What this is
What is a food defense plan?
What is a food defense plan?
A written plan required under the FSMA Intentional Adulteration rule at 21 CFR Part 121, comprising five components: a vulnerability assessment identifying actionable process steps, mitigation strategies for each, procedures for monitoring, procedures for corrective actions, and procedures for verification. It addresses deliberate acts intended to cause wide-scale public health harm.
How is it different from a food safety plan?
A food safety plan under 21 CFR 117 addresses hazards that occur unintentionally or through economically motivated adulteration. A food defense plan addresses deliberate contamination intended to cause wide-scale harm. Different threat, different assessment method, different plan. A facility subject to both needs both, and one does not satisfy the other.
What is an actionable process step?
A point, step or procedure where a significant vulnerability exists and mitigation strategies can be applied. The rule requires the plan to explain not only which steps were identified as actionable, but why each point, step or procedure was or was not so identified, which is the part most often omitted.
Scope
When is a food defense plan required?
This plan covers deliberate contamination aimed at wide-scale harm. Adjacent threats have their own instruments and should not be folded in.
Use this template when
- Facilities required to register with FDA under section 415 that manufacture, process, pack or hold food, subject to the rule's exemptions
- Vulnerability assessment across process steps, whether by the key activity types method or a three-element evaluation
- Documenting mitigation strategies, monitoring, corrective action and verification for each actionable process step
- Reanalysis on the three-year cycle or on change, new information or mitigation failure
- Site security and personnel arrangements insofar as they mitigate identified vulnerabilities
Do not use it for
- The food safety plan under 21 CFR 117, which addresses unintentional hazards and economically motivated adulteration
- Food fraud and authenticity programmes, which target economic motivation rather than wide-scale harm
- General site security policy, which is broader and not organised around actionable process steps
- Employee grievance and workplace violence arrangements, which address a different threat with different controls
- Cyber security of operational technology, which increasingly matters and is not what this rule regulates
Compliance mapping
Which FSMA Intentional Adulteration rule requirements does this satisfy?
The rule is short, prescriptive about plan contents, and unusually explicit that reasoning must be recorded alongside conclusions.
| Clause | Requirement | Where it lands |
|---|---|---|
| 21 CFR 121.126 | Written food defense plan comprising vulnerability assessment, mitigation strategies and procedures | Header |
| 21 CFR 121.130 | Vulnerability assessment for each point, step or procedure, evaluating three elements or using key activity types | Vulnerability assessment |
| 21 CFR 121.130(c) | Written explanation of why each point, step or procedure was or was not identified as actionable | Vulnerability assessment |
| 21 CFR 121.135 | Mitigation strategies identified and implemented at each actionable process step, with written explanation | Site security |
| 21 CFR 121.140 | Written procedures for monitoring mitigation strategies, with records | Related records |
| 21 CFR 121.145 | Written procedures for corrective actions where a mitigation strategy is not properly implemented | Result |
| 21 CFR 121.150 | Verification that monitoring is conducted, corrective actions taken and strategies consistently implemented | Result |
| 21 CFR 121.157 | Personnel assigned to actionable process steps to receive food defense awareness training | People |
| 21 CFR 121.157(b) | Reanalysis at least every three years, and on change, new information or mitigation failure | Header |
What it does not cover
- The food safety plan under 21 CFR 117, which covers unintentional hazards and economically motivated adulteration.
- Food fraud vulnerability assessment, which uses different methods because the motive and the actor differ.
- General site security policy, which is broader and not organised around actionable process steps.
- Visitor and contractor access control, which supports mitigation strategies but is a separate operational record.
- Traceability and recall arrangements, which respond after an event rather than preventing one.
How to complete it
How to complete a food defense plan, step by step
The plan has five required components and fails most often in the first, because the assessment is where the reasoning either exists or does not.
121.130(c) requires an explanation for each point, step or procedure of why it was or was not identified as an actionable process step. A plan listing four actionable steps with mitigation strategies looks complete and omits the reasoning for the other forty, which is exactly what an inspector will ask for. The negative findings are part of the assessment, not a byproduct of it.
The three elements are the potential public health impact if a contaminant were added, the degree of physical access to the product, and the ability to successfully contaminate it. All three are evaluated assuming an insider: someone with legitimate access and process knowledge. Assessing against an intruder produces a plan about fences.
