ISO 22000 certification is documented in a food safety manual, but the system it describes — hazard controls monitored, deviations corrected, suppliers verified, communication up and down the chain — runs on paper checklists and tribal knowledge. The certification audit samples the gap: the 2 a.m. CCP check that didn’t happen, the corrective action that fixed the symptom, the PRP verification behind schedule.
FSSC 22000 and FSMA raise the sampling intensity — unannounced audits and FDA preventive controls inspections test whether the plan runs, not whether it reads well.
ISO 22000 requires hazard analysis with control measures validated before use (clause 8.5), PRPs and CCPs/OPRPs monitored with defined criteria (8.5.4, 8.9), corrections and corrective actions on deviation with cause analysis (8.9.2–8.9.3), a traceability system (8.3), verification activities on schedule (8.8), and management review with defined inputs (9.3). FSSC 22000 layers additional requirements — food defense, food fraud, allergen management — audited unannounced.
Kintavo turns the manual into the operation: monitoring issued to the line and signed at the reading, deviations opening dispositions and root-caused actions, and verification schedules that escalate — evidence generated hourly, audited whenever.
The unannounced FSSC audit starts at the metal detector. Monitoring records: continuous, signed at the reading, one 3 a.m. miss — escalated within the hour, completed late with reason, product from the window held and dispositioned. The auditor requests a traceability exercise: the receiving and consumption records for the sampled lot are linked and exportable, and the exercise proceeds from records instead of a paper chase. The finding list stays empty.
Every check carries its operator, timestamp, reading, and limit — created at the line. When the FSSC auditor samples a season of monitoring, the record is continuous because the workflow made it so.