The requirement that applies today
When a critical limit or action criterion is not met, the organization identifies the affected product and controls its use and release. It documents how affected product is identified, assessed and corrected, and how the corrections are reviewed. A CCP failure means the product is handled as potentially unsafe. An OPRP failure requires the food safety consequences to be determined, the cause found, and the affected product identified and handled. Records describe the nonconformity, its cause and its consequences.
ISO 22000:2018, 8.9.2 Control of product and process nonconformities: corrections; ISO/DIS 22000:2026, 8.9.2.
What the draft does
Unchanged title: The public contents keep 8.9.2 at the same number and title. No structural change is shown.
Source: public contents and foreword at 8.9.2, retrieved 2026-10-19.
Why this clause matters
A correction is the immediate action: hold, segregate, rework, reject. The clause separates that from the corrective action that prevents recurrence. Mixing the two is why some sites close a deviation without ever asking why it happened.
Suggested evidence to discuss with your auditor
For 8.9.2, these are the artefacts we suggest discussing with your auditor. The standard publishes no evidence list, so this is our reading, not a requirement.
- A correction record with the product identified, assessed and dispositioned
- The review of the correction by a second person
- The cause and the consequences recorded, not only the fix
Where systems usually fall short
- Product reworked without an assessment of the effect on safety
- A correction closed with "retrained operator" as the only action
How to prepare
Take one deviation and separate the correction from the corrective action on paper. The correction is what happened to the product. The corrective action is what stopped it happening again. If the second column is empty, that is the gap.
Dates
Cross-references
Source
Clause 8.9.2. Current edition: ISO 22000:2018. Draft: ISO/DIS 22000:2026. Retrieved 2026-10-19. The full DIS text for 8.9.2 is sold by ISO and not held here; the sources page lists what is.
Not legal advice; does not certify; our words, not the standard's, and the planning date is an estimate.