A strategy has to be something you can watch happening and record. Restricting access to a bulk liquid intake to two named roles, with the valve keyed and the key controlled, is monitorable. Increased vigilance is not. If monitoring the strategy cannot be described, the strategy is a statement of intent.
Three years is the maximum interval. Reanalysis is also required on significant change to the facility or process, when new information about potential vulnerabilities emerges, and when a mitigation strategy is found not properly implemented. The change trigger is the one that matters, and it needs a connection to management of change rather than a calendar reminder.
What auditors find
Most common food defense plan findings
Food defense findings concentrate on the assessment reasoning and on whether the plan is implemented rather than written.
| Finding | Clause | What fixes it |
|---|---|---|
| Vulnerability assessment records actionable steps only, with no explanation for steps ruled out. | 121.130(c) | Record the reasoning for every point, step and procedure; the negatives are part of the assessment. |
| Plan built around perimeter security rather than actionable process steps. | 121.130 | Assess against an insider with legitimate access; the rule is written for that actor. |
| Food fraud and intentional adulteration conflated in one plan. | 21 CFR 121 vs 117 | Separate them; EMA sits under the Preventive Controls rule with different methods. |
| Mitigation strategies too general to monitor. | 121.140 | Write strategies you can observe and record; vigilance is not a strategy. |
| Monitoring records absent or not reviewed. | 121.140 | Monitor per the written procedure and verify the records exist and were reviewed. |
| No corrective action procedure for a mitigation strategy not properly implemented. | 121.145 | Write the procedure in advance; the response cannot be improvised during an inspection. |
| Reanalysis overdue or not triggered by a significant change. | 121.157(b) | Link reanalysis to management of change as well as to the three-year interval. |
| Personnel at actionable process steps without food defense awareness training. | 121.157 | Train those assigned to the steps, including contractors and agency staff working there. |
| Plan prepared by a consultant and not implemented on the floor. | 121.126 | FDA inspection reviews the written plan and its implementation; both are examined. |
| Plan not signed and dated by the owner, operator or agent in charge. | 121.126 | Sign and date the plan and each reanalysis; it is a specific requirement. |
Case in point
Case in point: the plan about the fence
A mid-sized processor prepared a food defense plan running to forty pages. It covered perimeter fencing, gate control, CCTV coverage, visitor badging, contractor escorting and a locked chemical store. Every measure was real, installed and working. The plan had been written by a consultant and signed.
The FDA inspection focused on the vulnerability assessment. The inspector asked why the bulk liquid intake, where a single operator connected tankers alone during night deliveries, had not been identified as an actionable process step. The plan did not say, because it recorded only the steps that had been identified, not the reasoning for those that had not.
The measures in place addressed someone climbing the fence. The rule is designed around someone who walks in through the gate with a badge, knows which tank feeds the whole day's production, and is alone with it for twenty minutes.
The template
The template, field by field
The form exactly as it installs. Every field, option, score and conditional rule is editable, and the links to other templates come with it.
6 sections
- Reference
- QUA-054
- Archetype
- Plan
- Record ID
- FDP-2026-000
- Scoring
- Not scored
- Direction
- n/a
- Singleton
- No
- Basis
- FSMA Intentional Adulteration rule
- Links
- Links Site
- Tags
- Food safety, Security
- Sections
- 6
- Fields
- 49
- Follow up fields
- 5
- Repeating sections
- 1
- Links out
- 3
Header
11 fieldsPlan ID*
Auto sequence. Format FDP-2026-000.
The record's own ID. Other templates point at this value.
Status*
Drives who this goes to next.
- Planned2 pts
- In progress2 pts
- Complete3 pts
- Deferred0 pts
- Open0 pts
- Closed3 pts
- Overdue0 pts
Version*
Issue Date*
Next Review Due*
Site*
Site ID*
Format SITE-000.
Links to FDN-001 Site ID
Owner*
Approved By*
Access Restricted To Need To Know*
This document maps your vulnerabilities. Restrict who can read it.
- Yes3 pts
- No0 pts
Deliberate, Not Accidental
Food safety asks what could go wrong. Food defense asks what somebody could do on purpose. The controls are different and mostly about access and observation.
