ISO 22002-100:2025 Prerequisite Programs (PRP) Standard: Engineering Breakdown of All 18 Core Clauses Across Food, Feed, and Packaging

The ISO 22002-100:2025 food safety prerequisite programs PRP standard has fundamentally rebuilt the engineering architecture of sanitary, infrastructural, and operational controls across the global food supply chain. When technical subcommittee ISO/TC 34/SC 17 published ISO 22002-100:2025 (Prerequisite programmes on food safety, Part 100: Requirements for the food, feed and packaging supply chain) in July 2025, it ended a fifteen-year era of fragmented ISO/TS 22002 technical specifications. Instead of keeping separate sector documents that duplicated 75% of the same baseline text in slightly different words, food industry processors, packaging converters, compound feed mills, and cold-chain operators now build their systems on one shared normative core.

In practice, our team at Ekontrol still sees a dangerous misconception during factory walk-throughs. Quality departments often treat Prerequisite Programs (PRPs) as background housekeeping paperwork drafted once every five years just to tick off Clause 8.2 of ISO 22000. They assume the real food safety work happens inside the HACCP plan around Critical Control Points (CCPs), while drainage, air filtration, pest control, and cleaning somehow take care of themselves. That's a fatal engineering error. If roof condensate drips onto an open slicing line, your screw compressor pushes oil mist into culinary air lines, or a floor gully acts as an incubator for Listeria monocytogenes, no metal detector or pasteurizer at a CCP will save the batch from post-process recontamination.

The Engineering Boundary Between PRPs, OPRPs, and CCPs in Modern Food Safety Systems

To execute an effective ISO 22002-100:2025 implementation in manufacturing, your chief engineer and food safety team leader must draw a clear technical line between the three control tiers defined by Codex Alimentarius and Clause 8 of ISO 22000:2018:

• Prerequisite Programs (PRPs under ISO 22000 Clause 8.2 and ISO 22002-100:2025): These are the foundational site, utility, equipment, and hygiene conditions that maintain a safe operating environment across the entire plant. They aren't tied to one single processing step in a flow diagram; they operate horizontally across the facility. Examples include building envelope sealing, potable water loops without dead legs, positive air pressure cascades $\Delta P$, stainless steel surface roughness $R_a \le 0.8,\mu\text{m}$, validated CIP cleaning, integrated pest management, personnel hygiene airlocks, and food fraud mitigation.
• Operational Prerequisite Programs (OPRPs under ISO 22000 Clauses 8.5.2 and 8.5.4): These are specific control measures identified by your hazard analysis as essential to keep a significant hazard within acceptable levels, governed by an observable Action Criterion rather than an absolute physical critical limit. Typical OPRPs include shift verification of sifter mesh integrity before flour bagging, inline neodymium magnetic traps ($10,000\text{ to }12,000,\text{Gauss}$), or optical color sorters removing ergot sclerotia and foreign seeds.
• Critical Control Points (CCPs under ISO 22000 Clause 8.5.4): These are dedicated process steps where a measurable Critical Limit separates a safe batch from a potentially unsafe one in real time. Classic CCPs include HTST milk pasteurization at $+72,^\circ\text{C}$ for $15,\text{s}$ with an automatic flow-diversion valve, or X-ray inspection rejecting any package containing stainless steel AISI 316 spheres $\ge 1.5,\text{mm}$.

When a plant's PRP foundation is weak or written in vague phrases like "clean equipment as needed," the HACCP team usually tries to compensate by inventing twenty artificial OPRPs and CCPs. Operators drown in paper logs, and real physical or microbiological hazards slip straight through the cracks.

Why ISO Withdrew the Legacy ISO/TS 22002 Specifications and Introduced the Two-Tier Equation

The legacy series grew piecemeal between 2009 and 2019 as intermediate Technical Specifications (ISO/TS). First came ISO/TS 22002-1:2009 for food manufacturing (derived from BSI PAS 220:2008), followed over the next decade by separate specs for catering (ISO/TS 22002-2:2013), primary agriculture (ISO/TS 22002-3:2011), food packaging (ISO/TS 22002-4:2013), transport and storage (ISO/TS 22002-5:2019), and animal feed (ISO/TS 22002-6:2016).

For vertically integrated agricultural holdings and multi-category manufacturers, that fragmented structure created massive compliance friction. Last year, during a comprehensive PRP diagnostic audit at an enterprise operating a feed mill, a poultry slaughterhouse, a cooked meat slicing plant, a thermoforming barrier-tray line, and an in-house refrigerated fleet, we found four separate sets of PRP manuals. Each set numbered water quality, pest control, glass control, and supplier approval differently, and their sanitation rules openly contradicted each other. Lead auditors under the FSSC 22000 scheme spent a third of every surveillance audit just reconciling cross-references.

