ZES Consulting · UEN 53395413D+65 8901 2255 · nachi@zesconsulting.com

ISO 22000 and HACCP Consultant, Singapore

Make your HACCP controls
audit-ready.

For Singapore central kitchens, caterers and food manufacturers, ZES prepares the ISO 22000 system your team uses before an independent certification audit. We build the HACCP plan, prerequisite-programme records, internal audit and management review around your food operation. EDGE supports ISO 22000 at up to 50% for SMEs and up to 30% for non-SMEs.

Send your food activity, headcount, number of sites, target certification date and any buyer or licence requirement. We reply within one working day. After a short call or site visit, you receive a written quote with the HACCP and document scope, plus a project timeline.

PSCMC certified · Lead Auditor course: ISO 9001, 14001, 45001 and 27001

A consultant reviewing food safety records in a Singapore food operation
One consultant.
From start to finish.
The consultant you meet is the consultant who stays with your project.
15-minute
pre-check
Check scope and EDGE before a quote
8–12 weeksTypical first-time timeline to certification audit*
1 working dayReply with the next step
Up to 50%EDGE support for eligible SMEs

Who ISO 22000 is for

Built around your food operation.

ISO 22000 is for food businesses that must show how hazards are controlled, who checks each control and what happens when a limit is missed. It is usually commissioned when a buyer asks for certification, a caterer wants its SFA-required FSMS to be certified, or a supply chain requires documented HACCP evidence.

Caterers and central kitchens

SFA requires catering businesses, including businesses that provide catering as an ancillary service, to implement a Food Safety Management System.

Food manufacturers and processors

For teams that need HACCP, prerequisite programmes, supplier control, traceability and recall controls in one system.

Suppliers to food buyers

For businesses asked by supermarkets, airlines, hotels, schools or MNCs for a certified food safety management system.

Food logistics and packaging

For operations that need hygiene, storage, transport, traceability and recall controls.

Before we quote. Send your food activity, headcount, number of sites, target certification date and any buyer or licence requirement. We reply within one working day, then confirm the scope in a short call or site visit before sending your written quote.

ISO 22000 certification process

From your food process to the audit.

We start with the food activities, products and sites that will appear on the certificate. Your team then uses the HACCP controls and records in normal work before an independent certification body carries out Stage 1 and Stage 2.

  1. 01Review the gaps

    We compare the controls, process flow and records you already use with ISO 22000 and HACCP requirements. You receive the actions needed before certification, named evidence and a project timeline.

  2. 02Build the FSMS and HACCP plan

    We prepare the food safety system for the agreed products, process steps and sites, including prerequisite programmes, hazard analysis, CCPs and OPRPs, validated limits, monitoring records and corrective actions.

  3. 03Use the controls and keep records

    Your team runs the agreed checks in normal work and keeps the monitoring logs, CCP checks and corrective-action records. The certification body needs to see a few weeks of this evidence before the audit.

  4. 04Check the system

    We carry out the internal audit with you. Your team closes the findings and management reviews the results, food-safety objectives and records before the certification audit.

  5. 05Meet the certification body

    An accredited certification body carries out Stage 1 for readiness and documents, then Stage 2 for implementation. It independently decides whether to issue the certificate.

ISO 22000 deliverables

The audit file starts with the controls your team uses.

Your quote identifies the food activities and sites on the certificate scope. After the gap assessment, we prepare the HACCP plan, CCP records and supporting procedures your team needs to use before Stage 2, not a standard document pack.

  • Food Safety Management System scope, policy and objectives
  • Food safety team roles and responsibilities
  • Hazard analysis and HACCP plan for your food process
  • Hazard control plan for CCPs and OPRPs, with critical limits, action criteria, monitoring and corrective-action records
  • Prerequisite programmes for cleaning, pest control, personal hygiene, allergens, waste and maintenance, plus calibration of monitoring equipment
  • Supplier control, traceability and recall procedures
  • Cross-contamination prevention and hygiene controls
  • Internal audit programme and audit records
  • Management review records and food-safety performance measures
  • Audit file and preparation for Stage 1 and Stage 2
  • Capability-building report and training records for your EDGE claim
Hazard Control Plan and RecordsSample extract
Process stepHazard / controlCritical limit (CCP) or action criterion (OPRP)CheckRecord ownerAction if not met
CookingTime and temperature control (CCP)Critical limit set for your productEach batchKitchen SupervisorHold product; investigate and record action
Chilled storageTemperature control (OPRP)Action criterion set for your productDailyStorepersonAssess stock; correct temperature and record action
DispatchTraceability record (system requirement, not a CCP)Not applicable. Lot and destination recordedEach deliveryDispatch CoordinatorStop dispatch until record is complete
Example only. Cooking is shown as a CCP, chilled storage as an OPRP and dispatch as a traceability record. Your hazard analysis decides which controls are CCPs, OPRPs or PRPs.

