The requirement that applies today
For each identified hazard the organization assesses whether preventing or reducing it to an acceptable level is essential. It evaluates the likelihood of the hazard occurring in the end product before controls, and the severity of its health effect given the intended use. It identifies the significant hazards, describes the method used, and keeps the result as documented information.
ISO 22000:2018, 8.5.2.3 Hazard analysis: hazard assessment; ISO/DIS 22000:2026, 8.5.2.3.
What the draft does
Subclause of 8.5.2; not listed separately in the public contents: The public contents name 8.5.2 at this position but do not list its subclauses. The subclause structure shown here comes from the held current edition; whether the draft keeps it is sold by ISO and not held here.
Source: public contents and foreword at 8.5.2.3, retrieved 2026-10-19.
Why this clause matters
The assessment is a judgement, and the clause asks for the judgement to be visible. A risk matrix with no rationale is not an assessment. The output, the list of significant hazards, drives every control decision that follows, so a weak assessment undermines the whole plan.
Suggested evidence to discuss with your auditor
For 8.5.2.3, these are the artefacts we suggest discussing with your auditor. The standard publishes no evidence list, so this is our reading, not a requirement.
- The assessment method, described in enough detail to repeat
- Likelihood and severity recorded for each hazard, with the reasoning
- The resulting list of significant hazards, dated and approved
Where systems usually fall short
- A matrix scored by one person with no team discussion
- Severity judged without reference to the intended consumer
How to prepare
For the three hazards that matter most, write the likelihood and severity reasoning in plain sentences. If the sentence sounds weak, the score probably is. The written reasoning is also what a challenge from an auditor can be answered with.
Dates
Cross-references
8.5.1.4, 8.5.2.1, 8.5.2.4, 8.5.4
Source
Clause 8.5.2.3. Current edition: ISO 22000:2018. Draft: ISO/DIS 22000:2026. Retrieved 2026-10-19. The full DIS text for 8.5.2.3 is sold by ISO and not held here; the sources page lists what is.
Not legal advice; does not certify; our words, not the standard's, and the planning date is an estimate.