The July 2025 overhaul solved this permanently. The TS prefix is gone, and every part of the series now holds full International Standard status aligned with GFSI benchmarking requirements. Compliance now follows a strict two-tier modular equation:

$$\text{Complete PRP System (2025)} = \text{ISO 22002-100:2025 (Umbrella Core)} + \sum_{i} \text{ISO 22002-}i\text{:2025 (Sector Module)}$$

No sector standard in the 2025 release (ISO 22002-1:2025 for food manufacturing, ISO 22002-2:2025 for catering, ISO 22002-4:2025 for packaging, ISO 22002-5:2025 for logistics, ISO 22002-6:2025 for feed, or the brand-new ISO 22002-7:2025 for retail and wholesale) can stand alone. Each sector part is now a concise technical overlay that adopts ISO 22002-100:2025 in full and adds only the engineering controls unique to that industry.

When quality managers open the 18 core PRP clauses for the food supply chain inside ISO 22002-100:2025, they immediately notice that the clause numbering and operational flow have shifted compared to legacy ISO/TS 22002-1:2009. Previously, pest control was buried down at Clause 12 after sanitation, while waste disposal sat between utilities and equipment. Now, the standard follows the physical path of hazard exclusion from outside in: starting at site boundaries and building envelopes, moving into utilities, pest exclusion, waste/FLW, and equipment design, and then governing material intake, warehousing, cross-contamination barriers, sanitation, personnel hygiene, product labeling, food defense/fraud, and rework.

Key Normative Shifts in Clauses 1 to 3 and Why Product Recall Moved to ISO 22000

The opening three clauses (Clause 1: Scope, Clause 2: Normative references, Clause 3: Terms and definitions) establish a unified technical vocabulary across food, feed, and packaging operations. Three structural changes in Clause 3 and the overall layout deserve special attention before you touch your procedures:

1. Strict Separation Between Cleaning and Disinfection. ISO 22002-100:2025 explicitly distinguishes cleaning (the physical and chemical removal of soil, food residues, dirt, grease, and allergen proteins) from disinfection (the reduction of viable microorganisms on a pre-cleaned surface to an acceptable level). Applying chemical disinfectants or hot water over unremoved organic biofilm is now a direct normative violation.
2. Codification of Food Loss and Waste (FLW) and Recycling. The umbrella standard natively integrates definitions and controls for minimizing food loss and waste, managing secondary co-products, and safely handling recycled materials, bringing ISO's base text directly in line with FSSC 22000 Version 6 and Version 7 requirements.
3. Reallocation of Product Recall Procedures to the FSMS Level. In ISO/TS 22002-1:2009, Clause 15 covered Product Recall Procedures. The 2025 architecture removes recall from shop-floor hygiene PRPs because emergency preparedness, crisis communication, and mock recalls are top-level management system functions governed under Clauses 8.4 and 8.9 of ISO 22000. Meanwhile, physical lot identification, non-conforming product quarantine holds, and rework traceability stay anchored in the PRP layer.

Below is the complete engineering migration table across all 18 structural blocks that Ekontrol lead auditors use during kickoff gap assessments.

When a lead auditor steps onto your premises, their evaluation of engineering requirements for infrastructure, air, water, steam, and hygienic zoning starts at the outer fence line, well before they enter the production hall. Clauses 4 (Construction and layout of buildings) and 5 (Design and layout of facilities and workspaces) of ISO 22002-100:2025 treat your site perimeter, building shell, and internal room geometry as the primary physical shield against biological, chemical, and physical contamination.

Clause 4: Site Boundaries, Environmental Climate Risks, and Building Envelope Integrity

Clauses 4.1 through 4.3 of ISO 22002-100:2025 place much stronger emphasis on external environmental vectors and climate resilience. You're required to formally define your site boundaries, secure perimeter access, and evaluate contamination risks from neighboring activities: crop fields sprayed with pesticides, livestock farms, wastewater treatment plants, unpaved roads, or municipal waste sites. If an external dust or odor source sits upwind of your facility, your engineering team must justify the orientation and height of your HVAC fresh-air intakes and increase pre-filter replacement frequencies accordingly.

Auditors also scrutinize roofs, external walls, and stormwater drainage under heavy rainfall scenarios. On older manufacturing sites, flat roofs with aging bitumen or PVC membranes frequently act as hidden reservoirs for microbial contamination: pooling rainwater attracts wild birds (Salmonella, Campylobacter), and a hairline seam leak brings contaminated water onto suspended ceilings directly above packaging lines. The standard requires documented seasonal roof inspections, fire-rated elastomeric sealing of all cable and pipe penetrations (maintaining gaps $\le 3,\text{mm}$ to block rodents and crawling insects), and paved internal roadways free of standing puddles or exposed soil.

