ISO 22000 DIS 2026 — Where Things Stand Right Now
The ISO 22000 DIS 2026 has formally entered its ballot phase — and if you haven’t started your PRP gap analysis against the new ISO 22002-x:2025 series, you’re already behind. This is not a distant compliance exercise. The groundwork you lay today determines how smoothly your organisation transitions when the revised standard publishes in 2027.
Here is everything you need to know about what’s changing, why it matters, and precisely what actions to take.
Why ISO 22000 Is Being Revised Right Now
ISO 22000:2018 has served the global food chain well for nearly a decade. But the food safety landscape it was written for no longer exists. Five specific drivers forced this revision:
New ISO 22002-x:2025 PRP series — the old ISO/TS 22002 technical specifications were replaced by full International Standards in July 2025, rendering the existing PRP references in ISO 22000:2018 outdated
ISO 22002-100:2025 core standard — a brand-new cross-sector PRP standard now sits at the foundation of every food safety management system (FSMS), regardless of industry segment
GFSI Benchmarking 2024 requirements — updated benchmarking demands explicit coverage of food safety culture, food fraud (VACCP), food defence (TACCP), and digital traceability
Climate change integration — ISO 22000:2018/Amd 1:2024 added climate action as a separate amendment; the DIS formally absorbs this into the main standard body
New retail and wholesale pathway — ISO 22002-7:2025 created PRP requirements for retail and wholesale operations for the first time in ISO history
In March 2026, the Draft International Standard (DIS) was formally registered and entered the 12-week ballot phase with ISO member bodies. Publication of the revised standard is anticipated in 2027, followed by a three-year transition window running through 2030.
Important: ISO 22000:2018 remains the current valid standard. Certification against it continues normally. However, the most time-consuming preparation work — your PRP gap analysis against ISO 22002-x:2025 — can and should begin immediately.
The ISO 22002-x:2025 PRP Series: The Single Biggest Operational Change
If you absorb one thing from this article, make it this: the replacement of the ISO/TS 22002 Technical Specification series with the new ISO 22002-x:2025 International Standards is the most significant operational change in the entire revision. Everything else is important. This is critical.
Prerequisite Programmes are the operational foundation of every FSMS. Under ISO 22000:2018, PRPs were based on ISO/TS 22002 technical specifications — documents that carried “technical specification” status, meaning they represented emerging consensus rather than fully ratified international requirements. That distinction is now gone.
What Has Changed — Old Standard vs New Standard
Old Standard New Standard Sector
ISO/TS 22002-1:2009 ISO 22002-1:2025 Food manufacturing
ISO/TS 22002-2:2013 ISO 22002-2:2025 Catering
ISO/TS 22002-4:2013 ISO 22002-4:2025 Food packaging manufacturing
ISO/TS 22002-6:2016 ISO 22002-6:2025 Feed and animal food production
(New) ISO 22002-100:2025 ALL sectors — core PRP requirements
(New) ISO 22002-7:2025 Retail and wholesale
The introduction of ISO 22002-100:2025 is the structural shift that changes how every organisation builds its FSMS. This core standard consolidates common PRP requirements applicable across every food chain sector. You must apply it alongside your sector-specific standard — there is no opt-out.
What This Means for Your PRP Gap Analysis
In practice, this is where most organisations underestimate the workload. Reviewing your PRPs against the new ISO 22002-x:2025 requirements is not a documentation refresh — it is a technical review of actual practices. Your cleaning validation schedules, pest control frequency and evidence standards, allergen management protocols, personal hygiene requirements, and maintenance programme documentation all need to be assessed against two documents now: ISO 22002-100:2025 and your relevant sector-specific standard.
The mistake most teams make here is treating the PRP gap analysis as a paper exercise. A gap in documentation is fixable in an afternoon. A gap in actual operational practice — say, a pest control frequency that no longer meets the updated technical requirement — takes weeks to address. Start with the operational review first, then update the documentation.
Key Changes Expected in the Revised ISO 22000
The DIS reflects a standard that has genuinely evolved, not simply been reformatted. Here are the substantive changes you need to plan for.
Food Fraud and Food Defence — Formally Embedded
ISO 22000:2018 referenced food fraud and food defence but stopped short of defining how they should be systematically managed. The revised standard is expected to formally embed VACCP (Vulnerability Assessment and Critical Control Points) for food fraud prevention and TACCP (Threat Assessment and Critical Control Points) for food defence — aligned with GFSI Benchmarking 2024.
If your current FSMS treats these as supplementary documentation rather than structured, risk-based programmes, that gap will become a nonconformance under the revised standard.
Strengthened Food Safety Culture Requirements
Aligned with the direction set by GFSI and FSSC 22000 Version 7, the revised ISO 22000 is expected to include specific, measurable requirements for food safety culture — moving well beyond a policy statement. Demonstrating that culture is embedded across your organisation means evidence: training records tied to behavioural outcomes, leadership engagement documentation, near-miss reporting trends, and culture assessment results.
Climate Change — Fully Integrated
ISO 22000:2018/Amd 1:2024 introduced climate action as a bolt-on amendment. The DIS absorbs this into the core standard. Climate-related food safety risks now belong in your FSMS context analysis as first-class considerations alongside traditional hazards.
What does that look like in practice? A manufacturer in Southern Europe, for example, must now formally assess how rising ambient temperatures affect pathogen growth windows during production downtime. A logistics provider must consider how extreme weather events affect cold chain integrity and supply chain continuity. These are not hypothetical — they are documented risk scenarios that auditors will expect to see.