Vulnerability assessment
Repeats9 fieldsProcess Step*
Point Type*
Bulk liquid handling, liquid receiving and loading, secondary ingredient handling, mixing and similar activities.
Accessibility*
- Highly restricted3 pts
- Restricted2 pts
- Open access0 pts
Degree Of Public Health Impact*
- Low3 pts
- Medium1 pt
- High0 pts
Ability To Contaminate Undetected*
- Low3 pts
- Medium1 pt
- High0 pts
Actionable Process Step*
Mitigation Strategy
Mitigation Verified
- Yes3 pts
- No0 pts
Verification Frequency
Site security
9 fieldsPerimeter Secure*
- Yes3 pts
- Partly1 pt
- No0 pts
Access Controlled By Card Or Key*
- Yes3 pts
- Partly1 pt
- No0 pts
Visitor Escort Required*
- Always3 pts
- Sometimes1 pt
- No0 pts
CCTV Coverage At Key Points*
- Yes3 pts
- Partial1 pt
- None0 pts
Restricted Areas Defined*
- Yes3 pts
- No0 pts
Chemical Stores Locked*
- Yes3 pts
- No0 pts
Bulk Intake Points Sealed Or Supervised*
- Yes3 pts
- Partly1 pt
- No0 pts
Vehicle Seals Checked*
- Always3 pts
- Sometimes1 pt
- Never0 pts
Water Supply Protected*
- Yes3 pts
- Partly1 pt
- No0 pts
People
6 fieldsPre-Employment Screening*
- Yes3 pts
- Partly1 pt
- No0 pts
Agency Staff Screened*
- Yes3 pts
- Relies on agency1 pt
- No0 pts
Leavers Access Revoked Promptly*
- Yes3 pts
- Usually1 pt
- No0 pts
Staff Trained To Report Suspicious Behaviour*
- Yes3 pts
- No0 pts
Anonymous Reporting Route Available*
- Yes3 pts
- No0 pts
Personal Items Restricted In Production*
- Yes3 pts
- Partly1 pt
- No0 pts
Related records
1 fieldSecurity Assessment ID
The site security assessment this plan draws on.
Links to SAF-142 Assessment ID
Result
13 fieldsItems Assessed*
Excludes anything marked N/A.
Items Failed*
Score Percent*
Calculated on submission. High is good. N/A items leave the denominator.
Result Band*
- Pass3 pts
- Caution1 pt
- Fail0 pts
Completeness Percent*
How much of the template was actually answered. A high score on a half completed form is not a high score.
Action Required*
Raise the action record, then enter its reference here.
- No2 pts
- Yes0 pts
Priority
- High0 pts
- Medium1 pt
- Low3 pts
CAPA ID
Format CAPA-2026-00000.
Links to FDN-014 CAPA ID
Action Owner
Plan Owner*
Signature*
Site Manager*
Second Signature*
QUA-054 · record IDs look like FDP-2026-000 · Links Site
Open in KnowellaRun it with agents
From a document you fill in to a programme that runs itself
The plan is a document with five parts. What fails is the reasoning that was never recorded, the strategy nobody could monitor, and the reanalysis that waited for a calendar rather than a change.
Holds the vulnerability assessment per process step including the steps ruled out and why, and links mitigation strategies to their monitoring records.
Watches management of change for facility and process modifications that should trigger reanalysis, rather than waiting for the three-year interval.
Tracks food defense awareness training for personnel at actionable process steps, including contractors and agency staff working there.
Connects site access and visitor control records to the mitigation strategies they support, so security measures are evidenced rather than asserted.
This template lives in KnowQuality — quality and food safety. HACCP, nonconformance, traceability, laboratory and customer complaints.
Meet KnowQuality→Glossary
Food Defense Plan definitions and key terms
- Intentional adulteration
- Deliberate contamination of food intended to cause wide-scale public health harm, the threat 21 CFR Part 121 addresses.
- Economically motivated adulteration
- Adulteration for economic gain, commonly called food fraud, addressed under the Preventive Controls rule rather than the IA rule.
- Actionable process step
- A point, step or procedure with a significant vulnerability where mitigation strategies can be applied.
- Key activity types
- Bulk liquid receiving and loading, liquid storage and handling, secondary ingredient handling, and mixing and similar activities.
- Three-element evaluation
- Potential public health impact, degree of physical access to the product, and ability to successfully contaminate it.