Clause 5: Unidirectional Traffic Flows, Hygienic Zoning, and Floor & Drainage Engineering

Inside the building shell, Clause 5 of ISO 22002-100:2025 (working alongside sector parts such as ISO 22002-1:2025 for food processors) mandates physical and aerodynamic segregation of workspaces based on microbiological risk:

• Basic Hygiene / Non-Product Zone: Raw material receiving docks, boiler houses, compressor rooms, maintenance workshops, and outer corrugated cardboard or wooden pallet storage.
• Medium-Care / Low-Risk Zone: Raw material preparation, root vegetable washing, dough mixing, raw meat processing prior to thermal treatment, or fully enclosed piping operations.
• High-Care / High-Risk Zone: Post-lethality cooling, slicing, grating, enrobing, dosing, and open primary packaging of Ready-to-Eat (RTE) products after pasteurization, baking, or cooking, where no further microbial kill step exists.

On far too many factory floors, hygienic zoning is just a yellow line painted on the concrete. Frankly, bacteria and allergen dust don't respect floor paint. True engineering zoning under Clause 5 requires full-height insulated walls sealed to the structural deck, dedicated sanitary airlocks with captive footwear and color-coded workwear changes before entering High-Care rooms, zero cross-intersections between raw materials, finished goods, clean packaging, and waste flows, and pass-through ovens or pasteurizing tunnels acting as the sole bridge between raw and cooked areas.

Pay close attention to how Clause 5.2 regulates floors, walls, ceilings, and industrial floor drainage:

1. Monolithic Flooring and Coved Wall Junctions. In wet processing halls (dairies, meat plants, beverage lines, breweries, sauces), standard ceramic tiles with cement grout degrade rapidly under lactic and acetic acids, $+80,^\circ\text{C}$ washdown water, and heavy pallet-jack traffic. Cracked grout lines harbor persistent Listeria monocytogenes biofilms underneath hollow tiles. Best engineering practice under ISO 22002-100:2025 uses seamless $6\text{ to }9,\text{mm}$ heavy-duty polyurethane-cement screed with coved wall-to-floor junctions (radius $R \ge 30,\text{mm}$) so corners can't trap organic soil.
2. Floor Slopes and Effluent Flow Direction. Floors in wet zones must be laid to a uniform $1\text{ to }2%$ gradient ($10\text{ to }20,\text{mm}$ drop per linear meter) pitching toward AISI 304 or AISI 316 stainless steel point gullies or slot channels. Sub-floor drainage lines must never flow from a raw or Medium-Care zone into or through a High-Care RTE room. Every drain gully requires a removable perforated sediment basket and a cleanable water trap (siphon) that stays primed at all times to block sewer gases, drain flies (Psychodidae), and contaminated aerosols.
3. Equipment Placement and Service Clearance (Clause 5.3). Every processing tank, mixer, and conveyor must be positioned with at least $60\text{ to }80,\text{cm}$ of clear inspection and cleaning access around its perimeter and elevated $20\text{ to }30,\text{cm}$ off the floor on hygienic tubular legs with sealed baseplates.

Clause 6 (Utilities) of ISO 22002-100:2025 is where engineering precision makes or breaks an audit. Potable water, ice, culinary steam, ventilation air, compressed air, modified atmosphere packaging (MAP) gases ($\text{N}_2$, $\text{CO}_2$, $\text{O}_2$), and lighting aren't passive building services. They're direct process inputs or food-contact media. If you don't control their physical, chemical, and microbiological parameters, your utility lines actively pump contamination into every batch.

Clause 6.2: Potable Water Distribution, Ice Generators, and Culinary Steam

All water used as an ingredient, in contact with products or food-contact surfaces, fed into ice machines, or used for final CIP rinsing must meet potable water regulations (such as EU Directive 2020/2184 and national drinking water standards). However, ISO 22002-100:2025 looks far beyond an annual municipal water test report:

• Elimination of Piping Dead Legs. Across factory water distribution loops, any capped pipe stub or rarely opened branch line longer than 1.5 times the pipe diameter ($L/D > 1.5$) becomes a stagnant zone. Water warms up to $+25\text{ to }+35,^\circ\text{C}$, free residual chlorine dissipates, and Pseudomonas and Legionella build thick biofilms that slough off into the main line during pressure surges. Maintenance teams must cut out abandoned branches flush with the header and maintain continuous recirculation loops.
• Backflow Prevention Assemblies. Every hose bibb, chemical dilution station, boiler feed line, and CIP make-up tank connection must be fitted with verifiable backflow preventers or reduced-pressure zone (RPZ / Type BA per EN 1717) assemblies so washdown water or CIP caustic can never siphon back into the potable water main.
• Culinary Steam Engineering. Whenever live steam is injected directly into a product (UHT milk steam injection, vegetable blanching, bakery oven steaming, or animal feed conditioning in a pellet mill under ISO 22002-6:2025) or sterilizes aseptic filling nozzles, black-iron plant steam is strictly unacceptable. Culinary steam must be generated from potable feedwater treated only with food-grade boiler additives (excluding toxic volatile amines like morpholine or cyclohexylamine where prohibited, or strictly controlling them within FDA 21 CFR 173.310 limits), passed through a centrifugal entrainment separator, and filtered through a sintered AISI 316L stainless steel filter element rated at $1\text{ to }5,\mu\text{m}$ (removing $95%$ of particles $\ge 2,\mu\text{m}$) right before the point of injection.

