Two standards for safe, secure supply chains
Food businesses must prove their products are safe at every step from farm to fork. Logistics, manufacturing and trading companies must show their supply chains are secure against theft, tampering, smuggling and disruption. Two ISO management system standards address these needs:
- ISO 22000 sets requirements for a Food Safety Management System (FSMS), combining HACCP principles, prerequisite programmes and management system discipline.
- ISO 28000 sets requirements for a security management system, widely used to secure supply chains. Its 2022 edition broadened the scope to security management in general and aligned it with the harmonised structure used by other ISO standards.
The four courses compared
| Course | Standard | Purpose | Best for |
|---|---|---|---|
| ISO 22000 Lead Implementer | ISO 22000 | Plan, implement, monitor and improve an FSMS | Food safety and quality managers, HACCP team leaders, consultants |
| ISO 22000 Lead Auditor | ISO 22000 | Plan, conduct and close FSMS audits and lead audit teams | Food safety auditors, supplier auditors, certification auditors |
| ISO 28000 Lead Implementer | ISO 28000 | Plan, implement and improve a supply chain security management system | Security, logistics and supply chain managers |
| ISO 28000 Lead Auditor | ISO 28000 | Audit supply chain security management systems | Security auditors, supplier assurance and compliance teams |
All four courses end with a 50-question multiple-choice exam of 90 minutes, taken online, with a 66% pass mark. None has a formal prerequisite.
Who needs ISO 22000?
- Food manufacturers, processors and packagers
- Restaurants, catering and hospitality chains
- Food logistics, cold-chain and storage providers
- Ingredient, packaging and equipment suppliers
- Exporters whose international buyers require certified food safety
Many buyers ask for GFSI-recognised schemes such as FSSC 22000, which is built on ISO 22000. Learning ISO 22000 is the foundation for both.
Who needs ISO 28000?
- Freight forwarders, shipping, ports and warehousing companies
- Manufacturers with complex or high-value supply chains
- Pharmaceutical, electronics and defence suppliers
- Organisations aligning with customs security programmes such as Authorised Economic Operator (AEO) schemes
Lead Implementer or Lead Auditor?
Choose Lead Implementer if you will build or run the management system in your organisation. Choose Lead Auditor if you will audit your own organisation, suppliers or clients. Consultants often take both.
Related courses
ISO 22000 and ISO 28000 share the harmonised structure with ISO 9001 and ISO 14001, so many organisations run them as one integrated management system. Supply chain security also overlaps with information security; see the ISO 27001 family.
Frequently asked questions
What is the difference between ISO 22000 and HACCP?
HACCP is a method for identifying and controlling food safety hazards. ISO 22000 builds HACCP into a full management system with leadership, prerequisite programmes, communication and continual improvement.
What is the difference between ISO 22000 and FSSC 22000?
FSSC 22000 is a certification scheme that uses ISO 22000 plus sector-specific prerequisite programmes and additional requirements. It is GFSI-recognised, so many large buyers prefer it.
What does ISO 28000 cover?
ISO 28000 sets requirements for a security management system, including the supply chain. It helps organisations assess security risks and put controls in place to prevent theft, tampering, disruption and other threats.
Are there prerequisites for these courses?
No formal prerequisites. Some knowledge of food safety or supply chain operations is helpful.
What is the exam format?
Each course ends with 50 multiple-choice questions in 90 minutes, taken online, with a 66% pass mark.
Is training available online?
Yes. WiseLearner runs live, instructor-led online batches for all four courses, plus corporate batches.
Secure your supply chain
Choose the course that fits your role, or call +91 99084 55513 for advice and the next batch dates.
