FSSC 22000 Maturity · Certification of Food Safety Management Systems
Your food safety system placed on FSSC 22000, gap by gap, action by action.
10 themes, a 5-level scale. And the action that moves each level to the next.
The framework’s 10 themes, already written from L1 to L5. One company, one business unit, or 300 at once.
FSSC 22000 Maturity · Certification of Food Safety Management Systems
10 themes, 5-level scale.
Nordhavn Industries
53 / 100
They measure their maturity with Datamensio
An example
This could be your situation.
Take one company as an example: three sites, three spreadsheets, no shared answer.
Nobody can consolidate.
Nordhavn Industries, 2,400 people in Hamburg, Lyon and Porto. A client asks where the group stands. Each site answers in its own spreadsheet, with its own scales.
Three weeks, a single base.
One FSSC 22000 version 6 (ISO 22000:2018, sector PRPs ISO/TS 22002-x, FSSC additional requirements) assessment launched across all three sites at once, from the managers’ interview notes. The framework was already written, its 10 themes and levels L1 to L5 too.
Two costs avoided before being committed.
A score of 53 out of 100, with the gap concentrated on three themes. The AI companion spotted that two actions duplicated those of another audit. The committee report took one sentence to request.
What it saved them
- 3sites measured on the same base, instead of three questionnaires to reconcile
- 2duplicate actions caught before the spend
- 1committee report, with no manual rework
These figures are an example. They could be yours.
The standard imposes processes. Datamensio says where you stand.
01
The framework is already written
Themes, questions and levels L1 to L5, all written. You do not start from an empty spreadsheet.
02
The score lands the same day
Online, by self-assessment link or in interview. Theme by theme, comparable over time.
03
The gap becomes a costed plan
Every step up carries its action. The AI prioritises on expected effect, not on the order of the standard.
04
Progress can be demonstrated
Campaign after campaign, against your target and against your own past. That is what your board asks for.
The maturity scale
One level, the next, and the action that links the two.
It is this mechanism (one level, the level above, and the action linking the two) that turns a finding into a trajectory.
Is the food fraud vulnerability assessment carried out and acted upon?
- N1
No vulnerability assessment has been carried out. The topic is not assigned to an identified function.
- N2
An assessment exists for a few sensitive materials, carried out once, with no formalised mitigation plan.
- N3
The assessment covers all materials, packaging and services. A mitigation plan is written and the measures are in place.
- N4
The assessment is reviewed on a set frequency and whenever a supplier or material changes. Mitigation measures are verified and recorded.
- N5
The assessment draws on external fraud and sector alert intelligence. Reviews and their effects on the plan are documented and presented at management review.
Action to move from L2 to L3
Extend the vulnerability assessment to all purchased materials, packaging and services, appoint an owner within the food safety team, formalise the mitigation plan material by material and approve it at the next management review.
« With Datamensio, we meet our objectives far more efficiently. The ERDF inspection services and our supervising ministry particularly appreciated an approach that gives them reliable data. »
Director, CCI 94CCI Île-de-France
« We believe this is the most suitable solution to scale our transformation project and measure impact according to our needs. »
Maja SucekChief Operating Officer, Interreg Danube
Rarely on its own
Frameworks combine. Put several together to cover your business, or have the AI write yours.
Take your first measurementon FSSC 22000.
What this framework covers
FSSC 22000 is a GFSI-recognised certification scheme built on three components. ISO 22000:2018 provides the food safety management system, with its hazard analysis, control plans and risk-based approach. Prerequisite programmes are defined by the sector standard ISO/TS 22002 corresponding to your category, food manufacturing, packaging, transport and storage, animal feed. FSSC additional requirements complete the framework on topics the scheme considers insufficiently covered, including food fraud, food defense, allergen management, service quality and labelling.
The difficulty is not understanding the scheme, it is knowing where you actually stand site by site. Is the HACCP plan revised when the process changes, or only on the anniversary date? Are food fraud vulnerability and threat assessments carried out by a competent team, or rolled over year after year without review? Is allergen management validated by cleaning results, or declared on the basis of a production schedule? Across a multi-site group, these answers diverge, and the audit reveals it site by site.