Clause 6.3: HVAC Air Handling, Positive Pressure Cascades, and Dew-Point Control

Airborne mold spores (Aspergillus, Penicillium), yeasts, and bacteria ride on pressure currents. Under Clause 6.3 of ISO 22002-100:2025, your HVAC system must be balanced so air always flows outward from your cleanest rooms (High-Care / High-Risk) toward lower-hygiene rooms and raw areas. Engineers achieve this by maintaining a continuous positive static pressure differential:

$$\Delta P = P_{\text{high-care}} - P_{\text{adjacent zone}} \ge 5\text{ to }15,\text{Pa}$$

Differential pressure gauges (such as Magnehelic dials) or digital $\Delta P$ transmitters linked to your SCADA system must be mounted across every High-Care airlock wall so supervisors can verify positive pressure at a glance. Supply air filtration follows a multi-stage cascade per ISO 16890 and EN 1822: coarse pre-filtration (G4 / ISO Coarse), secondary fine filtration (F7 to F9 / ePM1), and terminal HEPA H13 or H14 filtration (capturing $\ge 99.95%$ of $0.3,\mu\text{m}$ MPPS particles) delivering $15\text{ to }30$ air changes per hour ($\text{ACH}$) in High-Care rooms. Equally important, cooling coils must be insulated and dehumidification sized to keep relative humidity below the dew point ($\text{RH} \le 60\text{ to }65%$), eliminating ceiling and duct condensation.

Clauses 6.4 and 6.5: Compressed Air per ISO 8573-1:2010, Food Gases, and Lighting in Lux

Compressed air drives pneumatic valves, blows out PET preforms, agitates tanks, pulses baghouse filters, and conveys powders. What many plant engineers overlook is that a standard oil-flooded screw compressor sucks in warm ambient air loaded with dust, moisture, and fungal spores, mixes it with hydrocarbon oil aerosols, and pushes that mixture down carbon-steel pipes into the packaging hall.

ISO 22002-100:2025 requires you to classify and test compressed air according to ISO 8573-1:2010 across three purity axes (Solid Particles : Humidity/Pressure Dew Point : Total Oil). For compressed air that contacts food, feed, or primary packaging directly, the industry benchmark is Class 1:2:1 or 2:2:1: a pressure dew point of $\le -40,^\circ\text{C}$ (achieved with a desiccant dryer to prevent microbial growth inside air receivers), total oil content (liquid, aerosol, and vapor) $\le 0.01,\text{mg/m}^3$, and point-of-use sterile hydrophobic PTFE membrane filtration at $0.2,\mu\text{m}$.

For lighting (Clause 6.5), two engineering rules apply: verified illuminance in lux measured at working height ($\ge 500\text{ to }750,\text{lux}$ at inspection tables, sorting belts, and QC laboratories; $\ge 300\text{ to }400,\text{lux}$ in general processing rooms; $\ge 150\text{ to }200,\text{lux}$ in warehouses), and $100%$ shatterproof containment (IP65/IP66 polycarbonate LED enclosures or FEP-coated tubes registered on the site glass and brittle plastic log).

The engineering table below summarizes the target specifications and verification frequencies for Clause 5 and Clause 6 utilities.

Clauses 7, 8, and 9 of ISO 22002-100:2025 address three operational realities where plant management frequently over-relies on outside contractors or informal maintenance habits. Under the 2025 standard, outsourcing pest control or waste hauling never outsources your accountability during an audit.

Clause 7: Proactive Integrated Pest Management (IPM) Over Passive Contractor Binders

Walk into twenty factories and you'll often see the exact same pest control binder: a service contract with a local exterminator and monthly visit slips stating "no pests observed." Yet when an FSSC 22000 auditor unlocks a bait box near the receiving dock, they find moldy grain bait from two years ago, while an electrocuting bug zapper hangs right above an open conveyor, blasting insect fragments across a three-meter radius.

