FSSC 22000 Training Requirements – From an Auditor’s Perspective

I have audited many facilities, and I can assure you: training is the backbone of FSSC 22000 certification. It’s not a tick‑box exercise – it’s what separates a compliant system from a costly nightmare. It also has a significant impact on a company’s food safety and quality culture, a fundamental requirement under FSSC 22000.

My biggest inspiration for writing this guide is to help companies get clarity on the training requirements when they want to become FSSC 22000 certified. My goal here is simple: to make the training requirements clear, explain who needs what kind of training, and show how it all connects to building a strong food safety and quality culture.

You are welcome to contact me here should you need any assistance.

In this guide, I’ll break down the most essential FSSC 22000 training requirements every organisation must master. We will look at the following core areas:

---

A: Framework Training – Interpreting FSSC 22000

Before writing a single procedure, the implementation team must understand the rules of the game.

Whenever I audit a site, one thing I look for is signs that the team has invested time in understanding the FSSC 22000 scheme. Training at this stage isn’t about catching mistakes – it’s about giving your team the confidence to build a system that works. When the framework is in place, everything else flows more smoothly.

#1: Introduction to FSSC 22000 Training

Introductory training provides an overview of the scheme and helps your team understand what is required to implement and maintain the FSSC 22000 system. It helps the team see the “bigger picture” of FSSC 22000:

• ISO 22000:2018 – the management system backbone.
• ISO/TS 22002‑x – the sector‑specific PRPs.
• FSSC Additional Requirements – the unique elements that make FSSC certification different.

Introductory training is designed for a broad audience across the organisation and serves as an awareness-building exercise. This training is ideal for:

• The Food Safety / HACCP team.
• Managers and supervisors.
• Internal auditors.
• Quality assurance and quality control personnel.
• Laboratory technologists.
• Top management / business owners.

#2: Implementation of FSSC 22000 Training

Implementation training is where you put knowledge into practice. Implementation training is more specialised and targets those directly responsible for developing and executing the food safety management system.

This training is where theory becomes practice. It focuses on:

• Applying GMP/PRPs in daily operations.
• Conducting HACCP studies and hazard analysis.
• Writing procedures that auditors can verify.
• Embedding FSSC Additional Requirements into the system.

This training is ideal for:

• QA & QC Managers
• HACCP / Food Safety Teams, primarily the HACCP / Food Safety Team Leader
• Internal Auditors

From my side, training is one of the strongest indicators of success. When teams have completed the Introduction Training, they understand the scheme’s architecture and avoid missing critical requirements. When they’ve done the Implementation Training, procedures aren’t just written – they’re lived out on the factory floor.

I recommend first building confidence in the basics (Food Safety Practices, GMP/PRPs, and HACCP methodology) before attempting the implementation training. I will cover these in the following sections.

---

B: Foundational Training – The Building Blocks for Your FSMS

Foundational training is the non‑negotiable starting point for any food safety management system. It applies to the broadest range of staff, from senior leaders to frontline operators. In fact, it is a legal requirement that all employees, including those in charge, are trained in basic food safety and hygiene practices. Without this, organisations risk major non‑compliance findings during audits.

Aside from a legal requirement, it fosters a culture of food safety and quality improvement, which is essential for encouraging behaviour related to food safety and quality in the facility and ensuring better performance.

When I audit a facility, I don’t just review documents; I talk to the people. I look for a strong food safety culture which is built on training that everyone can understand and apply in their daily work. Before tackling the complexity of FSSC 22000 implementation, every team member needs a solid grounding in foundational training.

#3: Basic Food Safety Training

Basic Food Safety training builds awareness and confidence. It ensures that everyone understands:

• Why is food safety important?
• The difference between hazards (biological, chemical, physical, and allergens) and risks.
• Personal hygiene and handwashing practices.
• Cross‑contamination prevention.
• Temperature control basics (cold chain, cooking, cooling).
• Cleaning and sanitation, to name a few.

Who should attend: All employees, from management to shop‑floor staff.