Digital Traceability and Supplier Management
The revised standard introduces clearer requirements for digital traceability — recognising that one-step-forward, one-step-back traceability evidence increasingly exists in digital form and must be managed with the same rigour as paper records. Alongside this, supplier management requirements become more explicit: approval processes, ongoing performance monitoring, and defined escalation responses when suppliers fall below required standards are all expected to feature with greater specificity.
Harmonised Structure Alignment
The revised ISO 22000 will adopt the updated Harmonised Structure — aligning with ISO 9001:2026, ISO 14001:2026, and ISO 45001. For organisations running Integrated Management Systems, this significantly reduces duplication and simplifies internal audit programmes.
ISO 22000 DIS 2026 and FSSC 22000 Version 7 — Understanding the Relationship
Many food safety professionals are currently managing both the FSSC 22000 Version 7 transition (published 1 May 2026) and preparation for the ISO 22000 DIS 2026. Here is the distinction that matters:
FSSC 22000 Version 7 is built on ISO 22000:2018 plus FSSC additional requirements, and it already incorporates the new ISO 22002-x:2025 PRP series. The revised ISO 22000 (publication anticipated 2027) will eventually replace ISO 22000:2018 as the foundation of a future FSSC 22000 version.
What this means for you practically: your PRP gap analysis against ISO 22002-x:2025 serves both transitions simultaneously. The review work you complete for your FSSC V7 audit directly counts toward your ISO 22000 revision preparation. Do it once, rigorously, and it benefits both systems. This is the single most efficient use of your preparation time right now.
How to Conduct Your PRP Gap Analysis for ISO 22000 DIS 2026
This is a how-to, not a wish list. Work through these steps in sequence.
Obtain ISO 22002-100:2025 — purchase and study the new core PRP standard. This applies to your organisation regardless of sector. It is your starting baseline.
Identify your sector-specific standard — obtain the relevant ISO 22002-x:2025 document (ISO 22002-1, -2, -4, -6, or -7) and read it alongside ISO 22002-100:2025.
Map your current PRP procedures — list every existing PRP: cleaning and disinfection, pest control, personal hygiene, allergen management, maintenance, water quality, waste management, and supplier controls.
Conduct the technical gap review — for each PRP, assess operational practice first, then documentation. Note whether the gap requires a practice change, a documentation update, or both.
Review VACCP and TACCP — confirm your food fraud vulnerability assessment and food defence threat assessment are current, formally documented, risk-based, and reviewed on a defined schedule.
Add climate change to your FSMS context analysis — document specific climate-related food safety risks relevant to your operations, geography, and supply chain. Link these to your hazard analysis where relevant.
Audit your traceability system — verify that one-step-forward, one-step-back traceability is demonstrable with retrievable, time-stamped evidence — digital or paper.
Monitor ISO TC 34/SC 17 progress — follow the DIS ballot outcome for the expected FDIS publication in late 2026.
Expected Transition Timeline at a Glance
July 2025 — ISO 22002-x:2025 series published — PRP gap analysis work begins
August 2025 — ISO 22000 committee draft comment period closed
March 2026 — DIS formally registered — 12-week ballot opens
Late 2026 — FDIS expected following ballot resolution
2027 — Revised ISO 22000 published — transition window opens
2027–2030 — Three-year transition period for all certified organisations
Key Takeaways
The ISO 22000 DIS 2026 entered its formal ballot phase in March 2026, with publication of the revised standard anticipated in 2027 and a three-year transition window to 2030
Your PRP gap analysis against ISO 22002-x:2025 is the most urgent preparation task — these standards are already published and the review work benefits both ISO 22000 and FSSC 22000 Version 7 transitions simultaneously
ISO 22002-100:2025 is mandatory for every organisation regardless of sector — it sits alongside your sector-specific standard, not as a replacement for it
Food fraud (VACCP), food defence (TACCP), food safety culture, and climate change risks are expected to feature as explicit, auditable requirements — not background references — in the revised standard
Organisations that begin their PRP gap analysis now will face significantly lower disruption, reduced audit risk, and stronger FSMS performance when the transition window opens
Frequently Asked Questions
When does ISO 22000:2018 stop being valid?
ISO 22000:2018 remains the current valid standard until the revised version publishes — anticipated in 2027. Following publication, a three-year transition period will run until approximately 2030, during which certified organisations can continue operating under ISO 22000:2018 before migrating to the new version. Certification bodies will confirm specific transition deadlines once the revised standard is published.
Do I need to purchase ISO 22002-100:2025 separately, and does it replace my sector-specific standard?
Yes, ISO 22002-100:2025 must be obtained and applied separately — it does not replace your sector-specific standard. It is a core standard that applies to all food chain sectors and must be used alongside the relevant sector-specific ISO 22002-x:2025 standard for your operations. Both documents are required; neither is optional.
How is the ISO 22000 revision different from the FSSC 22000 Version 7 update?
FSSC 22000 Version 7 (published 1 May 2026) is a certification scheme update built on the current ISO 22000:2018 foundation — it already incorporates the new ISO 22002-x:2025 PRP series as its prerequisite programme basis. The revised ISO 22000 is the underlying international standard itself, anticipated in 2027. When it publishes, it will eventually become the new foundation for a future version of FSSC 22000. Your PRP gap analysis work serves preparation for both, making it the most efficient investment of your time right now.