Clause 7 (Pest control, Clauses 7.1 to 7.6) moves pest control up to the core infrastructure block and mandates a three-line Integrated Pest Management (IPM) defense system:

1. First Line of Defense (External Site Perimeter): Tamper-resistant, locked bait stations anchored to the ground every $15\text{ to }25,\text{m}$ along the perimeter fence, loaded with wax-block rodenticides secured on metal rods (never loose grain or pellets that rodents can carry inside), supported by a clean $50,\text{cm}$ vegetation-free gravel strip around building foundations.
2. Second Line of Defense (Building Envelope Proofing): Mechanical live-catch traps positioned on both sides of all exterior doors and loading docks, intact rubber dock-leveler seals and brush strips closing gaps to $\le 3,\text{mm}$, high-velocity air curtains ($\ge 8,\text{m/s}$ downward air jet at doorway threshold), and removable stainless-steel mesh screens on any openable windows or louvers.
3. Third Line of Defense (Internal Production and Storage Zones): An absolute ban on toxic chemical rodenticides inside production and open storage halls to prevent bait contamination of ingredients; reliance on mechanical traps or nontoxic monitoring boards, paired with glue-board UV-A/UV-LED insect light traps fitted with shatterproof FEP-sleeved bulbs mounted at least $3,\text{m}$ away from exposed food and angled away from exterior doorways so UV light doesn't lure night-flying insects inside.

Crucially, Clause 7.5 requires quantitative Trend Analysis. Your quality manager and pest contractor must plot monthly and seasonal catch counts per detector, define numeric Action Thresholds, and trigger a formal Root Cause Analysis whenever insect or rodent activity spikes in a specific zone.

Clause 8: Waste Management, Secondary Co-Products, and Food Loss & Waste (FLW)

Clause 8 (Waste management, secondary materials and recycling) merges traditional floor waste hygiene with modern sustainability controls for Food Loss and Waste (FLW). Inside processing rooms, food waste and trimmings must never accumulate past a single shift. Waste bins must be water-tight, foot-pedal operated, lidded, and strictly color-coded (for instance, red or black containers) so an operator can never mistake a waste bin for an ingredient or rework tote.

Where organic waste is held prior to off-site collection for more than 24 hours in warm weather, facilities need dedicated chilled waste rooms ($+4\text{ to }+6,^\circ\text{C}$) or sealed, negative-pressure compactors to stop fermentation, odors, and fly breeding. Clause 8 also tightens control over obsolete or defective printed packaging bearing brand logos, barcodes, and nutritional claims: scrap film reels, printed cartons, and labels must undergo witnessed mechanical shredding or destruction so counterfeit operators can't divert genuine branded packaging into illicit food fraud channels.

Clause 9: Hygienic Equipment Design, NSF H1 Lubricants, and Post-Maintenance Hygiene Clearance

Clause 9 (Equipment suitability and maintenance) sets strict engineering baselines for mechanical engineering teams. All food-contact and packaging-contact surfaces must be constructed of smooth, non-absorbent, corrosion-resistant materials, primarily austenitic stainless steel AISI 304 or molybdenum-alloyed AISI 316L (for acidic brines, sauces, and hot CIP chemicals), finished to a surface roughness of $R_a \le 0.8,\mu\text{m}$. Welds must be continuous, sanitary TIG welds ground flush without pits, crevices, dead spaces, exposed screw threads in the product zone, or glass sight-glasses.

Two operational rules in Clause 9 eliminate the most common maintenance-driven audit nonconformities:

• Segregated Storage and Use of NSF H1 Food-Grade Lubricants. Every gearbox, bearing, chain, and pneumatic cylinder located above or adjacent to product zones must use lubricants registered as NSF H1 (authorized for incidental food contact up to $10,\text{mg/kg}$). Your maintenance store must physically lock NSF H1 oils and greases in a separate cabinet away from H2/H3 workshop lubricants, and grease guns must carry matching color tags.
• Mandatory Post-Maintenance Hygiene Clearance. Maintenance technicians may never bring loose cardboard boxes of bolts, wire clippings, or electrical tape onto a running line. Before and after every breakdown or preventive maintenance job, technicians must perform a 100% tool and fastener reconciliation count on a work-order form. The line returns to production only after targeted cleaning, disinfection, visual inspection, and a signed release from QA or the shift supervisor.

Clauses 10, 11, 12, and 13 of ISO 22002-100:2025 govern day-to-day material flow and shop-floor sanitation. This four-clause block is where auditors test whether your preventive controls actually stop microbiological outbreaks, undeclared allergens, and foreign body recalls.

Clauses 10 and 11: Supplier & Contractor Controls, 3D Warehouse Thermal Mapping, and Transport

Under Clause 10 (Management of purchased materials), supplier approval is no longer a commercial formality left to the purchasing department. Your criteria for qualifying, auditing, and monitoring suppliers of raw materials, primary packaging, processing aids, CIP chemicals, and external services (3PL cold stores, haulage fleets, pest control contractors, workwear laundries, calibration services, and testing laboratories) feed directly into your HACCP hazard assessment. Emergency purchasing from an unapproved vendor requires a documented deviation workflow: mandatory quarantine hold upon arrival and expanded lot testing at an accredited ISO/IEC 17025 laboratory before release.

