Prerequisite programs (PRPs) are the basic hygienic conditions and operating practices — sanitation, pest control, personnel hygiene, facility design — that create the safe operating environment a food safety system depends on. FSSC 22000 requires sector-specific PRPs defined by technical standards like ISO 22002-1:2025 for food manufacturing, rather than the generic PRP requirement found in ISO 22000 alone.
Prerequisite programs sound like a formality — the basic hygiene housekeeping every food operation is expected to have. Under FSSC 22000, they're anything but generic. The scheme requires organizations to implement sector-specific technical standards that define, in real detail, what those basic conditions need to look like for a given type of operation. This article explains what prerequisite programs are, why FSSC 22000 requires sector-specific versions, and what changed in the newly published ISO 22002-1:2025 — drawing on the audit experience of Maria Falbo, a Lead Auditor with decades of food safety experience.
Prerequisite programs are the basic hygienic conditions and operating practices necessary to maintain a safe environment throughout the food chain — the foundational layer a food safety system depends on before HACCP-based hazard controls can be meaningfully applied. They cover areas like facility design and layout, cleaning and sanitation, pest control, personnel hygiene, utilities, waste management, and equipment maintenance.
PRPs matter more than their name suggests. Sanitation and hygiene failures remain one of the most significant contributors to foodborne illness — contamination spread through hands and surfaces accounts for the majority of investigated outbreaks in public health data — which is why prerequisite programs sit at the base of every credible food safety management system, not as a checklist formality but as the actual operating conditions that make everything built on top of them meaningful.
ISO 22000 requires organizations to establish PRPs, but leaves the specific content fairly general. FSSC 22000 replaces that generality with detailed, sector-specific technical standards that define concretely what PRPs need to include for a given type of operation. For a complete overview of what FSSC 22000 is and how PRPs fit into the scheme's structure, see our FSSC 22000: The Complete Guide.
A generic instruction to "maintain hygienic conditions" means something very different for a food manufacturing plant than it does for a catering operation or a packaging manufacturer. Facility design considerations, cross-contamination risks, and pest control challenges differ substantially depending on what an organization actually does — which is why FSSC 22000 requires organizations to implement the technical PRP standard specific to their sector, rather than a single generic requirement applied uniformly.
This sector-specific approach is one of the concrete ways FSSC 22000 goes beyond ISO 22000 alone, and it's part of why FSSC 22000 achieved GFSI recognition where ISO 22000's more generic requirements never did. For a broader introduction to FSSC 22000 and how sector-specific PRPs fit alongside the scheme's other components, see our What Is FSSC 22000?
The ISO 22002 series underwent a substantial restructuring in 2025, moving from a set of independently developed technical specifications to a coordinated, two-layer international standard architecture.
Layer 1 — ISO 22002-100:2025 is the new foundational standard, consolidating the common PRP requirements that apply across the entire food, feed, and packaging supply chain regardless of sector. It's used in conjunction with ISO 22000 and provides the shared baseline every sector-specific standard builds on top of.
Layer 2 — sector-specific standards address what's genuinely unique to each part of the food chain. For food manufacturing, that's ISO 22002-1:2025. Other parts of the series cover catering (ISO 22002-2), packaging manufacturing (ISO 22002-4), transport and storage, feed production, and — newly added in this revision — retail and wholesale operations under ISO 22002-7.
This two-layer structure is itself a significant change from the previous series, which developed each sector-specific document independently. That independence had real drawbacks: common requirements like pest control were duplicated across multiple documents with inconsistent terminology, and the standards had grown out of alignment with more recent developments in food safety practice, including the 2023 revision of the Codex Alimentarius HACCP guidelines. For a full explanation of how HACCP principles are formalized within a food safety management system, see our guide to ISO 22000 and HACCP.
Organizations transitioning to the new structure sometimes assume they can simply relabel their existing 2009-era PRP documentation without genuinely restructuring it. That doesn't work cleanly. The old ISO/TS 22002-1:2009 document contained everything — common hygiene requirements and manufacturing-specific content — in a single document. Under the new structure, that content needs to be genuinely split: what's common now belongs in documentation aligned with ISO 22002-100, and what's manufacturing-specific stays aligned with ISO 22002-1:2025. An organization that just updates the cover page and version number on its old PRP manual, without actually reorganizing the content to reflect the changes, will find that structure doesn't hold up under audit scrutiny.
Our ISO 22002-1 PRP Manufacturing course covers the 2025 standard clause by clause, including exactly what changed from the 2009 version.
