ISO 22000 certification cost: the real budget, line by line

“How much does ISO 22000 cost?” is almost always the first question from food business owners considering certification — and the honest answer is: it depends, but on perfectly identifiable factors. Rather than a single figure that does not exist, here is the real structure of the budget, the parameters that move it and the practical levers to keep it under control.

Why there is no list price

Two mechanisms determine the certification body’s invoice:

• The number of audit days. It is not freely negotiable: the accreditation rules applicable to bodies certifying food safety management systems (ISO 22003-1) frame audit duration according to, among other things, headcount, the number of sites, the number of HACCP studies and the food chain category (manufacturing, catering, transport, packaging…). An 8-person workshop with two HACCP studies and a multi-site manufacturer will not spend the same time with the auditor.
• The certification body’s daily rate. Each accredited body — AFNOR Certification, Bureau Veritas, SGS and others — prices freely. That is where competition works hardest.

The ISO 22000 certification page on our hub summarises the scheme, its three-year cycle and the bodies that deliver it.

The five lines of the real budget

Line	Content	Frequency
Initial audit	Two-stage certification audit (readiness review then on-site audit)	Once per cycle
Surveillance audits	Annual check that the system keeps operating	Every year of the cycle
Internal costs	Time to build and run the system, internal audits, management review, staff training	Ongoing
Analytical verification	Laboratory analyses and reinforced self-checks supporting validation and verification	Recurring
External support	Consultant, project-lead training, mock audit (optional)	As needed

The most underestimated line is the third: building the prerequisite programmes, updating the hazard analysis, keeping records, running internal audits and preparing management reviews consumes very real working days, even though they appear on no invoice. In small businesses, that internal time frequently exceeds what is paid to the certification body.

Also note: part of these costs cannot be attributed to certification. The sanitary control plan, HACCP procedures and self-checks are regulatory obligations you must fund with or without a certificate — see our HACCP and PMS page. The genuine “ISO 22000 extra cost” is the management-system layer and the third-party audit.

What research says about costs and barriers

Academic literature confirms that budget is the leading perceived barrier. The study by Carmen Escanciano and María Leticia Santos-Vijande, published in 2014 in Food Control on a sample of Spanish companies certified against ISO 22000, identifies the lack of financial resources and the time required as the main obstacles to implementation — while also finding that the large majority of certified companies judge the outcome positive and intend to keep their certification (see the study). In other words: the cost is real, but it behaves more like a structuring investment than a dry compliance expense.

Five levers to reduce the bill

1. Compare several quotes over the full cycle. Ask each certification body for the cost of the initial audit and the two annual surveillances, on a strictly identical scope. An attractive initial audit can hide expensive surveillance.
2. Adjust the scope. Certifying first the site or range exposed to customer requirements reduces the headcount and the number of HACCP studies taken into account, hence the audit days.
3. Capitalise on your regulatory baseline. A living PMS, kept records and tested traceability already cover a large share of the standard’s operational requirements.
4. Size documentation to the strict minimum. The standard requires hazard control, not a mountain of procedures: a lean system is faster to build and cheaper to maintain.
5. Keep external support to the fair need. A consultant is useful to frame, train and challenge the hazard analysis; they become expensive when they write a system your teams will not own — which you pay for at the audit, then at every surveillance.

Budgeting without mistakes: the method

Before signing, put four figures on the table: the certification body’s quote over three years (initial + surveillances), the estimate of internal time (build then run), the cost of analyses and training, and any external support. Do not forget the peripheral costs that surface mid-project: calibration of measuring instruments (temperature probes, scales), possible upgrades of premises or equipment revealed by the PRP gap analysis, and the training time for newcomers — the system must stay under control despite staff turnover. Then set this total against the commercial stake: a strategic customer retained, an export market opened, a customer audit replaced by the certificate. That ratio — not the absolute amount — says whether the effort pays.

And if your real goal is retail listing, also compare with the budget of a GFSI-recognised scheme: our page on IFS, BRCGS and FSSC 22000 presents that family of requirements, built on the same foundation. The full process itself is detailed in our guide to getting ISO 22000 certified step by step.

Take action

Before requesting your first quotes, frame your project with the ISO 22000 certification page: process, three-year cycle, frequently asked questions and a free ebook. A well-defined scope is your best negotiating tool with certification bodies.