ISO 22000 consultancy cost

Check EDGE before you scope

15-minute
EDGE pre-check

At a 15-minute EDGE pre-check, we check whether ISO 22000 and your company appear eligible, the likely scope and quotations needed. The fee is quoted after the pre-check and a short call or site visit. It depends on food activity, headcount, sites and existing HACCP records. Certification body fees are separately quoted by the body. EDGE supports ISO 22000 at up to 50% for SMEs and up to 30% for non-SMEs. Apply before work or payment. Enterprise Singapore assesses each application.

Your ISO 22000 implementation quote lists

  • Gap assessment against ISO 22000 and HACCP requirements
  • Food Safety Management System documents and HACCP plan prepared with your team
  • Guidance for putting the controls and records into use
  • Internal audit and management review support
  • Preparation for the certification body's Stage 1 and Stage 2 audits

EDGE grant for ISO 22000

Support for food safety certification.

EDGE supports ISO 22000 Food Safety at up to 50% for SMEs and up to 30% for non-SMEs. It can cover professional service costs and first-year certification and testing costs. Your company must apply before work starts or any payment or deposit is made. Enterprise Singapore assesses each application. EDGE lists ISO 22000 for set sectors, so check that your sector is listed before you apply. For eligibility, the S$100,000 cap and the other standards, see our EDGE grant guide for Singapore businesses.

EDGE support by standardMaximum support for SMEs, for the ISO standards ZES works on. Non-SME rates are in the table.
ISO 14001up to 70%
ISO 50001up to 70%
ISO/IEC 27001up to 50%
ISO 22000up to 50%
ISO 41001up to 50%

Source: Enterprise Singapore EDGE Standards list, checked 30 September 2026. These are maximum rates. Enterprise Singapore assesses each application. Full list and conditions are in our EDGE grant guide.

EDGE support by standard
StandardSMEsNon-SMEs
ISO 14001up to 70%up to 50%
ISO 50001up to 70%up to 50%
ISO/IEC 27001up to 50%up to 30%
ISO 22000up to 50%up to 30%
ISO 41001up to 50%up to 30%

What EDGE can support

  • ZES consultancy for the ISO 22000 project (professional service costs)
  • The first-year certification audit, by a body accredited for ISO 22000 by SAC or an MRA-recognised accreditation body
  • First-year testing costs, where they form part of the certification and Enterprise Singapore accepts them
  • Costs from the application date, if the application is approved

What EDGE does not support

  • Surveillance audits after the first year
  • Renewal audits after the first year
  • GST
  • Software

The EDGE order of work

  1. 01Check scope and eligibility

    We confirm your ISO 22000 scope and check the basic EDGE conditions with you: registered and operating in Singapore, at least 30% local ownership, no earlier grant application for ISO 22000 (any version), and no work or payment made yet.

  2. 02Prepare the quotations

    ZES provides our proposal and quotation, plus a copy of Nachi Leong's SS 680 certificate. You also obtain the certification body's quotation and evidence of its accreditation.

  3. 03Apply with Corppass

    Your company applies on the Business Grants Portal with Corppass. Third parties cannot apply for you. Enterprise Singapore states 10 weeks for the outcome of a Standards application.

  4. 04Complete the ISO 22000 project

    After approval, we carry out the ISO 22000 certification project with your team. The grant-funded project must finish within 12 months of approval.

  5. 05Submit the claim

    After the work is completed and fully paid, your company claims with the capability-building report, training records and accredited certificate.

What goes into the application

  • ZES proposal and quotation for the ISO 22000 project
  • Nachi Leong's SS 680:2021 certificate (PSCMC)
  • Certification body quotation and accreditation details
  • One-year projection of revenue growth after the project
  • One-year projection of new jobs after the project, overall and for Singaporeans, with gross monthly salary above S$5,000

SS 680 vendor requirement. EDGE asks for the consultant's SS 680 certification with your application. Nachi Leong holds it as a PSCMC, and we give you the proposal, quotation and certificate copy for your file. Enterprise Singapore approves the consultant as part of each application.