#4: GMP / PRP Training

Good Manufacturing Practices (GMPs) / Prerequisite Requirements (PRPs) training takes food safety awareness and turns it into structured practices. It is based on the ISO/TS 22002 sector‑specific requirements, which outline the exact practices expected for your industry, whether food manufacturing, catering, packaging, or transport.

The new Sector-specific PRP standards provide a foundation for applying food safety management systems, risk assessments, and HACCP.

It has foundational controls to ensure that ultimately the food produced is safe, legal, authentic and meets quality requirements. They support a sound safety management system by providing tools and controls that enable processes to run effectively and deliver the desired product. Without these controls, we cannot realistically produce safe food.

This training is ideal for:

• HACCP / Food Safety teams
• Supervisors / Managers
• QA / QC managers
• Internal auditors
• Top management / Business owners
• Operational staff directly involved in production

During audits, I look for evidence that staff not only know the PRPs but also follow them daily, for example, by maintaining clean hands, wearing correct uniforms, properly storing supplies, and keeping accurate records.

Without these foundational practices, it becomes difficult to implement an effective HACCP system, a core requirement of ISO 22000. Basic food safety and GMP/PRP training provide the daily discipline needed to keep hazards under control. When staff are well trained in these essentials, they can build HACCP studies on solid ground.

Why This Training Matters Before Implementation

Trying to implement FSSC 22000 without these basics is like building a house without a foundation. Once the team understands basic food safety and GMP/PRPs, they’re ready to move into HACCP studies and full system implementation. It’s a natural progression: awareness → practice → system.

In the next section, we’ll focus on HACCP Training — where the team learns to identify hazards, assess risks, and design controls that auditors can verify.

---

C: Core Technical Training – HACCP Implementation

HACCP provides the foundation for improving food safety, which is the primary purpose of food safety management systems. It should not serve as an additional requirement.

ISO 22000 Clause 8 sets out the operational requirements for food safety, with HACCP at its core. FSSC 22000 relies on this structured, scientific approach to identify and control food safety hazard risks. For your system to succeed, your team must understand the 12 Stages of HACCP outlined in ISO 22000.

As an auditor, I will look at whether the HACCP system is more than just paperwork. Too often, I see plans that exist only to “tick the box”; flow diagrams that don’t align with reality; hazard analyses that miss obvious risks; and CCPs that are listed without scientific justification. This is what happens when HACCP training is insufficient.

The result is a HACCP system that looks complete on paper but fails in practice. ISO 22000 Clause 8 requires a robust, scientifically defensible HACCP system. Without trained staff who understand its importance, the system cannot protect food or withstand audit scrutiny.

A HACCP plan is only as strong as the people who implement it. If staff don’t understand the “why” behind the requirements, the plan is fragile. Training is not optional; it is the difference between a compliant system and a dangerous one.

#5: HACCP Training for Food Safety / HACCP Teams

HACCP training specifically designed for Food Safety/HACCP Teams and Supervisors is usually Level 3 (intermediate) training and covers the five preliminary steps of HACCP and the first principle, Conducting a Hazard Analysis. At ASC, we always dedicate at least one HACCP training module to basic Food Microbiology training. You might ask, “Why do I need Food Microbiology training?” I will explain shortly.

This training is ideal for:

• Managers / Supervisors (directly and indirectly involved in food manufacturing/processing
• QA & QC Managers
• HACCP / Food Safety Teams
• Internal & Supplier Auditors

#6: Advanced HACCP System Implementation

Advanced HACCP training is usually Level 4 or higher and covers all 12 Stages of HACCP, including advanced methodologies, compiling the HACCP study, creating a HACCP plan, and more. More advanced Food Microbiology is also covered during the training.

This training is ideal for:

• QA & QC Managers
• HACCP / Food Safety Team Leaders
• Internal & Supplier Auditors
• Senior technical staff

At this level, I look for evidence that your team can go beyond following the system; they can maintain it, challenge it, and improve it. That’s what separates a compliant HACCP plan from a truly effective one.

Why is Food Microbiology Part of HACCP Training?

Food microbiology helps us understand which organisms could positively and negatively affect our food. This includes indicator organisms, which signal quality, spoilage, and hygienic practices, as well as the effectiveness of preservation or treatment methods.

