EthicalHub

Certification ladder

What’s the next step
after HACCP?

Where you are now, what the next level asks of you, and how to choose between SQF, BRCGS and FSSC 22000 — without starting your food safety system again.

The short answer

After a HACCP-based food safety program, the next step for most manufacturers is GFSI-recognised certification. The three schemes most used in Australia are SQF, BRCGS and FSSC 22000. They sit at the same level — you choose one, usually the one your customers ask for. Stepping up keeps your HACCP plan and prerequisite programs, and adds management-system requirements like food safety culture, internal audits and management review.

Where are you now?

The certification ladder

Each step builds on the records you already keep.

1

Food safety program

The legal baseline. In Victoria, most businesses handling high-risk food keep a food safety program under the Food Act 1984, audited by council or an approved auditor.

2

HACCP certification

A third-party certificate that your HACCP system follows Codex principles. Often enough for food service and smaller trade customers.

3

GFSI certification

SQF, BRCGS or FSSC 22000. What major retailers, food service chains and many exporters expect. Some schemes offer an entry-level program to build towards it.

4

Customer add-ons

Retailer requirements on top of your GFSI certificate, such as Coles Supplier Requirements, Woolworths Supplier Excellence or HARPS for produce.

Your obligations depend on your business type and regulator. Confirm them with your council, certifier or Safe Food Victoria. See retailer audit requirements.

Choosing a scheme

SQF vs BRCGS vs FSSC 22000

All three are GFSI-recognised. The right one is usually the one your customers will accept.

SQFBRCGS Food SafetyFSSC 22000
Scheme ownerSQF Institute (United States)BRCGS (United Kingdom)Foundation FSSC (Netherlands)
How it’s builtA single code covering food safety system and good manufacturing practiceA single, detailed standard with specific site and product requirementsISO 22000, plus a sector prerequisite program specification, plus FSSC’s own additional requirements
StyleStructured code with clear modules by industry sectorPrescriptive — tells you what good looks like in detailManagement-system based, like other ISO standards
Audit resultScored ratingGraded resultCertified or not, with non-conformances graded
Full guideSQF in Australia →BRCGS in Australia →FSSC 22000 in Australia →
Worth a look if…Your customers name SQF, or you want a sector-specific codeYour customers or export markets name BRCGSYou already run ISO systems such as ISO 9001

Schemes are updated regularly. Check the current version with the scheme owner or your certifier before you start.

The real gap list

What changes when you step up to GFSI

Your HACCP plan and prerequisite programs stay. These are what most sites have to add or formalise.

Management commitment

A documented food safety policy, clear responsibilities, resourcing, and regular management review with minutes.

Food safety culture

Evidence that food safety is planned, measured and improved across the business, not just on paper.

Internal audits

A schedule covering the whole system, trained internal auditors, and findings closed out with evidence.

Food defence and food fraud

Vulnerability assessments for deliberate contamination and ingredient fraud, with controls where needed.

Verification and validation

Proof that your controls work, such as environmental monitoring, calibration and validated process steps.

Document and record control

Version-controlled procedures and records that can be produced quickly, clause by clause.

Plan in months, not weeks

Most sites need time to build records before the first certification audit. Start with an honest gap check.

Check where you stand
Go deeper

Certification guides

More guides are added as they’re published.

SQF certification in AustraliaRead →
BRCGS certification in AustraliaRead →
FSSC 22000 in AustraliaRead →
SQF vs BRCGS vs FSSC 22000: which fits an SME?Coming soon
Moving from HACCP to GFSI: the real gap listComing soon
How long does SQF certification take?Read →
Questions

HACCP to GFSI certification: common questions

What comes after HACCP certification?
For most manufacturers the next step is GFSI-recognised certification: SQF, BRCGS or FSSC 22000. It keeps your HACCP plan and prerequisite programs and adds management-system requirements such as food safety culture, internal audits and management review.
Is BRCGS higher than SQF?
No. SQF, BRCGS and FSSC 22000 are all GFSI-recognised and sit at the same level. They differ in structure and style, not seniority. Choose the one your customers and target markets accept.
Which GFSI scheme should I choose?
Start with your customers: ask which schemes they accept. If they accept several, consider how each is structured — BRCGS is prescriptive, FSSC 22000 follows the ISO management-system approach, and SQF uses a code with sector modules.
Do I have to start my food safety system again to get GFSI certified?
No. Your HACCP plan, prerequisite programs and records carry forward. You add and formalise the extra requirements of your chosen scheme.
How long does it take to get GFSI certified?
It depends on how complete your current system and records are. Plan in months, not weeks: most sites need time to build a history of records before the certification audit.

Step up without starting over.

EthicalHub keeps your HACCP records and adds scheme workflows for SQF, BRCGS and FSSC 22000 on the same platform.

Scroll to Top