56% of ISO 22000 you already have
ISO 22301:2019 already covers about 56% of ISO 22000, leaving
17 of 39 controls as genuinely new work.
Already covered 11
Likely covered 11
New work 17
What is genuinely new work
Nothing in ISO 22301:2019 reaches these. This is the list to scope.
ISO22000-01OH&S policy and commitment
ISO22000-03Legal and regulatory compliance
ISO22000-04OH&S objectives and action plans
ISO22000-05Worker consultation and participation
ISO22000-06Elimination and substitution of hazards
ISO22000-07Engineering and administrative controls
ISO22000-08Personal protective equipment management
ISO22000-10Contractor and visitor safety management
ISO22000-11Incident investigation and reporting
ISO22000-12OH&S monitoring and measurement
ISO22000-13Internal OH&S audit program
ISO22000-14Management review and continual improvement
ISO22000-4.3Scope of the FSMS
ISO22000-5.2Food safety policy
ISO22000-6.2FSMS objectives and planning
ISO22000-8.7Control of monitoring and measuring
ISO22000-8.9Control of nonconforming product
Show the 22 you already have
ISO22000-10.1Nonconformity and corrective action
ISO22000-10.3Continual improvement
ISO22000-4.1Understanding the organization and its context
ISO22000-4.2Needs and expectations of interested parties
ISO22000-5.1Leadership and commitment
ISO22000-5.3Roles, responsibilities, and authorities
ISO22000-6.1Actions to address risks and opportunities
ISO22000-7.5Documented information
ISO22000-9.1Monitoring, measurement, analysis, evaluation
ISO22000-9.2Internal audit
ISO22000-9.3Management review
ISO22000-02Hazard identification and risk assessment
ISO22000-09Emergency preparedness and response
ISO22000-15Corrective actions and lessons learned
ISO22000-7.4Communication
ISO22000-8.2Prerequisite programmes (PRPs)
ISO22000-8.3Traceability system
ISO22000-8.4Emergency preparedness and response
ISO22000-8.5Hazard control (HACCP)
ISO22000-8.6Updating PRPs and hazard control plan
How this is calculated
Already covered means a mapping runs from a control in ISO 22301:2019 to that control. Likely
covered means no direct mapping exists but both frameworks map to the same control in a third
standard. New work means neither. We keep those separate rather than adding them into one
friendlier number, because blending them would present a two-hop inference as a verified
fact.
Coverage is not symmetric.
Run it the other way and you will get a
different number; both are correct.
From 332,959 cross-framework control
mappings across 723 frameworks, 531 of them verified against
their source documents. It does not tell you that you are compliant: a mapped control means
the two standards ask for the same thing, not that you have done it.
Try another pair ยท
Today's edition