Additionally, food microbiology ensures we understand organisms that could negatively impact food safety and may also serve as indicators of potential product outcomes, including sensory properties that can be desirable or undesirable. It can help us recognise the types of environments we can expose the food to and those we should avoid.

Food microbiology provides the scientific foundation for HACCP. Every critical limit, whether cooking, cooling, or storage, is based on microbiological data. Without this knowledge, hazard analysis is incomplete. Food Microbiology training ensures critical limits are valid, control measures are properly validated, and the HACCP plan is credible in the eyes of auditors.

The Role of Food Microbiology in HACCP

• Scientific foundation for HACCP (ISO 22000 Clause 8): HACCP is built on science. When you set a critical limit, for example, “Cook to 72°C”, that number isn’t arbitrary. It comes from microbiological data on pathogen lethality. Without understanding the science behind microbial growth and destruction, HACCP becomes guesswork.

• Validating control measures: ISO 22000 requires validation of these measures. That means proving they actually work. Food microbiology training gives the HACCP team the knowledge to validate cooking, cooling, storage, and sanitation steps against real microbial risks.

• Interpreting hazards correctly: Hazard analysis isn’t just listing “Salmonella” or “Listeria.” Teams need to understand how these organisms behave and what conditions allow them to grow, survive, or die. Microbiology training equips them to make accurate risk assessments.

During audits, I don’t just check whether a CCP exists; I check whether the team understands why it exists. If your plan says “chill to 5°C,” I’ll ask: What happens to Listeria at 5°C? If the team can explain the science, I know the HACCP plan is robust. If not, it tells me the plan is just paperwork.

The Challenges of Insufficient HACCP Training

When HACCP training is insufficient, the challenges are clear:

• Untrained staff don’t understand the requirements. If operators don’t know why a CCP exists, they treat monitoring as routine paperwork instead of a safeguard. A cooking temperature becomes “just another number” rather than a critical limit that protects consumers.
• Hazard analysis becomes guesswork. Without proper training, teams fail to identify hazards correctly or underestimate their impact. Biological risks, such as Listeria and Salmonella, are overlooked, and chemical or allergen hazards are poorly controlled.
• Critical limits lack scientific validity. Numbers are copied from manuals without understanding the microbiological lethality or regulatory basis behind them. In audits, I challenge these limits, and if the team cannot explain them, the system collapses.
• Verification and corrective actions are weak. Staff who don’t understand HACCP requirements often record data without questioning it. Deviations go unnoticed, and corrective actions are either delayed or superficial.

The purpose of HACCP training is not just compliance. It is to implement a robust HACCP system that protects consumers, meets the ISO 22000 Clause 8 and FSSC 22000 requirements. When your team understands the 12 stages of HACCP, they can build a plan that is practical, scientifically defensible, and auditable.

---

D: Improvement & Verification Training – RCA, Culture and Auditing

Once the framework, foundational, and HACCP trainings are in place, organisations must move beyond implementation into improvement and verification. I listed the three most important areas: Root Cause Analysis (RCA), Food Safety & Quality Culture, and Internal & Supplier Auditing. They all serve the same purpose: to strengthen, verify, and continually improve the food safety management system.

In FSSC 22000, these topics are not optional add‑ons; they are explicit requirements:

• RCA is required under ISO 22000 Clause 10 (Improvement), which requires corrective actions to be based on root cause analysis. FSSC 22000 Additional Requirements emphasise effective corrective action management.
• Food Safety & Quality Culture is mandated in the FSSC 22000 Additional Requirements, requiring a documented plan led by management. ISO 22000 Clause 5 (Leadership) and Clause 7 (Support) emphasise competence, awareness, and communication.
• Internal auditing is required under ISO 22000 Clause 9.2, while Supplier Auditing is emphasised in FSSC’s requirements for food fraud prevention, food defence, and supplier management.

Together, these trainings ensure that your system is compliant and resilient. They empower teams to solve problems permanently, embed food safety values across the organisation, and verify that both internal processes and external suppliers meet the highest standards.