Ask about EDGE on WhatsApp

ISO 22000 project timeline

Typically 8–12 weeks to the certification audit.

A first-time ISO 22000 project typically takes eight to 12 weeks from gap assessment to the certification audit. This assumes your team can put the controls into use and build a few weeks of monitoring logs and CCP checks before the audit.

What helps the project move

  • Existing HACCP controls and food-safety records we can review
  • One project contact who can coordinate food, quality and operations staff
  • Time for the team to use monitoring logs and CCP checks
  • A clear certificate scope, sites and target date

What can add time

  • No food-safety records yet, so more evidence needs to be built
  • Several sites, products or process steps on the certificate scope
  • Changes needed to the kitchen or factory layout
  • Audit dates that need to fit the certification body's schedule
  • Enterprise Singapore states 10 weeks for a Standards application outcome. Work done after you apply but before approval is at your own risk.

*The 8–12 weeks runs from the gap assessment to the certification audit. Your written quote reflects the food activities and sites in scope, existing record history, staff availability and the certification body's audit dates.

ISO 22000 audit preparation

What we check before the certification audit.

The certification body is independent from ZES. Before its Stage 1 and Stage 2 audits, we check that the HACCP plan matches the process flow, prerequisite programmes have evidence and the records show what your team did in normal work.

01

The scope matches the food operation

The certificate scope, process flow and HACCP plan cover the food activities, products and sites your team actually manages.

02

Hazards are assessed at each process step

Your food safety team has identified the hazards and controls from receiving through preparation, production, storage and dispatch, where relevant.

03

Critical limits have evidence

CCP limits, monitoring checks and corrective actions are clear. The records show what the team did when a limit was not met.

04

Prerequisite programmes have evidence

We check the cleaning schedule, sanitation checks, maintenance and calibration records, pest-control service reports and cross-contamination controls for the food activities in scope.

05

A lot can be traced from supplier to destination

We check that supplier, lot or batch and customer or delivery-destination information can be followed through the records. The withdrawal and recall procedure covers the certificate scope and has been tested with a mock recall.

06

The team has checked the system

Internal audit and management review are complete before the certification body samples the system and speaks with your team.

ZES project record

One person accountable for your food-safety project.

Nachi Leong, Principal Consultant, ZES Consulting
One consultant. From start to finish.

Nachi Leong, Principal Consultant

Nachi Leong leads every ZES project, with experience since 2014. You get direct answers from the consultant doing the work.

About Nachi Leong
  • One consultant

    The consultant you meet is the consultant who stays with your project.

  • PSCMC certified by TÜV SÜD

    Nachi is a Professional Singapore Certified Management Consultant under SS 680:2021.

  • ISO audit experience

    Completed Lead Auditor courses for ISO 9001, ISO 14001, ISO 45001 and ISO/IEC 27001, on IRCA- and Exemplar Global-certified courses. Held IRCA QMS Lead Auditor certification until 2017, with Lead Auditor experience.

  • Relevant recent work

    2026 work includes bizSAFE Level 3 preparation and a Risk Management audit for a food company, plus ISO 9001 certification preparation for a hospital laboratory.

  • Practical audit evidence

    The HACCP plan, CCP logs, prerequisite-programme records, internal audit and management review are prepared around the certificate scope.

  • SS 680 consultant certification

    Nachi is a PSCMC under SS 680:2021, the consultant certification EDGE asks for. Enterprise Singapore approves the consultant as part of each application.

Recent ISO preparation work

  • ISO 9001 implementationHospital laboratory
  • ISO 9001, ISO 45001 and bizSAFE Star recertification, plus ISO 14001M&E group, two companies
  • Standards adoption across six companiesAutomotive group
Client names withheld.

ISO 22000 FAQ

Before you assign the project to your team.

Short answers for Singapore food operations and procurement teams.

Is ISO 22000 mandatory in Singapore?

No. ISO 22000 certification is not generally mandatory in Singapore. SFA requires catering businesses, including businesses that provide catering as an ancillary service, to implement a Food Safety Management System. SFA says this can be certified or non-certified. ISO 22000:2018 is one of the certified FSMS certifications SFA recognises.

