ISO 22000 food safety certification consultant in Malaysia
Food safetyISO 22000:2018
Build a hazard analysis and food safety plan your auditor, your retail buyer, and your own kitchen floor can all follow.
What it is
ISO 22000:2018 is the international standard for food safety management systems, applying HACCP principles within a plan-do-check-act framework across producers, processors, and food service operators. It requires hazard analysis, critical control points, prerequisite programmes, and continual improvement, certified through a two-stage audit. In Malaysia it complements the Food Hygiene Regulations 2009 and MeSTI, the Ministry of Health's domestic food safety scheme, while halal certification through JAKIM remains a separate, complementary process addressing religious compliance rather than food safety hazards.
Who needs it in Malaysia
- Food manufacturers and processors supplying retail chains
- Retail and hypermarket buyers increasingly require ISO 22000 or FSSC 22000 as a listing condition, treating hazard control documentation as proof a supplier can be trusted with shelf space, not a nice-to-have.
- Food service and catering companies
- Central kitchens, catering operators, and institutional food service providers use ISO 22000 to formalise hazard control across multiple sites and shifts, replacing informal hygiene practice with documented critical control points.
- Exporters needing GFSI-recognised certification
- Companies exporting to markets that require Global Food Safety Initiative recognition typically pursue FSSC 22000, which is built on the ISO 22000 base plus sector-specific prerequisite programmes.
- Companies pursuing halal certification alongside food safety
- Manufacturers seeking JAKIM halal certification often implement ISO 22000 in parallel, since a documented food safety system supports the halal assurance system auditors expect without duplicating the underlying hazard controls.
Our process
Gap analysis against ISO 22000 and prerequisite programmes
We assess your facility against the standard's clauses and the prerequisite programmes covering hygiene, pest control, and premises, and hand over a dated, written action list for each gap.
Hazard analysis and critical control point determination
We run the hazard analysis your process actually requires, identify critical control points and operational prerequisite programmes, and set the monitoring limits an auditor will expect to see evidenced.
Food safety plan documentation
The food safety plan, monitoring records, and corrective action procedures are drafted around how your kitchen or line actually operates, in language your production staff use daily.
Internal audit and management review
A full rehearsal against the standard's internal audit and management review requirements, with findings closed and objective evidence filed before the certification audit is booked.
Certification audit support
We accompany you through Stage 1 document review and Stage 2 on-site assessment, including the FSSC 22000 add-on scheme audit where GFSI recognition is required by your export market.
Timeline
A single-site facility with existing hygiene practices and some documentation typically reaches certification in four to seven months from gap analysis. Facilities with multiple product lines, no prior HACCP documentation, or pursuing the FSSC 22000 add-on scheme often need eight to eleven months, since monitoring records need to accumulate real evidence across a full operating cycle.
What affects the cost
- Number of product lines and sites the certificate must cover
- Existing HACCP and prerequisite programme maturity
- Whether the FSSC 22000 add-on scheme is required for export markets
- Certification body fees, which scale with headcount and site count
- Staff hygiene and HACCP training scope across shifts
- Laboratory testing needed to verify hazard control limits
How BUKTI helps
- BUKTI keeps your critical control point monitoring records and prerequisite programme checklists current, so missing evidence is never the finding an auditor raises.
- Nonconforming product and corrective actions run through BUKTI's CAPA workflow, with root cause and closure evidence tracked automatically across sites and shifts.
- Management review inputs, from monitoring trends to customer complaints, are compiled in BUKTI so the meeting starts with organised data instead of a paper chase.
FAQ
What is the difference between ISO 22000 and HACCP?
HACCP is a hazard-control methodology built into ISO 22000. ISO 22000 wraps HACCP inside a full management system with document control, internal audit, and management review, making it certifiable and auditable rather than a standalone technical plan sitting in a drawer.
Do we still need to comply with the Food Hygiene Regulations 2009 or MeSTI?
Yes. ISO 22000 certification does not replace domestic regulatory compliance. Food Hygiene Regulations 2009 requirements and MeSTI, the Ministry of Health's food safety assurance scheme, remain separate legal or scheme obligations that a well-run ISO 22000 system supports rather than substitutes.
Is halal certification required as well?
Halal certification through JAKIM is a separate certification addressing religious compliance, not food safety hazards. Many manufacturers pursue both, since a documented food safety system makes the halal assurance system's own audit trail easier to maintain.
What is FSSC 22000 and do we need it?
FSSC 22000 combines the ISO 22000 base standard with sector-specific prerequisite programmes to meet Global Food Safety Initiative recognition. You need it primarily if your retail customer or export market specifically requires GFSI-recognised certification rather than ISO 22000 alone.
How much does ISO 22000 certification cost in Malaysia?
Cost depends on the number of product lines and sites, existing HACCP maturity, and whether the FSSC 22000 add-on is required. Certification body fees are quoted separately from consulting fees; we give a written, fixed-scope quote after reviewing your facility.
How long does ISO 22000 implementation take?
Four to seven months is typical for a single-site facility with existing hygiene practices. Multiple product lines, no prior HACCP documentation, or pursuing FSSC 22000 usually extend the timeline to eight to eleven months, since monitoring evidence must accumulate across a full operating cycle.
Related standards
- FSSC 22000: GFSI-recognised food safety
- ISO 9001: Quality management
- GMP+: Feed safety assurance
Where we work
Perlis, Kedah, Penang, Perak, Selangor, Kuala Lumpur, Putrajaya, Negeri Sembilan, Melaka, Johor, Pahang, Terengganu, Kelantan, Sabah, Sarawak, Labuan. ISO consultants in every Malaysian state.
Ask about this standard
Retail buyer asking for ISO 22000 or FSSC 22000?
Tell us your product lines and current hygiene documentation. We will scope a realistic path to certification.