Templates and records · ISO 22000 · Clause 8.2

ISO 22000 prerequisite programmes (PRP) plan template

Cleaning, pests, water, maintenance, personal hygiene, allergens: the ground the HACCP plan stands on. Without it, any hazard analysis is left hanging in mid-air.

In one sentence

The prerequisite programmes plan sets out, for each PRP — cleaning, pest control, water, maintenance, personal hygiene, suppliers, allergens and the rest — its scope, owner, activities, monitoring and verification, because clause 8.2.4 of ISO 22000 requires the documented information to specify how they are selected, established, monitored and verified.

Content reviewed on 17 October 2026

Where the standard requires it: ISO 22000 · Clause 8.2 Clauses are cited using the numbering of ISO 22000:2018, the current edition. ISO is preparing a third edition that may renumber them; when it is published it will have its own transition period.
Type of information: Mandatory document Documented information to be maintained (8.2.4)
Who fills it in: The food safety team It approves the PRPs; each programme has someone responsible for carrying it out, and verification is done by someone else
When: Before the hazard analysis It is reviewed when premises, equipment, products or the applicable ISO 22002 part change
How long it is kept: Current and previous versions It is a document: it is kept up to date, and it is worth keeping superseded versions to explain the changes

What the standard requires

What ISO 22000 demands and what it leaves to your judgement

The standard asks you to establish, implement, maintain and update the PRPs the organisation needs to facilitate the prevention or reduction of contaminants in products, processes and the work environment. They must be appropriate to the business and its context, implemented across the entire production system and approved by the food safety team.

When selecting them you must take into account the applicable part of the ISO 22002 series — since 2025, ISO 22002-100 for the common ones plus the sector part — legislation, customer requirements and Codex codes of practice. The standard lists aspects to be considered: premises and their layout, water, air and energy utilities, pests, waste, suitability of equipment, supplier approval, receipt and storage, cross-contamination, cleaning, personal hygiene and consumer information.

The format is free: a single document with a sheet per programme or one procedure per PRP are equally valid. What is not enough is a list of headings without the monitoring and verification of each.

Read it in context: Prerequisites, traceability and emergencies, in the ISO 22000 Academy

Structure

Fields the template should include

Programme name and reference to the ISO 22002 part or code it is based on
Scope: areas, lines, equipment or materials it applies to
Person responsible for carrying it out and person responsible for verifying it
Activities, methods and products used
Frequency
Monitoring: what is checked, how and with which record
Acceptance criterion and action if it is not met
Verification: method, frequency and record
Date of approval by the food safety team and version

Example

Example: cleaning and disinfection PRP sheet for the soup line

Company, people and figures are fictitious: the example only shows what a properly completed record looks like.

Field	Content
Programme	PRP-04 Cleaning and disinfection · ISO 22002-100 and 22002-1
Scope	Soup line 2: kettle, heat exchanger, filler and conveyors
Responsibilities	Carried out by: shift cleaning team · Verified by: quality technician
Method	Clean-in-place (CIP) of the circuit and manual cleaning of the filler according to work instruction WI-04-2
Frequency	At the end of each day and at every product changeover involving different allergens
Monitoring	Cleaning sheet signed per shift and detergent concentration measured at every CIP
Criterion	No visible residue; concentration within the range on the chemical's data sheet
Verification	Weekly ATP bioluminescence at five points and monthly microbiological swab
Approval	Food safety team · version 3 · 12 January 2026

At the audit

Mistakes auditors commonly flag

The cleaning plan says what to clean but not how you check that it is clean.
Programmes copied from a sector guide that mention equipment or areas the plant does not have.
Verification is done by the same person who carries out the cleaning.
The PRPs were not reviewed after a new line was installed.
ISO/TS 22002-1:2009 is cited without considering the series published in 2025.

In Kimobox

How this record is kept in Kimobox

1Each PRP is a plan with its scheduled tasks: cleaning, pest control and maintenance with daily records.
2If a task is not recorded on time, the system alerts the person responsible to the delay.
3Verification is scheduled with a different owner and its results are linked to the programme.
4The plan document comes with version control, approval and read receipts.

Frequently asked questions

What people ask us before getting started

What is the difference between a PRP and an OPRP?

A PRP maintains general hygiene conditions and is not aimed at a specific hazard. An OPRP is a control measure chosen in the hazard analysis for a significant hazard and monitored against an action criterion, which is why it forms part of the hazard control plan.

Is following ISO 22002 mandatory?

ISO 22000 asks you to take it into account, not to apply it to the letter. FSSC 22000, on the other hand, requires the relevant sector part. If you certify to ISO 22000 alone, you can justify other codes or guides, but you have to explain the choice.

Keep your ISO 22000 records without loose templates

We'll show you the module running with data similar to yours.

Request a demo

Keep exploring