Clause 11 (Storage, including warehousing, and transport) establishes uniform warehousing and transport rules (which connect seamlessly with ISO 22002-5:2025 for dedicated logistics sites):

• Stacking Geometry and FEFO/FIFO Rotation. Goods must sit on intact pallets (switching to hygienic H1 plastic pallets inside production and High-Care zones) with a clear $45\text{ to }50,\text{cm}$ inspection and cleaning perimeter between pallet racks and walls. Inventory rotation is enforced via WMS/ERP barcode rules under First Expired, First Out (FEFO).
• Instrumental 3D Thermal Mapping of Cold and Ambient Warehouses. Mounting a single wall thermometer near the doorway of a $1,000,\text{m}^2$, $10,\text{m}$-high cold store won't pass an audit under ISO 22002-100:2025. You must perform seasonal (summer peak and winter low) 3D temperature mapping using a grid of calibrated data loggers to identify hot spots (near loading doors and roof decks) and cold spots (directly in front of evaporator fans). Permanent SCADA temperature probes with automated SMS/email alarms are then anchored at those worst-case points.
• Transport Hygiene and Prior Cargo Verification. Every trailer, reefer, or bulk tanker undergoes a documented pre-loading check covering floor/wall integrity, absence of odors or moisture, valid cleaning certificates, pre-cooling verification via EN 12830 digital temperature recorders, and, for bulk liquid tankers or grain hoppers, documented verification of at least the three previous cargoes.

Clause 12: Cross-Contamination Prevention, Allergen Matrices, and Foreign Body Controls

Clause 12 (Measures for prevention of contamination) requires engineered barriers across four distinct contamination pathways:

1. Microbiological Cross-Contamination: Strict physical separation between raw and cooked/RTE products, prohibiting shared forklifts, pallet jacks, cleaning tools, or personnel movement from raw zones into High-Care areas without full hygiene lock changes.
2. Allergen Management: Maintaining a site-wide Allergen Matrix across all SKUs and lines; storing allergenic ingredients (milk, eggs, peanuts, tree nuts, soy, gluten-containing cereals, sesame, mustard, celery, lupin, sulfites, fish, crustaceans, molluscs) in sealed, color-labeled containers on the bottom rack tier so spills can't cascade onto non-allergenic ingredients below; scheduling production runs from allergen-free to allergen-containing products followed by validated deep cleaning.
3. Physical Contamination (Glass, Brittle Plastic, Metal, Wood): Maintaining a numbered Glass and Brittle Plastic Register inspected monthly; banning wooden pallets and utensils in open product rooms; issuing metal-detectable blue bandages, one-piece detectable pens without springs, and color-coded food-grade scrapers.
4. Chemical Contamination: Storing CIP caustics, acids, sanitizers, and water-treatment reagents in locked, ventilated bunded rooms with spill containment pallets and automated dosing pumps.

Clause 13: Cleaning and Disinfection Validation vs Verification (CIP, COP, and Dry Cleaning)

Clause 13 (Cleaning and disinfection) enforces a critical engineering distinction between Validation and Verification. Validation proves upfront, with objective scientific data, that your cleaning protocol completely removes target soil, biofilms, and allergen proteins from worst-case equipment geometry. Verification confirms that last night's sanitation crew executed that validated protocol properly.

For enclosed piping and vessels cleaned via Clean-In-Place (CIP) systems, validation rests on the four physical parameters of Sinner's Circle:

• Hydrodynamics (Mechanical Turbulence): During pipe cleaning, theCIP solution must achieve turbulent flow at a linear velocity of $v \ge 1.5\text{ to }2.0,\text{m/s}$ (corresponding to a Reynolds number $\text{Re} > 10,000\text{ to }25,000$). If a pump delivers only $0.8,\text{m/s}$, flow stays laminar and leaves a boundary layer of fat and protein untouched. Inside tanks, rotary spray balls must be validated for impact coverage without shadow zones behind agitator shafts or level probes.
• Chemical Concentration (Conductivity and Titration): Standard caustic washes ($1.5\text{ to }2.5%\text{ NaOH}$ to saponify fats and denature proteins) and acid washes ($1.0\text{ to }1.5%\text{ HNO}_3$ or phosphoric acid to dissolve mineral scale) must be controlled via calibrated inline inductive conductivity sensors ($\text{mS/cm}$) on the CIP return line, cross-checked weekly by manual laboratory titration.
• Temperature and Contact Time: Maintaining return-line temperatures at $+70\text{ to }+85,^\circ\text{C}$ for caustic and $+60\text{ to }+65,^\circ\text{C}$ for acid over the validated timer window ($15\text{ to }30,\text{min}$ after return temperature stabilization).

In low-moisture manufacturing environments (flour mills, bakeries, infant formula blending, chocolate, spices, compound feed plants), introducing water during cleaning triggers explosive growth of Salmonella and Cronobacter sakazakii inside equipment seams. Therefore, ISO 22002-100:2025 (paired with ISO 22002-1:2025 and ISO 22002-6:2025) mandates validated Dry Cleaning: using industrial vacuum cleaners fitted with HEPA exhaust filters, color-coded scrapers, soft brushes, rapid-evaporating $70%$ isopropanol wipes, and validated product flushing batches. Blowing down dusty equipment with compressed air hoses is strictly prohibited because it aerosolizes allergens and pathogens across the entire facility.

