BRCGS vs FSSC 22000: Which Audit Your Retail Buyer Accepts

BRCGS and FSSC 22000 are both food safety certification schemes recognised by the Global Food Safety Initiative, which means a buyer asking for GFSI-recognised certification will in principle accept either. The practical difference is that they report results differently, they are built on different foundations, and individual retailers have entrenched preferences that override the theory.

For a beverage manufacturer the decision is commercial rather than technical. This article compares scope, reporting, unannounced audit treatment and retailer recognition, and sets out which channels tend to ask for which.

What is the difference between BRCGS and FSSC 22000?

BRCGS is a prescriptive standard written as a single document of detailed requirements, and audits produce a graded result. FSSC 22000 is a scheme built on the ISO 22000 management system, combined with sector-specific prerequisite programme requirements and a set of additional scheme requirements, and audits produce a pass or fail outcome rather than a grade.

That difference in architecture shapes everything else. A prescriptive standard tells a site what to do; a management system standard tells a site what outcomes to achieve and expects the site to design the controls. Both routes reach a defensible food safety system, but they suit different organisations.

What does each standard cover?

Both cover the ground a beverage buyer cares about: hazard analysis, prerequisite programmes, site and equipment standards, product control, process control, personnel practices and food defence. Both require a documented management commitment and internal audit programme, and both require traceability that can be demonstrated on request.

The differences in emphasis are worth knowing before choosing:

• Structure of the requirements. BRCGS states requirements clause by clause in operational language. FSSC 22000 references ISO 22000 for the management system and a separate technical specification for the prerequisite programmes relevant to the sector.
• Management system depth. FSSC 22000 carries the full ISO management system apparatus, which integrates naturally with other ISO standards a company may already hold.
• Prescription level. BRCGS gives more direct instruction, which shortens implementation for a site without a mature management system.
• Sector specificity. FSSC 22000 applies a prerequisite specification matched to the sector, so the requirements for a beverage plant differ from those for a packaging manufacturer.

How is the result reported?

This is the difference buyers notice first. BRCGS issues a letter grade derived from the number and severity of non-conformities raised at the audit, so a certificate communicates not only that the site passed but how comfortably. FSSC 22000 issues a certificate without a grade, so the outcome is binary and the detail sits in the audit report rather than on the certificate.

The commercial consequence is that a BRCGS grade can be written into a purchasing policy as a minimum, and buyers in some channels do exactly that. A supplier holding FSSC 22000 cannot answer a request for a minimum grade in the same terms, which occasionally causes friction in a tender even though the underlying system may be equally robust.

Neither approach is superior. Grading gives a buyer a quick comparative signal; the absence of grading avoids the incentive to manage the score rather than the system. What matters is knowing which one the buyer expects to see.

How do unannounced audits work?

Unannounced auditing is increasingly the differentiator, because buyers treat it as better evidence of everyday practice than a scheduled visit. The two schemes approach it differently.

Under BRCGS, unannounced auditing is offered as a defined programme that a site opts into, and the resulting certificate is marked to show it. Retailers that value the signal often ask suppliers to enrol, and in some cases require it. Under FSSC 22000, an unannounced audit is built into the certification cycle rather than being optional, so every certified site can expect one within the cycle regardless of buyer pressure.

For a manufacturer the planning implication is the same in both cases: the site has to be audit-ready continuously rather than for a known date. That changes how documentation, training records and hygiene routines are maintained, and it is the single largest operational difference between holding a certificate and running the system behind it.

Which standard do retailers actually ask for?

In principle GFSI recognition makes the schemes interchangeable, and many buyers do accept any recognised scheme. In practice, preferences cluster by region and by channel, and a supplier selling into several markets should expect to encounter more than one expectation.

• United Kingdom and Ireland retail. BRCGS is the familiar default, reflecting its origin in British retail, and specifying a minimum grade is common.
• Continental European retail. FSSC 22000 is widely held and accepted, though some retailers in Germany and France have their own long-standing preference for a different recognised scheme.
• North America. Several recognised schemes circulate, and buyers are generally more flexible provided the scheme is GFSI recognised and the audit report is available.
• Australia and New Zealand. Buyers commonly accept a range of recognised schemes; the expectations are described in the article on beverage certifications for Australian importers.
• Branded manufacturers and co-packing clients. Often prefer FSSC 22000, because it integrates with the ISO management systems they already operate.

