped|1 target controls covered
1%
NIST SP 1800-32
1 source controls mapped|1 target controls covered
1%
ISO/IEC 29147:2018
1 source controls mapped|2 target controls covered
1%
APRA CPS 230 Operational Risk Management
1 source controls mapped|1 target controls covered
1%
PCI PIN Security
1 source controls mapped|1 target controls covered
1%
PCI SSF
1 source controls mapped|1 target controls covered
1%
Brazil AI Framework
1 source controls mapped|1 target controls covered
1%
FFIEC IT Examination Handbook
1 source controls mapped|1 target controls covered
1%
NIST SP 800-183
1 source controls mapped|2 target controls covered
1%
ISO 22318
1 source controls mapped|2 target controls covered
1%
UK Bribery Act 2010
1 source controls mapped|1 target controls covered
1%
ISAE 3402 - Assurance Reports on Controls at a Service Organisation
1 source controls mapped|1 target controls covered
1%
ISO 22316
1 source controls mapped|1 target controls covered
1%
NSA Guidance for Transition to Quantum-Resistant Cryptography
1 source controls mapped|1 target controls covered
1%
ISO 22317
1 source controls mapped|1 target controls covered
1%
ISO 26000:2010
1 source controls mapped|1 target controls covered
1%
PCI P2PE
1 source controls mapped|1 target controls covered
1%
OWASP ASVS
1 source controls mapped|1 target controls covered
1%
ISO 10007:2017
1 source controls mapped|1 target controls covered
1%
APRA CPS 220 Risk Management
1 source controls mapped|1 target controls covered
1%
ISO/IEC 25012:2008 - Data Quality Model
1 source controls mapped|2 target controls covered
1%
ISO/IEC 17050-2:2004
1 source controls mapped|1 target controls covered
1%
IEC 62304:2015 Medical Device Software Lifecycle Processes
1 source controls mapped|1 target controls covered
1%
NIST SP 800-53 Revision 5.1 HIGH
1 source controls mapped|1 target controls covered
1%
NIST SP 800-53 Rev 5 MODERATE
1 source controls mapped|1 target controls covered
1%
NIST SP 800-88 Rev 1
1 source controls mapped|1 target controls covered
1%
ISO 26262:2018 - Functional Safety for Road Vehicles
1 source controls mapped|2 target controls covered
1%
ISO 14001
1 source controls mapped|1 target controls covered
1%
NFPA 1600 - Standard on Continuity, Emergency, and Crisis Management
1 source controls mapped|1 target controls covered
1%
Compare ISO 22000:2018 with ISO 9001:2015

Frequently Asked Questions

What is ISO 22000:2018?

ISO 22000:2018 is a compliance framework from International with 8 domains and 70 controls. It is used by organisations to establish and maintain compliance with industry standards and regulatory requirements.

How many controls does ISO 22000:2018 have?

ISO 22000:2018 has 70 controls organised across 8 domains. The largest domains are Operation – ISO 22000:2018 (22 controls), Support – ISO 22000:2018 (17 controls), Clause 0 – ISO 22000:2018 (8 controls). Each control defines specific requirements that organisations must implement to achieve compliance.

What frameworks does ISO 22000:2018 map to?

ISO 22000:2018 maps to 85 other compliance frameworks. The top mapping partners are ISO 9001:2015 (79% coverage), ISO 27701:2019 (60% coverage), ISO 45001:2018 (53% coverage). Use our comparison tool to explore control-level mappings between frameworks.

How do I get started with ISO 22000:2018 compliance?

Start your ISO 22000:2018 compliance journey by running a self-assessment on our platform to identify your current compliance posture. Our AI advisory can answer specific questions about ISO 22000:2018 requirements, and cross-framework mapping helps you leverage existing controls from other frameworks you may already comply with. Create a free account to access all 70 controls and track your progress.

Start Your Compliance Journey

Create a free account to run self-assessments, get AI advisory, and track your compliance progress across 718 frameworks.

Get Started Free →

Free forever — no credit card required