The requirement that applies today
After the hazard control plan is established, the organization updates the information that supports it where necessary: the characteristics of raw materials, ingredients and contact materials, the characteristics of end products, the intended use, and the flow diagrams and process descriptions. It makes sure the plan and the PRPs stay current.
ISO 22000:2018, 8.6 Updating the information specifying the PRPs and the hazard control plan; ISO/DIS 22000:2026, 8.6.
What the draft does
Unchanged title: The public contents keep 8.6 at the same number and title. No structural change is shown.
Source: public contents and foreword at 8.6, retrieved 2026-10-19.
Why this clause matters
This clause closes the loop between a change and the documents that depend on it. A new supplier, a new recipe, a new line or a new consumer group all invalidate part of the analysis. The update is the evidence that the system is alive.
Suggested evidence to discuss with your auditor
For 8.6, these are the artefacts we suggest discussing with your auditor. The standard publishes no evidence list, so this is our reading, not a requirement.
- A trigger list for updates: recipe, supplier, line, label, consumer group
- The last update record and the change that caused it
- Confirmation that the hazard analysis and plan were re-checked, not only re-dated
Where systems usually fall short
- Documents re-dated after a change with no re-analysis
- No owner for keeping the inputs current
How to prepare
Take the last product or supplier change and show the chain from the change to the updated analysis and plan. If the chain stops at a revised specification, the clause is not met.
Dates
Cross-references
Source
Clause 8.6. Current edition: ISO 22000:2018. Draft: ISO/DIS 22000:2026. Retrieved 2026-10-19. The full DIS text for 8.6 is sold by ISO and not held here; the sources page lists what is.
Not legal advice; does not certify; our words, not the standard's, and the planning date is an estimate.