What is the difference between ISO 22000 and HACCP?

HACCP is the food-safety method inside ISO 22000. It covers hazard analysis, critical control points, critical limits, monitoring, corrective actions, verification and records. ISO 22000 adds OPRPs, defined prerequisite programmes and management-system requirements, including leadership, planning, internal audit, management review, supplier control, traceability, recall and continual improvement.

What is the difference between ISO 22000 and FSSC 22000?

FSSC 22000 includes ISO 22000, a sector prerequisite programme standard and extra requirements. It is recognised by GFSI and is often requested by large retailers and MNC buyers. ISO 22000 can be a step towards FSSC 22000. The right choice depends on what your customer, buyer or tender asks for.

How long does ISO 22000 certification take?

A first-time project typically takes eight to 12 weeks from gap assessment to certification audit. The certification body needs a few weeks of monitoring logs and CCP checks before the audit. Existing HACCP can shorten the work. Projects can take longer when there are no records yet or layout changes are needed.

How much does ISO 22000 certification cost?

ZES quotes ISO 22000 consultancy after a 15-minute EDGE pre-check and a short call or site visit. The scope depends on your food activity, headcount, sites and existing HACCP controls or records. Certification body audit fees are separate and quoted by the body.

What does my team need to do?

Choose one project contact and make the people responsible for food safety, production, kitchen operations, purchasing and dispatch available to explain the work. Your team confirms the scope, reviews the HACCP plan, uses the monitoring records, joins the internal audit and management review, and is available for certification-body interviews. ZES prepares the system with you.

Who issues the ISO 22000 certificate?

An accredited certification body independently carries out a two-stage audit and issues the ISO 22000 certificate. Stage 1 checks readiness and documents. Stage 2 checks implementation. For SFA-recognised ISO 22000 certification, the certification body is accredited by SAC or by an accreditation body that signs the IAF MLA. ZES prepares your team for the audit; the certification body audits and certifies.

What happens if the auditor raises findings?

Major findings must be closed, and minor findings need a corrective action plan the certification body accepts, before the certificate is issued. We help you work through the points and prepare the evidence it requests. The certification body decides when its requirements are met, so we do not promise an audit outcome.

How long is the ISO 22000 certificate valid?

The certificate is valid for three years, with yearly surveillance audits. At the end of the cycle, the certification body carries out recertification.

Can ISO 22000 get EDGE support?

Yes. EDGE supports ISO 22000 Food Safety, a Sector-specific Standards activity, at up to 50% for SMEs and up to 30% for non-SMEs. It supports professional service costs and first-year certification and testing costs. Your company must meet the programme conditions and apply before work or payment. Enterprise Singapore assesses each application.

Can we start ISO 22000 work before EDGE approval?

Apply first. Your company applies on the Business Grants Portal with Corppass before any work starts and before any payment or deposit. Third parties, including ZES, cannot apply for you. Enterprise Singapore states 10 weeks for the outcome of a Standards application. Work done after you apply but before approval is at your own risk, because those costs are covered only if the application is approved.

What does EDGE not cover for ISO 22000?

EDGE does not cover GST, software, surveillance audits after the first year or renewal audits after the first year. It supports first-year certification and testing only when provided by a qualifying accredited or MRA-recognised body. Check that all quotations separate those items before your company applies.

We already have HACCP. Can we still get EDGE support for ISO 22000?

Possibly. HACCP alone is not ISO 22000, and ZES can review your existing HACCP plan and build on it for the ISO 22000 project. EDGE eligibility also requires that your business has not applied before for grant support for ISO 22000, in any version. Your company must meet the other conditions and Enterprise Singapore assesses the application.

Can ISO 22000 combine with ISO 9001?

Yes. ISO 22000:2018 uses the same high-level management-system structure as ISO 9001. You can integrate shared requirements, then keep food-safety controls specific to ISO 22000.

Start your ISO 22000 project

Send the food-operation details. Get the written scope.

Send your food activity, headcount, number of sites, target certification date and any buyer or licence requirement. We reply within one working day. After a short call or site visit, you receive a written quote stating the HACCP and document scope, the work required and a realistic timeline to the certification body's Stage 1 and Stage 2 audits.

Tell us what you need.We reply within one working day.

Required. We use your details only to reply to your enquiry. See our privacy policy.