The requirement that applies today
The organization plans, runs, controls, maintains and updates the processes needed to make safe products and to carry out the actions decided under 6.1. It sets criteria for the processes, controls them against those criteria, and keeps enough records to show they ran as planned. It controls planned changes, reviews the effects of unintended ones and mitigates harm, and it controls any process it outsources. The current edition treats this as one clause; the draft splits it into a general clause, food defence and food fraud prevention.
ISO 22000:2018, 8.1 Operational planning and control; ISO/DIS 22000:2026, 8.1.
What the draft does
Split into 8.1.1, 8.1.2 and 8.1.3: The public contents divide 8.1 into a general clause, food defence and food fraud prevention. The current edition has a single 8.1. The general content appears to be retained; the detailed text of the split is sold by ISO and not held here.
Source: public contents and foreword at 8.1, retrieved 2026-10-19.
Why this clause matters
This is the parent of the operational requirements. It decides how the site turns a hazard plan into a running process with criteria, records and change control. The draft split matters because food defence and food fraud become visible subclauses rather than notes, and a transition audit will look for both at this level.
Suggested evidence to discuss with your auditor
For 8.1, these are the artefacts we suggest discussing with your auditor. The standard publishes no evidence list, so this is our reading, not a requirement.
- Process criteria for each operation that affects food safety
- Records showing the process ran within its criteria, with deviations and actions
- The control of outsourced processes, including the criteria and the oversight
Where systems usually fall short
- Process criteria written for the audit and not used by operators
- An outsourced process treated as outside the system
How to prepare
Use this page as the umbrella: the process criteria, the deviation route and the outsourced-process control should all point to the same owner. Then check that food defence and food fraud have an owner at this level, not only in a security or procurement file.
Dates
Cross-references
Source
Clause 8.1. Current edition: ISO 22000:2018. Draft: ISO/DIS 22000:2026. Retrieved 2026-10-19. The full DIS text for 8.1 is sold by ISO and not held here; the sources page lists what is.
Not legal advice; does not certify; our words, not the standard's, and the planning date is an estimate.