From my standpoint, the most common and serious problems I encounter in food safety systems stem from weaknesses in culture, the lack of root cause analysis, and auditing competence. These issues are interconnected, and when they fail, the system cannot sustain compliance.

#7: Root Cause Analysis (RCA) Training

The purpose of Root Cause Analysis training is to equip teams with structured problem‑solving skills that go beyond treating symptoms. RCA ensures that when nonconformities or deviations occur, the organisation identifies the actual underlying cause and prevents recurrence.

The training is ideal for:

• QA managers / QC managers
• Managers / Supervisors
• HACCP / Food Safety teams
• Anyone responsible for corrective actions

I often see facilities where corrective actions are superficial, “retrain staff” or “clean equipment”, without addressing why the issue occurred. In one audit, a recurring allergen cross‑contact was traced back not to operator error, but to poorly designed equipment that couldn’t be cleaned effectively. The team kept blaming the staff until they started using RCA and discovered the real cause of the problem.

#8: Food Safety & Quality Culture Training

The purpose of Food Safety and Quality Culture Training is to ensure leadership, including managers and supervisors, understands what food safety and quality culture is, why it matters, and how to implement a strong, documented culture plan. This training empowers management to drive values, behaviours, and accountability across the organisation.

This training is ideal for:

• Top management
• Supervisors / Managers
• Food Safety / HACCP Teams

Food safety culture is always visible during an audit, not in the documentation, but in the behaviour of people. One of the strongest examples I’ve seen was at a facility where a supervisor noticed condensation dripping near a production line. Instead of ignoring it or waiting for maintenance, he immediately stopped the line, escalated the issue, and documented the corrective action. Management supported the decision without hesitation. That told me the culture plan was real, that staff were empowered to act, that supervisors reinforced the values, and that leadership backed them up.

On the other hand, I’ve audited sites where management spoke about “commitment to food safety” but didn’t demonstrate it. Supervisors discouraged operators from reporting minor issues to avoid “slowing production.” In those cases, hazards were hidden until audit day, and the culture was clearly weak. The difference is simple: when culture starts with management and supervisors, staff feel safe to speak up. When it doesn’t, risks stay buried.

#9: Internal & Supplier Auditing Training

The purpose of Internal and Supplier Auditing training is to develop auditing skills that verify compliance internally and across the supply chain. Internal audits verify that the FSMS is functioning well, while supplier audits confirm that raw materials and services meet requirements.

Where is it required in FSSC 22000?

• ISO 22000:2018 Clause 9.2 states that organisations must conduct internal audits at planned intervals, and auditors must be selected based on their competence to ensure objectivity and impartiality.
• FSSC 22000 further reinforces this by requiring organisations to demonstrate that internal auditors are suitably qualified and trained. The FSSC 22000 Additional Requirements extend auditing to suppliers, especially for food fraud and food defence.

This training is ideal for:

• Internal and supplier auditors
• Food Safety Team Leaders
• Procurement staff
• Supplier Quality Managers

In one audit, I noticed the internal audit report marked allergen controls as “compliant.” But during my assessment, I found that the facility had no segregation procedures in place, and allergen cross‑contact was a daily risk. The internal auditors had ticked boxes without probing deeper or verifying practices against requirements. This gap became a major nonconformity because the system had been “verified” internally but was not functioning in practice.

The problem is twofold:

• Lack of competence: Internal auditors often don’t understand the requirements of ISO 22000 Clause 9.2 or FSSC’s emphasis on verification. They focus on paperwork instead of observing practices.
• False assurance: Management relies on internal audit reports to confirm compliance. When those reports are superficial, leadership believes the system is sound until the certification audit exposes the truth.

My experience as an auditor: Competent internal auditors are not optional; the standards require them. When internal auditors are adequately trained, they identify weaknesses early, link findings to root causes, and drive improvement. When they are not, the organisation faces repeat nonconformities, loss of credibility, and potential certification risks.

---

E: Food Fraud and Food Defence Training – Protection Against Intentional Harm

The purpose of Food Fraud and Food Defence training is to equip teams with the knowledge and tools to protect the food supply chain against intentional threats.

