FSSC 22000 Version 6: What Changed and What Supplement OEM Buyers Need to Know

Direct answer: FSSC 22000 Version 6 is the current edition of the GFSI-recognised food safety management system certification. Published in 2023, it replaced Version 5.1 with material changes that supplement OEM buyers should understand before auditing a contract manufacturer. The headline additions are explicit food safety culture requirements, formally integrated food fraud and food defense clauses, enhanced management of outsourced services, and strengthened communication expectations across the management system. For brand owners evaluating a Malaysian supplement manufacturer, Version 6 means your quality audit now probes the cultural and human dimensions of food safety alongside documented procedures — not just whether SOPs exist, but whether the organisation lives them. Bionutricia maintains its FSSC 22000 certification under Version 6 at its Sungai Buloh facility, alongside GMP, HACCP, JAKIM Halal, US FDA registration, MeSTI and NanoVerify.

What FSSC 22000 Version 6 Changed

FSSC 22000 is a complete food safety management system certification built on ISO 22000:2018, sector-specific pre-requisite programmes (PRPs), and additional FSSC requirements. It is recognised by the Global Food Safety Initiative (GFSI), which makes it the benchmark many multinational buyers write into their supplier qualification frameworks. The existing article on this site, FSSC 22000 vs ISO 22000 for Supplement OEMs, covers how the two standards differ and why FSSC has become the 2026 procurement default. This article focuses specifically on what changed when Version 6 replaced Version 5.1 — and what those changes mean when you audit a supplement OEM.

Version 6 was published by the FSSC 22000 Foundation in 2023, with a transition period during which manufacturers already certified under Version 5.1 migrated to the new requirements. By 2024, all FSSC 22000 audits — whether initial certification, surveillance, or recertification — were conducted against Version 6, and any Version 5.1 certificate was superseded.

The changes touch four areas: food safety culture, food fraud and food defense, management of outsourced services, and communication and management review.

Food Safety Culture: The Headline Addition

The most significant change in Version 6 is the introduction of explicit food safety culture requirements. Under Version 5.1, food safety culture was encouraged but not mandated. Version 6 makes it a formal requirement: organisations must establish, implement and maintain a food safety culture that demonstrates leadership commitment, engages employees at all levels, and communicates the importance of food safety throughout the organisation.

For supplement OEM buyers, this means your audit of a contract manufacturer should go beyond checking whether documented procedures exist. Ask how the manufacturer trains its production staff on food safety, how it measures engagement, and how leadership demonstrates commitment. A factory with immaculate documentation but no visible food safety culture programme is not compliant under Version 6.

Food Fraud and Food Defense: Integrated Into the Core

In Version 5.1, food fraud (including economically motivated adulteration) and food defense (protection against intentional contamination) were added as temporary supplementary requirements. Version 6 formally integrates both into the core certification, removing their temporary status.

What this means practically: a supplement manufacturer must have a documented vulnerability assessment for food fraud covering all raw materials and ingredients, a mitigation plan for identified vulnerabilities, and a food defense plan addressing intentional contamination threats. For a botanical extract OEM handling hundreds of raw materials, this is a substantial compliance effort — and it is exactly the documentation a buyer should request.

Enhanced Management of Outsourced Services

Version 6 strengthened requirements around outsourced services and supplier management. A manufacturer that uses third-party laboratories, contract grinding or spray-drying services, external warehouses, or logistics providers must demonstrate that those service providers operate under controls equivalent to its own food safety management system.

For supplement OEM buyers, this is particularly relevant. A contract manufacturer may outsource analytical testing, packaging supply, or cold-chain storage. Under Version 6, the FSSC 22000 certification covers not just what happens inside the manufacturer’s own walls but how it manages the food safety performance of every service provider in its supply chain. Ask for the supplier qualification dossier — it should include service provider approvals, scope of work, and verification activities.

The Transition Timeline

Version 6 was published in 2023, with a transition period allowing certified manufacturers to migrate from Version 5.1. By 2024, all FSSC 22000 audits — whether initial certification, surveillance, or recertification — are conducted against Version 6. Any certificate issued under Version 5.1 has been superseded.