Version 6 of the scheme tightened several additional requirements and introduced explicit expectations on food safety culture, food loss and waste management, and equipment communication. This culture point is the one that confuses people most: it cannot be demonstrated by a procedure but by observable practices, behaviours on the line, gaps reported by operators, an improvement plan owned by site management. Many organisations have documented the requirement without having installed the mechanism.
The maturity assessment and the certification audit answer two different questions. The certification body’s auditor concludes with a minor, major or critical non-conformity, or with conformity. The assessment places each practice on a five-level scale and indicates the action that moves it up a level. Datamensio measures maturity and prepares for the audit, it issues no certificate. Across several sites, the benchmark between business units shows which are ready and which need intervention before the visit.
The framework is ready to use and adaptable. AI adjusts the themes, questions and levels to your food chain category, or builds a variant from your own documents, quality manual, HACCP plans, previous audit reports. The gaps identified feed a prioritised roadmap, and the service catalogue offers a solution against each action, with its cost, timeframe and impact on the score.
Reference standard: FSSC 22000 version 6 (ISO 22000:2018, sector PRPs ISO/TS 22002-x, FSSC additional requirements)
The themes assessed
Management system and leadership commitment
Food safety policy, system scope, roles of the food safety team, management review, document and record management.
Hazard analysis and HACCP plan
Validated flow diagrams, identification of biological, chemical, physical and allergen hazards, determination of CCPs and operational PRPs, critical limits, validation and verification.
Prerequisite programmes (ISO/TS 22002)
Premises and flow design, maintenance, utilities, cleaning and disinfection, pest control, waste management, personnel hygiene, food contact materials.
Allergen management
Allergen management plan, production sequencing, cleaning validation, labelling and cross-contact statements, operator training.
Food fraud and food defense
Food fraud vulnerability assessment, mitigation plan, threat assessment, access control and sensitive area security, periodic review of assessments.
Supplier and service control
Approval and monitoring of raw material and packaging suppliers, specifications, management of outsourced services, laboratories, transport, cleaning contractors.
Traceability, withdrawal and recall
Upstream and downstream traceability, mass balance, reconciliation timeframes, withdrawal and recall procedure, simulation exercises and use of their findings.
Food safety culture
Communication, training, measurement of behaviours, gap reporting by operators, indicators tracked by site management, dated improvement plan.
Non-conformity control and improvement
Non-conforming product management, corrective actions and root cause analysis, customer complaints, internal audits, follow-up of previous audit non-conformities.
FSSC additional requirements
Labelling and product compliance, food loss and waste management, equipment communication, requirements specific to the food chain category.
A short version of the framework is available for the online self-assessment.
Frequently asked questions
Does the Datamensio assessment grant FSSC 22000 certification?
No. Only an accredited certification body, mandated by the foundation that manages the scheme, issues the certificate after an on-site audit. The assessment measures the maturity of your system, identifies gaps and produces the action plan that prepares for that audit.
What is the difference from the certification audit or internal audit?
The certification body’s auditor concludes with conformity or a minor, major or critical non-conformity. The maturity assessment places each practice on five levels and indicates the action that moves it up a level. It also serves as an internal audit framework, with a comparable history from one year to the next.
How long does the assessment take?
The short version takes 20 to 30 minutes to complete by a site quality manager. The full version, run collaboratively, generally spans one to two weeks, most of the time being spent gathering input from maintenance, production and procurement.
Does the framework cover my food chain category?
The framework is structured on the common ISO 22000 foundation, PRPs and additional requirements. AI adjusts the themes, questions and levels to your category, manufacturing, packaging, transport and storage, or animal feed, or builds a variant from your documents.
How can several sites be compared?
Each site is assessed on the same framework, with its score per theme and its target. The benchmark between business units shows maturity gaps, and a cross-site roadmap consolidates audits from several sites without duplicating common actions.
Can a site certified to IFS or BRCGS reuse its existing system?
A large share of the prerequisite programmes, traceability and non-conformity control is common to GFSI-recognised schemes. The assessment shows what can be reused and where the gaps specific to FSSC 22000 concentrate, notably on the additional requirements.
Where is the data hosted?
In France, with OVH, backed up with Scaleway. No transfer outside the European Union. The AI models used can be selected, including from European solutions.
What happens to the action plan after the assessment?
Gaps between score and target feed an action plan that AI groups into a prioritised roadmap. Each item can be matched to a catalogue service, with its cost, timeframe and expected impact on the score, and progress is tracked through to closure.