- Mitigation strategy
- A risk-based, reasonably appropriate measure applied at an actionable process step to significantly minimise or prevent the vulnerability.
- Inside attacker
- The design case for the rule: a person with legitimate access, process knowledge and opportunity to act unobserved.
- Reanalysis
- Reassessment of the plan, required at least every three years and on change, new information or mitigation failure.
FAQ
Frequently asked questions about food defense plan
Is food fraud covered by the food defense plan?+
No. Economically motivated adulteration is addressed under the Preventive Controls rule at 21 CFR 117, because the motive is economic gain rather than wide-scale harm and the assessment methods differ. The IA rule at Part 121 addresses deliberate contamination intended to cause wide-scale public health harm. Facilities frequently need both, and combining them produces a plan that satisfies neither cleanly.
Do the compliance dates still matter?+
They have all passed, including the extended dates for very small businesses, and FDA moved to comprehensive inspection of written plans and their implementation from September 2024. A facility subject to the rule without a documented, implemented plan is exposed to inspection findings now rather than at some future date.
What does the vulnerability assessment have to include?+
An evaluation of each point, step or procedure, using either the key activity types approach or the three-element evaluation covering potential public health impact, degree of physical access, and ability to successfully contaminate. Critically, 121.130(c) requires a written explanation of why each was or was not identified as an actionable process step. Recording only the actionable steps is the most common gap.
Who needs food defense training?+
Personnel and supervisors assigned to actionable process steps must receive training in food defense awareness, and records must be maintained. This includes contractors and agency staff working at those steps, who are frequently overlooked because they do not appear on the site training matrix.
When must the plan be reanalysed?+
At least every three years, and additionally whenever a significant change could reasonably affect whether a mitigation strategy remains appropriate, when new information about potential vulnerabilities emerges, when a strategy is found not properly implemented, and when FDA requires it. The change trigger needs a connection to management of change, or it will not fire.
Keep going
Related templates and programmes
Industries this is written for
Programmes this belongs to
Used together in Lone Working and Security
Security Risk Assessment
Assesses the site against theft, unauthorised access, sabotage and product tampering
Violence and Aggression Assessment
Assesses roles exposed to aggression from the public, hauliers or colleagues, and the controls in place
Lone Working Risk Assessment
Assesses tasks done alone, out of hours or out of sight, and how the person would raise an alarm
Lone Worker Check In Record
Records the agreed contact points during a period of lone working, and that each one happened
Security Incident Investigation
Records theft, break in, unauthorised access, tampering or threat
Access Control Review
Reviews who holds access to which areas and whether that is still justified
More in Food Safety
HACCP Plan
The hazard analysis and critical control point plan for a product or process
HACCP Verification Record
Confirms the HACCP plan is being followed and still works
CCP Monitoring Log
Records readings at a critical control point, such as cook temperature, chill time or metal detection
Prerequisite Programme Plan
Sets out the basic conditions that must be in place for HACCP to work, covering hygiene, maintenance, pest control and training
Allergen Control Plan
Sets out how allergens are managed from receipt through to labelling, including segregation and changeover
Allergen Changeover Check
Confirms the line is clear of the previous allergen before the next product runs
Written and reviewed by
Siddarth Singh
Founder & Chief Executive Officer, Knowella
Certified Safety Professional and industrial and systems engineer with more than a decade inside food supply chain, freight and manufacturing operations. This page was written against the current text of the standards it cites, not against secondary summaries of them.
- Certified Safety Professional (CSP), Board of Certified Safety Professionals
- MBA, University of Chicago Booth School of Business
- MS and BS, The Ohio State University, Industrial and Systems Engineering
- Six Sigma Black Belt
Sources and last review. Reviewed 16 August 2026 against:
- 21 CFR Part 121, mitigation strategies to protect food against intentional adulteration, FDA
- FSMA Final Rule for Mitigation Strategies to Protect Food Against Intentional Adulteration, FDA
- FDA draft guidance for industry on the intentional adulteration rule, installments one to three
- 21 CFR Part 117, preventive controls for human food, covering economically motivated adulteration
- SQF, BRCGS Issue 9 and FSSC 22000 food defense requirements
This page is general guidance, not legal advice. Confirm requirements with your jurisdiction’s regulator.