If a supplement manufacturer claims FSSC 22000 certification but cannot confirm which version they are certified against, or if their certificate still references Version 5.1, that is a red flag. The certificate should state FSSC 22000 Version 6, and the audit report should reference the Version 6 requirements.

What Supplement OEM Buyers Should Ask Under Version 6

The Version 6 changes translate into specific questions a brand owner should put to a prospective supplement OEM:

• Food safety culture: How does the manufacturer train production staff on food safety? Can they show engagement metrics or internal audit findings related to culture?
• Food fraud: Ask for the vulnerability assessment covering raw materials. Does it identify economically motivated adulteration risks for key ingredients?
• Food defense: Request the food defense plan. How does the facility restrict access to production and storage areas?
• Outsourced services: Which activities are outsourced (testing, storage, logistics)? What controls are in place for each service provider?
• Communication: How are food safety issues escalated internally? What is the process for notifying customers of a food safety event?

Bionutricia’s Certification Position

Bionutricia Manufacturing holds FSSC 22000 certification at its Sungai Buloh facility in Malaysia, maintained under the current Version 6 requirements. FSSC 22000 is one of seven certifications Bionutricia carries: FSSC 22000, GMP, HACCP, JAKIM Halal, US FDA facility registration, MeSTI, and NanoVerify. The full certification portfolio is documented on this published overview of Bionutricia’s certifications.

For brand owners, the relevance of Version 6 is that Bionutricia’s food safety management system is audited not just for documented procedures but for the cultural, fraud-prevention and supply-chain controls that the new requirements demand. The FSSC 22000 certificate confirms that the system has been independently assessed — but the audit findings, corrective actions and culture programme are what a buyer should request to verify.

Frequently Asked Questions

What is the difference between FSSC 22000 Version 5.1 and Version 6?

Version 6 formally integrated food fraud and food defense requirements that were temporary additions in Version 5.1, introduced mandatory food safety culture requirements, strengthened outsourced services management, and enhanced communication requirements. All FSSC 22000 audits since 2024 are conducted against Version 6.

Is FSSC 22000 the same as ISO 22000?

No. FSSC 22000 is built on ISO 22000:2018 but adds sector-specific PRPs and additional FSSC requirements. FSSC 22000 is GFSI-recognised; ISO 22000 alone is not. The detailed comparison is in our FSSC 22000 vs ISO 22000 article.

How do I check which version a manufacturer is certified against?

Request the current FSSC 22000 certificate. It should state Version 6. If the certificate still references Version 5.1, the certification has been superseded and may not be valid. The audit report should also reference the Version 6 requirements.

What does food safety culture mean in practice for a supplement OEM?

Under Version 6, food safety culture requires demonstrated leadership commitment, employee engagement at all levels, and communication of food safety importance throughout the organisation. A supplement manufacturer must show how it trains production staff, measures engagement, and ensures accountability for food safety practices — not just that it has documented procedures.

How does food fraud prevention apply to supplement manufacturing?

Supplement manufacturers handle botanical extracts, vitamins and functional ingredients that can be subject to economically motivated adulteration — substitution, dilution, or falsification of identity. Version 6 requires a documented vulnerability assessment and mitigation plan covering all raw materials. A buyer should request this assessment to verify that the manufacturer has evaluated fraud risks for each ingredient.

Related Guides

• FSSC 22000 vs ISO 22000 for Supplement OEMs in 2026: What B2B Buyers Actually Audit
• MeSTI vs GMP for Food & Supplement Makers: What Each Certification Means
• Which Malaysian Supplement Manufacturers Have Halal + FDA + FSSC 22000 Certification?

Start Your Supplement OEM Project

Bionutricia Manufacturing Sdn Bhd is a JAKIM-certified halal supplement OEM and contract manufacturer in Sungai Buloh, Malaysia, holding FSSC 22000 (Version 6), GMP, HACCP, US FDA registration, MeSTI and NanoVerify. Approved manufacturing formats include powder sachets, liquid sachets, gel sachets, pouch beverages, chewable tablets and liquid bottles. For quotations, formulation development, or to request the current FSSC 22000 certificate and audit findings, visit bionutricia.com.

Article by Bionutricia R&D Team. Last updated: 25 September 2026.