ASC-PC / Knowledge Base / Compliance

FSSC 22000 Pest Control Requirements: ISO 22002-1 Clause 12 Explained

FSSC 22000 is the certification scheme most South African food and beverage manufacturers use to satisfy retailer and export requirements recognised by the Global Food Safety Initiative (GFSI). Pest management sits inside it as a prerequisite programme, not a headline clause, which is exactly why it catches sites out. Auditors work from a specific technical document, ISO/TS 22002-1:2009 clause 12, and they expect your programme's structure to mirror its six sub-clauses almost word for word. This article breaks clause 12 down sub-clause by sub-clause, explains where FSSC 22000's additional requirements touch pest management, and maps every requirement to the South African law and standard that governs how it must be executed on the ground.

Key takeaways

  • FSSC 22000 certification = ISO 22000 (management system + HACCP) + a sector-specific PRP standard (ISO/TS 22002-1 for food manufacturing) + FSSC's own additional requirements.
  • Pest management lives in ISO/TS 22002-1 clause 12, with six sub-clauses: 12.1 General, 12.2 Programmes, 12.3 Preventing access, 12.4 Harbourage and infestations, 12.5 Monitoring and detection, 12.6 Eradication.
  • Pest management is a prerequisite programme (PRP) or operational PRP, it is not a Critical Control Point, and it is not managed with CCP critical limits.
  • Every pesticide applied on a certified South African site must carry an Act 36 of 1947 registration number, and application must follow SANS 10133.
  • FSSC v6's additional requirements on management of services and verification apply directly to an outsourced pest control contract.

How pest control fits into the FSSC 22000 scheme structure

FSSC 22000 is not a single standard, it is a certification scheme built from three layers, and understanding the layering is the fastest way to understand why pest control documentation looks the way it does.

  • Layer 1, ISO 22000: the management system standard. It requires a documented food safety policy, hazard analysis, a HACCP plan for Critical Control Points, and prerequisite programmes (PRPs) that create the hygienic environment the HACCP plan depends on.
  • Layer 2, sector PRP standard: for food manufacturing this is ISO/TS 22002-1:2009, Prerequisite programmes on food safety, Part 1. It translates the generic PRP requirement in ISO 22000 into eighteen specific clauses covering everything from building layout to waste management to pest management (clause 12).
  • Layer 3, FSSC additional requirements: scheme-specific requirements the FSSC Foundation adds on top, covering things ISO 22000 and ISO/TS 22002-1 do not fully address, food fraud, food defense, management of allergens, and, relevant here, management of services and product labelling. FSSC 22000 (current as of this writing) tightened several of these, including requirements on how outsourced services such as pest control are specified, monitored and verified.

Pest management therefore is not an ISO 22000 clause at all, it is a prerequisite programme specified in the sector standard, verified through the ISO 22000 management system, and subject to FSSC's additional expectations on outsourcing. Auditors will ask to see your hazard analysis reference pest management as a PRP, and they will separately check the technical detail against ISO/TS 22002-1 clause 12.

ISO/TS 22002-1 clause 12: Pest management, sub-clause by sub-clause

Clause 12 is titled simply "Pest management" and is broken into six sub-clauses. Each one maps to a specific, checkable element of a working programme.

12.1 General

The organisation must have a pest control programme in place, and must ensure it does not present a risk to product safety. This is the umbrella statement, it establishes that pest management is mandatory and that the means of controlling pests (traps, baits, chemicals) must themselves be assessed for the risk they introduce, which is why bait stations are tamper-resistant, secured and mapped rather than placed loosely around a production floor.

12.2 Pest management programmes

The organisation must appoint competent internal or external personnel for pest control activities. Where a contractor is used, the standard expects a defined scope, clear identification of the pests covered, and evidence that the contractor is competent, in South Africa this means a technician registered as a pest control operator (PCO) under Act 36 of 1947. This sub-clause is also where auditors check that the programme is proactive: risk-assessed, site-specific, and reviewed, not a generic annual service. It is the difference between a structured pest control contract and a grudge purchase renewed each year without review.

12.3 Preventing access

Buildings must be maintained in good repair to prevent pest access and eliminate potential harbourage: door seals and brush strips, screened windows and vents, sealed wall and roof penetrations, air curtains at goods-receiving doors, and drainage covered to stop rodent entry from below. This sub-clause typically generates the most corrective actions at first-time certification, because proofing gaps accumulate through ordinary maintenance, a conduit run through a wall, a replaced door without a new seal, long after the original proofing survey.

12.4 Harbourage and infestations

Storage practices and housekeeping must remove conditions that harbour pests: stock rotated and off the floor, no void spaces behind equipment, vegetation kept back from the building, and waste areas kept clean and pest-proof. A pest audit and a hygiene audit flag the same root causes from different angles: cardboard accumulation that harbours Blattella germanica (German cockroach), or spilt grain along a conveyor that draws Mus musculus (house mouse).

