Auditing Competence and Awareness Under ISO 22000

Competence and Awareness Requirements and System Rationale

Under ISO 22000:2018 Clause 7.2, an organization must determine the necessary competence of persons doing work under its control that affects its food safety performance and the effectiveness of the food safety management system (FSMS). The organization must ensure that all relevant personnel, including the food safety team and those responsible for operating the hazard control plan, are competent on the basis of appropriate education, training, or experience.

These requirements apply across all food chain organizations regardless of size or operational complexity. Under Clause 7.1.2, where an organization relies on external experts to develop, implement, or assess the FSMS, evidence of an agreement or contract defining the competency, responsibility, and authority of those external experts must be retained as documented information.

The fundamental rationale behind Clause 7.2 and Clause 7.3 is that a food safety management system depends entirely on human capability and operational discipline. Even well-designed Critical Control Points (CCPs) or Prerequisite Programmes (PRPs) fail if operators lack technical understanding or fail to recognize how process deviations compromise end product safety. Ensuring verified competence and active food safety awareness prevents operational errors that could cause severe public health consequences.

Evaluating Competence and Multi-Disciplinary Team Expertise

Clause 7.2(c) explicitly mandates that the food safety team must possess a combination of multi-disciplinary knowledge and experience in developing and implementing the FSMS. This knowledge must encompass the organization's specific products, manufacturing processes, equipment, and food safety hazards within the scope of the FSMS. Under Clause 5.3.2, the food safety team leader carries direct responsibility for ensuring relevant training and competencies for the food safety team.

When competence gaps are identified, Clause 7.2(d) requires the organization to take actions to acquire necessary competence and evaluate the effectiveness of those actions. Applicable actions may include providing training, mentoring employees, re-assigning personnel, or hiring competent contractors. Under Clause 7.2(e), appropriate documented information must be retained as evidence of competence.

Quality managers and internal auditors must implement a structured procedure to manage competence and training systematically. A five-step procedure provides structured compliance across operational functions:

• Define mandatory competence criteria for every role affecting food safety performance, detailing required education, technical training, and experience under Clause 7.2(a).
• Assess current staff and food safety team qualifications against established criteria to identify specific technical or operational competence gaps.
• Design and deliver targeted training or corrective actions, such as mentoring or task re-assignment, under Clause 7.2(d) to bridge identified gaps.
• Evaluate training effectiveness through practical demonstration, oral questioning, or operational performance monitoring rather than relying solely on attendance records.
• Retain detailed records of education, certifications, training evaluations, and external expert agreements under Clause 7.2(e) and Clause 7.1.2.

Example

During a surveillance audit of a bakery manufacturing facility, an auditor interviews an operator responsible for monitoring a metal detector CCP. While the operator holds a signed training attendance certificate, the auditor observes that the operator cannot explain how to handle product rejected by the device or describe the physical hazard being controlled.

The food safety team evaluates the situation under Clause 7.2 and Clause 7.3, determining that initial training failed to establish operational awareness or technical competence. The organization re-trains the operator, conducts a practical evaluation of CCP monitoring procedure adherence, and updates competency verification records. The food safety team leader subsequently revises the FSMS training procedure to require practical task demonstrations for all CCP operators prior to authorizing line operation.

Auditor Inspection Criteria and Evidence Matrix

Auditors evaluating Clause 7.2 and Clause 7.3 examine alignment between defined job descriptions, training execution, practical awareness, and retained evidence. The inspection matrix outlines auditor checks and required evidence across key competence clauses.

Before your audit

• Confirm that competence requirements detailing education, training, and experience are documented for every position affecting food safety.
• Verify that the food safety team demonstrates multi-disciplinary expertise covering all products, process lines, and hazard categories.
• Ensure signed contracts and qualification records are available for all external experts assisting with FSMS design or operation.
• Check that records of training activities include documented evaluations of training effectiveness rather than simple attendance sheets.
• Review employee awareness across all production shifts regarding the food safety policy and individual contributions to food safety.
• Verify that CCP operators can explain critical limits, monitoring methods, and corrective actions for their specific process steps.
• Confirm that competency records for temporary and seasonal staff are complete and up to date.

Questions people ask

What is the difference between competence and awareness under ISO 22000?

Competence under Clause 7.2 refers to the demonstrated ability to apply knowledge and skills to achieve intended food safety results based on education, training, or experience. Awareness under Clause 7.3 requires that personnel understand the food safety policy, relevant objectives, their individual contribution to FSMS effectiveness, and the consequences of nonconformity.

How must an organization evaluate the effectiveness of training under Clause 7.2?

Clause 7.2 mandates taking action to acquire necessary competence and evaluating the effectiveness of those actions. Effectiveness can be evaluated through practical task demonstrations, written or oral examinations, supervisor observations on the production floor, or monitoring operational performance indicators following training.

What evidence is required for external experts assisting with an ISO 22000 FSMS?

Under Clause 7.1.2, when an organization uses external experts to develop, implement, operate, or assess the FSMS, evidence of an agreement or contract must be retained as documented information. This documentation must explicitly define the competency, responsibility, and authority of the external experts.

Must all employees be able to recite the food safety policy during an audit?

Under Clause 7.3, personnel are not required to memorize or recite the food safety policy word for word. However, employees must be aware of the food safety policy under Clause 7.3(a) and demonstrate an understanding of how its commitments relate to their daily operational tasks and food safety responsibilities.

Reference documents

• DS/EN ISO 22000:2018, Food safety management systems — Requirements for any organization in the food chain
• DS/ISO 22003-1:2022, Food safety — Part 1: Requirements for bodies providing audit and certification of food safety management systems
• DS/ISO 22003-2:2022, Food safety — Part 2: Requirements for bodies providing evaluation and certification of products, processes and services, including an audit of the food safety system