Prerequisite programmes - your hygiene foundation
Plain-language summary
The basic hygiene and operating conditions - cleaning, pest control, maintenance, personal hygiene, allergen segregation - that keep the whole environment fit to make food.
What the clause is really asking
PRPs are the foundation HACCP stands on; without them, controlling specific hazards is impossible. This clause requires you to establish, implement and maintain prerequisite programmes suited to your operation - cleaning and sanitation, pest control, maintenance, personnel hygiene, waste handling, allergen management, and more. They control the general likelihood of contamination across the site.
What auditors look for
This is heavily walked. Auditors inspect cleaning standards, pest-control stations and reports, maintenance condition, hand-washing and changing facilities, waste segregation, and allergen-handling practices. They look for PRPs that are documented, scheduled, verified and genuinely effective on the day.
Typical evidence
PRP procedures and schedules; cleaning records and verification (e.g. swabs/ATP); pest-control contractor reports; maintenance records; personal hygiene and allergen-control records
How to comply — recommendations
Build your PRPs around recognised sector guidance — under FSSC 22000 Version 7 that means ISO 22002-100:2025 (the common baseline) plus the 2025 sector part for your category (ISO 22002-1 food manufacturing, -2 catering, -4 packaging, -5 transport and storage, -6 feed, -7 retail and wholesale) — and schedule and verify them, not just do them. The 2025 editions renumbered everything and added topics such as chemical contamination, recycled/re-used materials, visitor and contractor control, food defence and food fraud, so map each PRP procedure to the new clause numbers. Pay particular attention to allergen segregation, cleaning validation and pest control, which auditors scrutinise hard. Keep records that prove the PRP was done and worked.
Common nonconformities
Cleaning done but never verified; pest-control actions from contractor reports not closed out; allergen segregation weak; PRPs still mapped to the retired ISO/TS 22002 technical specifications instead of the ISO 22002-x:2025 editions; new 2025 topics (chemical contamination, recycling, visitor control) not addressed
Related clauses
ISO 22000 8.5 (hazard analysis), 8.6, 8.8; ISO 22002-100:2025 + ISO 22002-1/-2/-4/-5/-6/-7:2025; FSSC 22000 2.5.6, 2.5.7, 2.5.11, 2.5.12
Get the free ISO 9001:2026 Readiness Scorecard
Free, instant download. We'll only email you the occasional practical quality update — no spam, unsubscribe anytime.
Qlause provides interpretive guidance only and is not a substitute for the standard. Refer to your licensed copy of the relevant standard for the authoritative text.