• Food Fraud focuses on economically motivated adulteration (e.g., dilution, substitution, mislabeling) that compromises authenticity and consumer trust.
• Food Defence addresses intentional contamination or sabotage, ensuring facilities are protected against malicious acts.

#10: Food Fraud and Food Defence Training

Together, these trainings build resilience by teaching staff how to identify vulnerabilities, assess risks, and implement preventive measures.

This training is ideal for:

• Food Safety Teams – to design and maintain fraud and defence programmes.
• Procurement & Supply Chain Managers – to assess supplier vulnerabilities and authenticity risks.
• Site Security & Operations Managers – to implement defence measures at the facility level.
• Top Management – to allocate resources and demonstrate leadership commitment.

Food fraud and food defence are often treated as “paper exercises.” I’ve audited sites where vulnerability assessments were copied from templates, with no link to actual supply chain risks. For example, one facility sourced high‑risk spices but listed them as “low risk” because procurement didn’t understand food fraud vulnerabilities. In another audit, food defence plans existed only as locked doors, but staff had no training on how to respond to suspicious activity.

When these programmes are weak, auditors raise nonconformities because intentional threats are not being controlled. Strong training ensures staff can explain the difference between fraud and defence, identify real vulnerabilities, and demonstrate that mitigation plans are active and effective.

---

Conclusion

The true measure of your FSSC 22000 system isn’t found in the thickness of your procedures or the shine of your factory floor; it’s found in the eyes and actions of your team. If your staff doesn’t understand the “why” behind every control, if they view food safety as a tedious chore rather than a critical safeguard, then all the paperwork in the world won’t prevent a major nonconformity or a recall.

Training is the mechanism that translates compliance documents into daily, empowered behaviour. When I audit, I’m looking for the ripple effect of that investment: confidence, engagement, and the proactive commitment that demonstrates your food safety culture is genuinely lived. That is what truly separates the best-in-class from the rest.

The bottom line is simple: if you invest in structured, ongoing training, your people will be more confident, your processes will be consistent, and your system will not just comply with FSSC 22000, it will thrive.

---

Top 15 FAQs About the Training Requirements for FSSC 22000

Here are the top 15 questions our clients ask us about the training requirements for FSSC 22000:

1. Is the training required by FSSC 22000 a one-time event?

No. Training must be an ongoing process, based on need and staff competency. While initial training establishes the baseline, refresher training is required to keep staff up to date on changes to regulations, processes, or the standard itself. Most companies conduct refreshers annually.

2. Do we need to use an external training provider?

It depends. You can conduct training internally, provided the trainer is competent and qualified. However, for specialised topics such as HACCP or Internal Auditor training, external training providers, such as ASC, are often recommended to ensure credibility.

3. Does the maintenance staff need HACCP training?

Generally, no. Maintenance staff need strong GMP training and specific training on how their work affects food safety (e.g., using food-grade lubricants and cleaning up after repairs). They do not usually need HACCP training unless they are part of the Food Safety Team.

4. What is the difference between Food Defence and Food Fraud training?

Food Defence focuses on protecting against intentional harm (e.g., terrorism or disgruntled employees trying to make people sick). Food Fraud focuses on economically motivated deception (e.g., substitution of ingredients). Your team needs to understand the difference to conduct proper threat and vulnerability assessments.

5. Can we combine GMP and Basic Food Safety training?

Yes, these are often combined into a comprehensive induction programme for new staff.

6. What happens if we fail to document a training session?

In the eyes of an auditor: “If it isn’t written down, it didn’t happen.” Missing training records is a common non-conformance. Ensure you have dates, topics covered, trainer names, and trainee signatures/assessments for every session.

7. Do temporary or agency workers need the same training as full-time staff?

Yes. Any individual handling your product poses the same risk, regardless of their contract status. Temporary staff must receive, at a minimum, Basic Food Safety and GMP training before starting work.

8. Do contractors and visitors need training?

Yes. Contractors and visitors do need training before entering production areas under FSSC 22000 requirements. While they don’t require the same depth of training as full‑time staff, they must undergo a site induction that covers hygiene rules (e.g., PPE, handwashing), restricted areas, emergency procedures, and any specific safety practices relevant to their work. This ensures they don’t inadvertently introduce hazards or compromise food safety while on site.