12.5 Monitoring and detection

This is the data engine of the whole programme. The standard requires monitoring devices, rodent bait stations, mechanical traps, insect light traps, pheromone monitors, positioned according to a documented risk assessment, mapped and numbered, inspected at a defined frequency, with activity recorded and trended over time. Auditors expect a station map that matches the floor exactly, a justified inspection frequency, and trend analysis that feeds back into the risk assessment, a spike in rodent activity along one wall in winter should trigger a proofing review, not just another bait refill. Species identification matters: distinguishing Rattus norvegicus (Norway rat) activity from Rattus rattus (roof rat) changes where you look for the entry point, since the former burrows at ground level and the latter climbs and nests high.

12.6 Eradication

Where pest activity is detected, action must be taken immediately to eliminate infestation and prevent recontamination of product, materials or premises. Only legally approved, registered pesticides may be applied, and only by trained, competent, authorised persons, with full records of what was applied, where, when, at what concentration and by whom. In South Africa this sub-clause is inseparable from Act 36 of 1947, every product must carry a current registration (L-number) for the specific pest and site type, and from SANS 10133, the national application standard governing how the product is mixed, applied and recorded on food premises.

Not a CCP: pest management is verified and monitored like any PRP or operational PRP, through inspection frequency, records and trend analysis, not through CCP-style critical limits and deviation procedures. If your HACCP team is writing "critical limit: zero rodent activity" against pest management, that is a documentation error auditors will query; the correct mechanism is oPRP monitoring criteria with a defined action level, feeding corrective action rather than a product hold.

FSSC 22000 additional requirements that touch pest control

Beyond ISO/TS 22002-1, FSSC 22000 adds scheme-specific requirements that apply directly to how a pest control contract is managed, even though pest control is not named as an FSSC additional requirement in isolation.

  • Management of services and purchased materials: where pest control is outsourced, as for most South African food manufacturers, the organisation must specify requirements to the provider, verify performance, and retain evidence. A signed SLA referencing SANS 10133 and Act 36 registration, plus proof of PCO registration, answers this requirement.
  • Verification activities: v6 places renewed emphasis on verifying PRPs work as intended, not merely that they exist on paper. The 12.5 trend analysis must demonstrably feed decisions, proofing repairs, adjusted frequency, hazard analysis review, not sit in a folder.
  • Food defense and food fraud: both intersect with pest management where chemical storage and access control are concerned; an unsecured chemical store is both a pest non-conformance and a food defense vulnerability.

Applying clause 12 correctly in South Africa

The technical content of ISO/TS 22002-1 clause 12 is international, but the legal and technical framework you use to satisfy it is entirely local. Three South African references do the work:

RequirementSouth African reference
Registration of pesticides used (12.6)Act 36 of 1947, Fertilizers, Farm Feeds, Agricultural Remedies and Stock Remedies Act
Application method, dilution, equipment (12.6)SANS 10133, Application of pesticides for the control of household and industrial pests
Competence of persons applying pesticides (12.2, 12.6)Registered pest control operator (PCO) status, Department of Agriculture, Land Reform and Rural Development
Underlying food premises hygiene contextRegulation R638 and SANS 10049

A pest management programme designed against clause 12 but executed by unregistered technicians using unregistered products is not compliant, however thorough the paperwork looks. That is why ASC Pest Control designs every programme around HACCP-compliant integrated pest management (IPM), using only Act 36 registered products applied by registered PCOs to the SANS 10133 standard, the same discipline whether the site is certifying to FSSC 22000, ISO 22000 directly, or BRCGS. We serve certified manufacturers across Gauteng and the Eastern Cape.

In practice: at FSSC 22000 surveillance audits we support across Gauteng and the Eastern Cape, the clause 12 review typically takes under ten minutes when the site can produce a current station map, twelve months of trended service data, and PCO certificates that match the technician who signed the last report, all generated in one document through myASConline.

Frequently asked questions

Is pest management a CCP under FSSC 22000?

No. Pest management is a prerequisite programme, addressed under ISO/TS 22002-1:2009 clause 12, not a Critical Control Point in the HACCP plan. It may be elevated to an operational PRP where risk warrants, but it is monitored through inspection frequency and trend analysis, not CCP critical limits.

What does ISO/TS 22002-1 clause 12 require for pest management?

A documented programme covering general responsibilities, competent personnel, physical proofing and exclusion, storage and housekeeping practices that prevent harbourage, a mapped monitoring and detection system with a defined inspection frequency and trend analysis, and eradication procedures using only approved, legally registered pesticides applied by competent, authorised persons with full records.

Which South African regulations apply to pest control under FSSC 22000?

Pesticides must be registered under Act 36 of 1947, and applications must follow SANS 10133. Technicians must be registered pest control operators with the Department of Agriculture, and food premises hygiene also falls under Regulation R638 and SANS 10049.

ASC Pest Control
ASC Pest Control, written by food safety auditors ASC Pest Control is part of the ASC Food Safety Consultants group: the only pest control company in South Africa owned by accredited food safety specialists. Registered PCOs (Act 36 of 1947), SANS 10133 aligned.

Next Step

Pass your FSSC 22000 clause 12 review with confidence.

Book a no-obligation site audit and assessment and see the myASConline one-click audit pack on your own facility's data.

Book Now