Framework overlap

Does ISO 27019 cover ISO 22000?

You hold ISO 27019 and have been told to do ISO 22000. Here is how much overlaps, control by control.

10% of ISO 22000 you already have

ISO 27019 already covers about 10% of ISO 22000, leaving 35 of 39 controls as genuinely new work.

Already covered 1 Likely covered 3 New work 35

What is genuinely new work

Nothing in ISO 27019 reaches these. This is the list to scope.

ISO22000-01
OH&S policy and commitment
ISO22000-04
OH&S objectives and action plans
ISO22000-05
Worker consultation and participation
ISO22000-06
Elimination and substitution of hazards
ISO22000-07
Engineering and administrative controls
ISO22000-08
Personal protective equipment management
ISO22000-09
Emergency preparedness and response
ISO22000-10
Contractor and visitor safety management
ISO22000-10.1
Nonconformity and corrective action
ISO22000-10.3
Continual improvement
ISO22000-11
Incident investigation and reporting
ISO22000-12
OH&S monitoring and measurement
ISO22000-13
Internal OH&S audit program
ISO22000-14
Management review and continual improvement
ISO22000-4.1
Understanding the organization and its context
ISO22000-4.2
Needs and expectations of interested parties
ISO22000-4.3
Scope of the FSMS
ISO22000-5.2
Food safety policy
ISO22000-5.3
Roles, responsibilities, and authorities
ISO22000-6.1
Actions to address risks and opportunities
ISO22000-6.2
FSMS objectives and planning
ISO22000-7.1
Resources
ISO22000-7.2
Competence
ISO22000-7.4
Communication
ISO22000-7.5
Documented information
ISO22000-8.2
Prerequisite programmes (PRPs)
ISO22000-8.3
Traceability system
ISO22000-8.4
Emergency preparedness and response
ISO22000-8.5
Hazard control (HACCP)
ISO22000-8.6
Updating PRPs and hazard control plan
ISO22000-8.7
Control of monitoring and measuring
ISO22000-8.9
Control of nonconforming product
ISO22000-9.1
Monitoring, measurement, analysis, evaluation
ISO22000-9.2
Internal audit
ISO22000-9.3
Management review
Show the 4 you already have
ISO22000-02
Hazard identification and risk assessment
ISO22000-03
Legal and regulatory compliance
ISO22000-15
Corrective actions and lessons learned
ISO22000-5.1
Leadership and commitment

How this is calculated

Already covered means a mapping runs from a control in ISO 27019 to that control. Likely covered means no direct mapping exists but both frameworks map to the same control in a third standard. New work means neither. We keep those separate rather than adding them into one friendlier number, because blending them would present a two-hop inference as a verified fact.

Coverage is not symmetric. Run it the other way and you will get a different number; both are correct.

From 332,959 cross-framework control mappings across 723 frameworks, 531 of them verified against their source documents. It does not tell you that you are compliant: a mapped control means the two standards ask for the same thing, not that you have done it.

Try another pair ยท Today's edition