The final sections of ISO 22002-100:2025 (Clauses 14 through 18 plus informative Annexes A and B) govern human behavior on the shop floor, label integrity, intentional contamination and economic adulteration defenses, and safe handling of rework.

Clauses 14 and 15: Personnel Hygiene Airlocks, DIN 10524 Workwear, and Artwork Verification

Operators remain the most unpredictable vector for microbiological and physical hazards (Staphylococcus aureus, norovirus, hair, street clothing fibers, jewelry, mobile phones). Clause 14 (Personal hygiene and employee facilities) requires employee welfare and changing rooms to be engineered so staff cannot bypass hygiene steps:

• Sanitary Airlock and Changing Room Layout: Physical separation between street clothes and clean workwear lockers; non-touch infrared or knee-operated handwash basins supplied with pre-mixed warm water ($+35\text{ to }+42,^\circ\text{C}$), bactericidal liquid soap, single-use paper towels or HEPA-filtered air dryers, and automated boot-washer and hand-sanitizer turnstiles that unlock only after both hands are sanitized.
• Hygienic Workwear Engineering (DIN 10524 Principles): Protective garments for processing rooms must have zero external above-the-waist pockets (so pens, thermometers, or personal items can't fall into open hoppers) and no sewn plastic buttons (using concealed metal press-studs or captive zippers). Workwear for High-Care and Medium-Care zones must be laundered centrally on-site or by an audited industrial laundry using validated thermal disinfection cycles ($\ge +65\text{ to }+75,^\circ\text{C}$ for at least $10\text{ to }15,\text{min}$). Home washing of production uniforms is prohibited.
• Demonstrated Competency Over Attendance Signatures: Under ISO 22002-100:2025, auditors don't just check training attendance sheets; they interview line operators directly to verify practical competency (such as what exact steps an operator takes if a glass jar shatters on the filler or a metal detector rejects three consecutive packs).

Clause 15 (Product and consumer information) targets packaging and labeling errors, which account for more than 40% of food safety recalls in the EU and North America due to undeclared allergens. Facilities must enforce a formal multi-disciplinary Artwork Approval procedure (signed off by R&D, Regulatory, and the HACCP leader), strict packaging Line Clearance between production runs to purge leftover labels or film reels, and inline optical barcode/label scanners.

Clause 16: Food Defense (TACCP) and Food Fraud Mitigation (VACCP) Inside the Core Standard

A landmark shift in ISO 22002-100:2025 is the elevation of intentional sabotage prevention (Clause 16.2 Food defence + Annex A) and economic adulteration prevention (Clause 16.3 Food fraud + Annex B) directly into the normative body of the ISO PRP standard. Previously treated mainly as scheme-specific add-ons in FSSC 22000 or guidelines in Codex Alimentarius, both assessments are now mandatory for every organization using the ISO 22002 series:

1. Threat Assessment (TACCP for Food Defense): Evaluating physical and digital vulnerability of critical site nodes to disgruntled insiders, contractors, or intruders. High-consequence nodes (potable water storage tanks, raw milk or grain intake pits, CIP chemical dosing rooms, server racks, and PLC networks) must be secured with keycard/biometric access control, 30-day CCTV retention, magnetic door alarms, and numbered security seals (ISO 17712).
2. Vulnerability Assessment (VACCP for Food Fraud): Evaluating raw materials, functional ingredients, and primary packaging for economic adulteration risk based on price volatility, supply chain length, geopolitical disruption, and historical fraud alerts (e.g., watering down or melamine spiking in milk, dilution of olive or sunflower oil, Sudan dyes in spices, sugar syrups in honey, or unapproved recycled plastics in food-contact film). Mitigation plans combine supplier mass-balance audits with accredited authenticity testing.

Clauses 17-18, Rework Controls, and Accredited Laboratory Verification Under ISO/IEC 17025

Safe handling of in-process rework (governed across ISO 22002-100:2025 and sector part ISO 22002-1:2025) requires three non-negotiable controls: full batch traceability on every sealed rework container (product name, original lot number, date/shift generated, allergen profile, and maximum shelf life), protection against environmental contamination inside lidded food-grade bins, and the strict Like-into-Like allergen rule (rework containing an allergen may only be dosed back into a product formulation that already declares that exact same allergen).

For your PRP verification data to withstand scrutiny from certification bodies (whose accredited status under the IAF MLA can always be checked in IAF CertSearch), all critical laboratory analyses of potable water, environmental swabs, allergens, packaging migration, and feed carry-over must be performed by testing laboratories accredited by the National Accreditation Agency of Ukraine (NAAU) or international ILAC MRA signatories to ISO/IEC 17025.