The shift from ISO/TS 22002-1:2009 to ISO 22002-1:2025 involves more than a routine version update, and it's worth understanding the substance of what changed rather than treating it as a formality.
Status elevation. The most immediately visible change is the removal of the "TS" designation — Technical Specification — from the standard's name. ISO/TS 22002-1:2009 was a Technical Specification, a lower formal status within ISO's document hierarchy than a full International Standard. ISO 22002-1:2025 has been elevated to full International Standard status, reflecting the technical maturity and industry consensus the standard has reached since 2009. This isn't purely symbolic — it reflects a more rigorous development and review process behind the current requirements.
Structural separation. As covered above, common requirements previously embedded throughout the 2009 document have been extracted into the new ISO 22002-100:2025 foundation standard, leaving ISO 22002-1:2025 focused specifically on manufacturing-unique content.
Modernized scope. The 2025 revision addresses gaps the 2009 version didn't cover — areas like food fraud prevention considerations, food defense, sustainability, and digital traceability received little to no attention in the original 2009 technical specification, reflecting how much food safety practice has evolved in the years since. The revision also brings the standard into closer alignment with the 2023 update to the Codex Alimentarius HACCP guidelines.
Content areas retained and refined. Core PRP subject matter — construction and layout of buildings and premises, utilities, waste management, equipment suitability and maintenance, cross-contamination prevention, cleaning and sanitizing — remains the technical core of ISO 22002-1:2025, but with updated, more detailed requirements reflecting current industry practice rather than 2009-era expectations.
Determining which sector-specific PRP standard applies depends on where your organization sits in the food chain, and organizations operating across multiple sectors — a manufacturer that also handles packaging on site, for example — may need to apply more than one sector-specific standard alongside the common ISO 22002-100 foundation.
Food manufacturers — organizations transforming raw materials into finished food products — apply ISO 22002-1:2025. Our ISO 22002-1 PRP Manufacturing course covers this standard in full, clause by clause.
Packaging manufacturers producing food-contact packaging materials apply ISO 22002-4. Our ISO 22002-4 PRP Packaging course covers the packaging-specific requirements.
Catering operations apply ISO 22002-2, covered by our ISO 22002-2 PRP Catering course.
For organizations pursuing full FSSC 22000 certification and needing both scheme understanding and sector-specific PRP training together, our FSSC 22000 + ISO 22002 bundle courses combine both in one package.
For a full explanation of what changed in FSSC 22000's broader Version 7 revision — which incorporates this new ISO 22002-x:2025 series — see our article on FSSC 22000 Version 7: What Changed and How to Transition.
ISO 22002-1:2025 has replaced ISO/TS 22002-1:2009 as the current standard. Organizations certified under FSSC 22000 need to transition their PRP documentation to the new standard as part of their broader Version 7 transition timeline.
Yes — the two work together. ISO 22002-100:2025 establishes the common PRP requirements applicable across the food, feed, and packaging supply chain, while the sector-specific standard (such as ISO 22002-1:2025 for manufacturing) addresses what's unique to your specific type of operation. Neither standard is complete on its own for FSSC 22000 purposes.
A prerequisite program (PRP) establishes general hygienic conditions not targeted at any single hazard — cleaning, pest control, personnel hygiene. An operational prerequisite program (OPRP) is identified through hazard analysis as essential to control a specific significant hazard. PRPs are addressed by the ISO 22002 series discussed here; OPRPs are determined through the hazard analysis process defined in ISO 22000 itself.
No — ISO 22002-1:2025 is specific to food manufacturing operations and does not apply to other parts of the food supply chain. Organizations in other sectors need the corresponding sector-specific standard, such as ISO 22002-2 for catering or ISO 22002-4 for packaging manufacturing.
Yes, meaningfully. While all sector-specific standards share the common foundation in ISO 22002-100:2025, the sector-specific content addresses genuinely different risks — a catering operation's hygiene challenges differ substantially from a packaging manufacturer's cross-contamination risks, which is exactly why FSSC 22000 requires sector-specific standards rather than one generic PRP requirement for everyone.
Maria Falbo has over 25 years of experience working as a Lead Auditor for certification bodies worldwide. She founded Logix ISO with the mission of making expert-level ISO training accessible to organizations of all sizes. Her work spans Quality, Environmental, Occupational Health and Safety, Food Safety, Automotive, and Energy management systems.
Learn more about Maria →Self-paced · 365-day access · Training certificate included