This is the part 2 of an article about the new ISO 22000:2018, which was published in June 2018. If you have not yet read the first article, please check it out here. In the present article, changes to clauses 4–7 are discussed. Part 3 will discuss clauses 8–10.
Clause 4 – Context of the Organization
This clause is nearly all new and is mainly focused in defining how organizations shall establish the Food Safety Management System (FSMS) scope. For that, according to the standard, there are three things organizations must do/know (Figure 1).
From these items, the one that is the most straightforward for food safety practitioners is the definition of requirements. For that, organizations must first determine who the interested parties are and then gather their requirements regarding food safety.
To identify the interested parties, it is essential to consider all the participants that have an impact on food safety, whether internal or external components of the organization. For example, employees, management, and owners can be considered internal interested parties; suppliers, society, government, customers, and consumers are examples of external interested parties.
The new approach where organizations must understand their context and how those issues are relevant to their purpose and ability to achieve the FSMS results may pose a challenge to organizations, not only in defining it but also in how to audit it. One option would be to seek advice from people that have other ISO management systems implemented (or have experience in implementing it) since this approach is common to all ISO management system that have adopted the High Level (e.g., ISO 9001 or 14001).
Finally, the organization must define the FSMS boundaries so that the scope may specify the products and services, processes, and production sites included in the FSMS. In the 2005 version, services were not included in what the scope should specify. The scope must also consider the context of the organization and the needs and expectations of the interested parties, so that the FSMS will be established in an objective and consistent way to the reality of the company.
Clause 5 – Leadership
In this clause, the new standard presents a list of actions that top management should do to demonstrate its commitment towards the FSMS. The role of top management with respect to the FSMS is reinforced in the new version, since not only commitment (2005 version) but also leadership shall be demonstrated.
Regarding policy, there are no major differences when compared with the last version, although it includes an interesting reference to the importance of communicating policy with interested parties.
Clause 5.3 presents details on which responsibilities and authorities top management shall assign and introduces the idea that the responsibility of top management is not limited to assigning and communicating responsibilities and authorities, but also ensuring that they are understood. Besides defining what the food safety team leader shall be responsible for (that was also present in the 2005 version), it also clarifies other responsibilities and authorities that top management shall define (e.g., reporting on the FSMS performance, ensuring that the FSMS conforms to requirements). It also encourages sharing more responsibility over the entire organization to achieve the effectiveness of the FSMS, designating persons with defined responsibility and authority to initiate and document actions(s).
Clause 6 – Planning
In clause 6.1, the concepts of risks and opportunities are introduced as something that the organization must determine, considering relevant issues (internal or external) and requirements from the interested parties. Then the organization must plan, not only actions to address these risks and opportunities, but also how to integrate, implement, and evaluate the effectiveness of these actions.
The responsibility for establishing objectives and retaining documented information on them is set on clause 6.2. There is a higher emphasis on the importance of objectives than in the last version. Objectives shall be consistent and measurable, take into account the requirements, and be monitored, verifiable, communicated, and updated.
When planning how to achieve objectives, the steps shown in Figure 2 should be taken in consideration.
Clause 7 – Support
Clause 7 presents requirements regarding several supporting activities like resource management, people competence and awareness, communication and documented information management.