The engineering table below details the accredited laboratory verification matrix across Food, Packaging, Feed, and Logistics.

When a company begins its ISO 22002-100:2025 implementation in manufacturing or schedules FSSC 22000 and ISO 22000 certification preparation, the biggest mistake is treating the project as a solo desk exercise for the quality manager. During surveillance and recertification audits, lead auditors evaluate your migration to the 2025 PRP architecture through two mandatory clauses of ISO 22000: Clause 6.3 (Planning of Changes) and Clause 8.5.2 (Hazard Identification and Assessment).

Why is ISO 22000 Clause 6.3 the auditor's first check? Because replacing legacy ISO/TS 22002 specifications with the two-tier ISO 22002-100:2025 plus sector-part framework alters the foundational controls of your Food Safety Management System (FSMS). If an auditor sees new standard numbers typed into your SOP headers but finds no signed Clause 6.3 Change Management Protocol evaluating how the new clauses affect product safety, engineering resources, the boundary between PRPs and OPRPs in your HACCP plan, and operator training, that omission triggers an immediate nonconformity.

Three Critical Bottlenecks Where Transition Projects Stall

Across dozens of PRP modernization projects we've led in Ukraine and Central and Eastern Europe, the Ekontrol team consistently sees transitions break down at three points:

1. Cosmetic Document Edits ("Find & Replace" Without Engineering Substance). A team swaps ISO/TS 22002-1:2009 for ISO 22002-100:2025 in the document header, but the internal audit checklist still follows the 2009 clause structure. The compressed air or water procedure says "monitor periodically" without specifying sampling points, ISO 8573-1 purity classes, action thresholds, or the responsible engineer's title.
2. The Disconnect Between Signed Training Logs and Night-Shift Reality. We regularly walk into plants where every operator has a signed training attendance record in HR. Yet when we ask a filler operator or CIP technician on the floor which test strip verifies allergen removal or how to check a floor drain water trap, they freeze because they were trained with a generic PowerPoint slide deck. Only scenario-based training right next to the machine closes that gap.
3. Unaligned Suppliers and 3PL Service Contractors. Under ISO 22002-100:2025 (Clauses 10, 11, and 16), you can't treat external suppliers or hauliers as someone else's problem. If your packaging converter hasn't validated specific migration and NIAS under ISO 22002-4:2025, or your bulk tanker haulier can't produce prior-cargo and certified wash records under ISO 22002-5:2025, the nonconformity lands on your audit report.

Ekontrol's Four-Stage Engineering Roadmap for ISO 22002-100:2025 Implementation

To make sure your transition strengthens shop-floor discipline without halting production lines, Ekontrol engineers and lead auditors execute a structured 60-to-90-day implementation roadmap:

• Stage 1: On-Site Engineering PRP Diagnostic Audit and Clause 6.3 Change Protocol (Days 1-15). Our team inspects your perimeter, roof, drainage, boiler house, water treatment loop, compressor room, HVAC air handling units, and CIP stations. We define your exact normative pair (ISO 22002-100:2025 + applicable sector modules -1, -2, -4, -5, -6, -7), draft your formal ISO 22000 Clause 6.3 Change Management Plan, and deliver a prioritized engineering gap matrix (Critical, Important, Supporting).
• Stage 2: Redesigning PRP Procedures, HACCP/OPRP/TACCP/VACCP Matrices, and Supplier SLAs During Implementation (Days 16-45). We rebuild your SOPs, workstation instructions, and log templates around all 18 clauses of ISO 22002-100:2025, update your ISO 22000 Clause 8.5 hazard analysis, compile your site allergen matrix, Food Defense (TACCP) plan, and Food Fraud (VACCP) vulnerability assessment, and upgrade quality SLAs for raw material, packaging, and 3PL suppliers.
• Stage 3: Accredited ISO/IEC 17025 Laboratory Validation and Shop-Floor Scenario Training (Days 46-70). We coordinate accredited testing for potable water, culinary steam, compressed air purity, Listeria/Salmonella environmental swabs, ELISA allergen cleaning validation, and packaging migration. In parallel, we run hands-on scenario training for line operators, CIP technicians, mechanics, and warehouse staff right at their workstations.
• Stage 4: Pre-Audit Cross-Check, Audit Support, and Ongoing Annual Support (Days 71-90). We conduct a full internal audit using updated dual-standard checklists (ISO 22002-100:2025 + sector part + FSSC 22000), assemble the management review evidence package (ISO 22000 Clause 9.3), and represent your engineering team during the external certification audit.

For a week-by-week timeline aligned with the FSSC 22000 Version 7 assessment window, read our companion guides on the ISO 22002-100:2025 and FSSC 22000 V7 transition plan and the complete ISO 22002:2025 series sector update, or contact Ekontrol directly to schedule your site diagnostic audit.