Contractors such as electricians, plumbers, or pest control providers typically receive a condensed version of GMP and hygiene training, tailored to how their work affects food safety (e.g., using food‑grade lubricants, cleaning up after repairs).

Visitors, including auditors or external stakeholders, must also be briefed on hygiene and safety protocols before entering sensitive areas. Importantly, all of this training must be documented. Auditors will check records to confirm that contractors and visitors were inducted correctly and are compliant with site rules.

9. How often should Root Cause Analysis (RCA) training be updated?

RCA training should be refreshed whenever you notice that corrective actions are failing to address the relevant issues. If the same problems keep happening, it’s a sign your team needs a refresher.

10. Does Top Management (CEO, Plant Manager) need training?

Yes. While they don’t need to know the technical details of HACCP monitoring or sanitation procedures, they must be trained on their specific responsibilities: leadership, resource allocation, management reviews, communication, and fostering a strong food safety and quality culture.

A good understanding of food safety, the FSSC 22000 scheme requirements, and related standards is highly recommended.

FSSC 22000 emphasizes leadership commitment. Auditors will interview top management to verify that they understand the scope and objectives of the Food Safety Management System (FSMS). This includes demonstrating awareness of ISO 22000 requirements, FSSC 22000 additional requirements, and how their decisions impact compliance.

In South Africa, Regulations R638 (Regulations Governing General Hygiene Requirements for Food Premises, the Transport of Food and Related Matters) require all food handlers and persons in charge of food premises, including senior managers with oversight responsibilities, to have appropriate food safety training. This ensures they understand the legal obligations associated with producing safe food. The regulation states explicitly accredited training for persons in charge.

Many other jurisdictions have similar regulatory requirements, making foundational food safety training for top management both a legal and practical expectation across global markets.

11. Is participating in a “Mock Recall” considered training?

Yes. It is a form of practical training. A mock recall tests the competence of your Crisis Management Team. After the exercise, document who participated and what was learned. This counts as evidence of ongoing training for your emergency response procedures.

12. Do non-production roles, such as Procurement or HR, need food safety training?

Yes, tailored to their impact. Procurement staff need to understand supplier approval and raw material specifications (to avoid buying cheap, unsafe ingredients). HR staff need to understand competency requirements to ensure they hire qualified candidates. They don’t need GMP training, but they need “job function” food safety training.

13. How do we handle training when FSSC 22000 updates to a new version?

When the scheme updates, your Food Safety Team and internal auditors must receive training on the latest requirements to understand them. You then need to cascade relevant changes down to the rest of the staff. Auditors will look for certificates or records showing your team has been upskilled to the current version.

14. Does new equipment or a new product line require immediate retraining?

Yes, under the requirements for “Management of Change.” Suppose you install a new conveyor or start making a gluten-free product, the relevant risk assessments (HACCP) change. Consequently, the staff operating that line must be retrained before the new process goes live. Auditors often check the date of equipment installation against the date of staff training to ensure there is no gap.

15. How do we know which staff must do what training?

In a nutshell, the type of training each staff member needs under FSSC 22000 depends on their role and the impact their work has on food safety.

All employees, including temporary staff, must complete basic food safety and hygiene training as a legal requirement.

Staff directly involved in production or supervision also need GMP/PRP training to ensure daily practices meet standards. Food Safety/HACCP team members, QA/QC managers, and auditors require more advanced HACCP and microbiology training, since they design and validate the system.

Beyond technical skills, top management must be trained on leadership responsibilities, food safety culture, and resource allocation, while internal auditors and supplier auditors need specific auditing competence.

Contractors and visitors require a site induction covering hygiene and safety rules before entering production areas.

In short, the deeper a person’s involvement in designing, verifying, or leading the food safety system, the more specialised their training should be. At the same time, everyone, without exception, needs foundational food safety awareness training.

---

Comments

Please leave us a comment in the comments section below. If you have any questions regarding the FSSC 22000 training requirements that are not answered in the FAQs section, let us know below, and we will gladly respond and add them to the section (if relevant).

---