The reliable approach is to ask the buyer directly during qualification rather than to infer from region. It is a short question and the answer determines a multi-year commitment.

What does certification involve?

Both schemes require a certification body accredited for that scheme, a documented system in place and operating, evidence that the system has been running long enough to generate records, and a site audit. Certification is then maintained through a cycle of surveillance or recertification audits rather than granted permanently.

The preparation effort depends far more on the starting point than on the scheme chosen. A site already operating a mature hazard analysis system with disciplined record keeping is close to either standard. A site building the system from scratch faces a substantial project in both cases, typically involving gap analysis, documentation, staff training, a period of operation to generate records, and an internal audit before the certification body is invited.

Costs fall into three groups: the certification body fee, the internal cost of preparation and staff time, and any capital work the gap analysis identifies. The third is the variable that most often drives the total, and it is scheme-independent, since both standards expect the same physical controls.

What the certificate does not tell a buyer

A certificate confirms that a recognised system met the standard on the audit date, for the scope stated on the certificate itself. Three limitations follow from that, and each is a common source of misunderstanding during supplier qualification.

1. Scope is specific. The certificate names the products and processes audited. A site certified for hot-filled juice is not automatically certified for an aseptic line installed afterwards, and a buyer should read the scope statement rather than the logo.
2. It is a point in time. Performance between audits is evidenced by the site’s own records, not by the certificate, which is why unannounced auditing has become a differentiator.
3. It says nothing about product specification. Food safety certification and product conformity are separate questions. A certified site can still ship a batch that fails an agreed specification, which is what the release procedure and the analytical documentation exist to prevent.

Experienced buyers therefore treat the certificate as an entry requirement and place their real weight on the audit report, the scope, the corrective action history and the batch documentation that accompanies each shipment.

Which should a beverage manufacturer choose?

Choose according to who buys from you and what you already operate. Where the customer base is concentrated in UK retail, BRCGS removes friction. Where the business already runs ISO management systems, or supplies branded manufacturers and co-packing clients, FSSC 22000 integrates with less duplication.

Some manufacturers hold both, usually because their customer base spans channels with entrenched preferences. That is a legitimate strategy but it doubles the audit burden, and it is worth confirming that the second certificate genuinely unlocks business rather than satisfying a preference the buyer would have waived.

For buyers evaluating a supplier, the certificate is a starting point rather than a conclusion. What it demonstrates is that a recognised system was in place on the audit date. The wider evidence pack a buyer should request is set out in the document pack buyers need, and the on-site verification steps in the supplier audit checklist.

Frequently asked questions

Is one standard harder to achieve than the other?

Neither is consistently harder. BRCGS is more prescriptive, which makes the requirements easier to interpret but leaves less flexibility in how they are met. FSSC 22000 expects the site to design its own controls against stated outcomes, which suits organisations with management system experience and is demanding for those without it.

Does a certificate mean every batch is compliant?

No. Certification shows that a system meeting the standard was in place and operating at the time of the audit. Batch-level assurance comes from the specification, the analytical results and the release procedure, which is why buyers request both the certificate and the batch documentation.

How does ISO 22000 fit alongside these?

ISO 22000 is the management system standard that FSSC 22000 is built on, but on its own it is not GFSI recognised. Sites sometimes hold ISO 22000 and later add the sector prerequisites to reach FSSC 22000. The distinction is explained in the article on ISO 22000 versus FSSC 22000.

Can a buyer insist on a specific scheme?

Yes. GFSI recognition establishes equivalence for benchmarking purposes, but a buyer is free to set its own supplier requirements and many do. This is why the question belongs in the first qualification conversation rather than after a certification decision has been made.

Deciding before you commit

BRCGS and FSSC 22000 are both credible routes to GFSI-recognised certification, and the underlying food safety expectations overlap heavily. The differences that matter commercially are the graded certificate, the treatment of unannounced audits, and the preferences of the channel a manufacturer sells into.

The practical sequence is to ask each significant buyer which scheme they require, check whether an ISO management system is already in place, and only then select. ACMFOOD maintains food safety certification as part of its quality and food safety programme, and can supply current certificates and audit documentation to buyers during supplier qualification.