Managing Systemic Change Control Under ISO 22000 Clause 8.6

Systemic Change Control Requirements and Rationale

Under ISO 22000:2018 Clause 8.6, an organization must update preliminary information, prerequisite programmes (PRPs), and the hazard control plan following any operational change or system review. The standard specifies that after establishing the hazard control plan, the organization must update characteristics of raw materials, ingredients, and product-contact materials, characteristics of end products, intended use, and flow diagrams and descriptions of processes and process environment.

This requirement applies across all food chain sectors to ensure the food safety management system (FSMS) reflects current operational realities and regulatory constraints. Systemic change control maintains alignment between operational planning and actual shop-floor activities.

The fundamental rationale behind Clause 8.6 is that food safety hazards evolve whenever operational conditions change. Unrecorded modifications to raw material specifications, equipment layout, line speeds, or cleaning protocols can introduce unanalyzed biological, chemical, or physical hazards. By enforcing systematic updates to preliminary information and hazard control plans, Clause 8.6 prevents system drift and ensures control measures remain validated and effective.

Triggers for Systemic Updates and Change Management

Managing systemic changes effectively requires establishing clear organizational triggers that prompt immediate review of preliminary information and control plans. Under Clause 7.4.3, the organization must ensure the food safety team is informed in a timely manner of changes across thirteen specific operational areas. These internal communication triggers include new or modified products, changes in raw materials or ingredients, equipment modifications, premises layout changes, updated cleaning and sanitation programmes, and revised statutory or regulatory requirements.

In addition to internal triggers, Clause 7.4.2 external communication and Clause 10.3 system updating establish systemic review inputs. Customer complaints, scientific knowledge regarding hazards, verification results analysis under Clause 8.8.2, and management review outputs under Clause 9.3 mandate evaluation by the food safety team. When changes occur, Clause 6.3 requires executing them in a planned manner, considering purpose, consequences, system integrity, resources, and responsibilities.

Quality managers and internal auditors must implement a structured procedure to manage change control systematically. A five-step procedure provides operational alignment across departments:

• Capture change proposals or external triggers through internal communication channels specified in Clause 7.4.3 or external communication under Clause 7.4.2.
• Review and update preliminary documented information under Clause 8.5.1, including raw material specifications, end product characteristics, intended use, and process flow diagrams.
• Re-evaluate the Clause 8.5.2 hazard analysis to determine if new hazards are introduced or if existing hazard likelihood or severity ratings require adjustment.
• Validate modified control measures or combinations of control measures under Clause 8.5.3 prior to operational implementation in the hazard control plan.
• Update PRPs under Clause 8.2 and the hazard control plan under Clause 8.5.4, maintaining documented information and training operational personnel before executing changes.

Example

A dairy processing facility modifies an existing liquid whey processing line by adding an automated membrane filtration system to increase concentration efficiency. Procurement also sources a new enzyme supplier for cheese production, while regulatory authorities lower the statutory threshold for a chemical residue.

The food safety team receives timely notification under Clause 7.4.3 and initiates a Clause 8.6 update. The team updates raw material specifications under Clause 8.5.1.2, revises flow diagrams under Clause 8.5.1.5.1, and conducts on-site confirmation under Clause 8.5.1.5.2. The team re-evaluates the Clause 8.5.2 hazard analysis, validates new filtration action criteria under Clause 8.5.3, and updates the hazard control plan under Clause 8.5.4 before commercial production resumes.

Auditor Inspection Criteria and Evidence Matrix

Auditors assessing Clause 8.6 evaluate whether the organization maintains dynamic control over process changes. They inspect alignment between internal communication logs, preliminary documented information, hazard analyses, PRP specifications, and hazard control plans.

Before your audit

• Confirm that all recent raw material, ingredient, or packaging supplier changes have triggered reviews of preliminary information.
• Verify that process flow diagrams have been updated and confirmed on-site for all recent line modifications or equipment additions.
• Ensure that statutory and regulatory updates across target distribution markets are incorporated into preliminary information files.
• Check that internal change management records demonstrate timely communication to the food safety team under Clause 7.4.3.
• Review hazard analysis records to verify that risk ratings were re-evaluated following operational or process changes.
• Validate that any modified CCP critical limits or OPRP action criteria were validated prior to operational implementation.
• Confirm that PRPs and hazard control plans display current revision dates and reflect actual shop-floor practices.

Questions people ask

What specific operational changes trigger a requirement to update preliminary information under Clause 8.6?

Clause 8.6 requires updating preliminary information whenever changes occur in raw material characteristics, end product specifications, intended use, or process flow diagrams and process environments. Under Clause 7.4.3, triggers include new products, modified equipment, altered premises layouts, updated cleaning programmes, or changed regulatory requirements.

Must process flow diagrams be re-confirmed on-site after every process modification?

Under Clause 8.5.1.5.2, the food safety team must confirm the accuracy of flow diagrams on-site and retain updated flow diagrams as documented information. Whenever process modifications alter process steps, equipment locations, or material inputs, on-site verification is mandatory prior to conducting hazard analysis updates.

How does ISO 22000 Clause 8.6 connect to Clause 10.3 system updating?

Clause 8.6 focuses on operational updates to preliminary information, PRPs, and hazard control plans following process changes or verification findings. Clause 10.3 addresses overarching FSMS updating, requiring top management and the food safety team to evaluate the entire system at planned intervals using communication inputs, verification analyses, and management review outputs.

Is re-validation of control measures mandatory when updating the hazard control plan?

Under Clause 8.5.3, the food safety team must validate that selected control measures are capable of achieving intended hazard control prior to implementation and after any change therein. Whenever a system update under Clause 8.6 modifies control measures, critical limits, or action criteria, re-validation is mandatory.

Reference documents

• DS/EN ISO 22000:2018, Food safety management systems — Requirements for any organization in the food chain
• DS/ISO 22003-1:2022, Food safety — Part 1: Requirements for bodies providing audit and certification of food safety management systems
• DS/ISO 22003-2:2022, Food safety — Part 2: Requirements for bodies providing evaluation and certification of products, processes and services, including an audit of the food safety system