# Food Defense Readiness Assessment for the FSMA Intentional Adulteration Rule > Source: https://netray.co/tools/food-defense-intentional-adulteration-readiness-assessment > Publisher: Netray (netray.co), AI and integration engineering for ERP and manufacturing systems. > Section: Free Tools ## Short answer Score how ready your plant is for a food defense plan: vulnerability assessment, mitigation strategies, monitoring and training. ## Category compliance-legal ## Industry Food and Beverage Manufacturing ## Region United States ## Audience - Food safety manager - Plant manager - Security lead ## Tool **Kind:** assessment **Questions:** #### Do you have a written food defense plan? **Help:** The IA rule (21 CFR Part 121) requires a written plan for covered facilities, prepared by a qualified individual. **Options:** ##### No written plan **Score:** 0 ##### Draft in progress **Score:** 1 ##### Complete but not reviewed this year **Score:** 2 ##### Complete and reviewed in the last 12 months **Score:** 3 #### Has a qualified individual with food defense training done the vulnerability assessment? **Options:** ##### No assessment done **Score:** 0 ##### Done by someone without formal training **Score:** 1 ##### Done by a trained person but not documented fully **Score:** 2 ##### Done, documented and signed by a trained qualified individual **Score:** 3 #### Have you identified actionable process steps? **Help:** Process steps where an attack could cause wide public health harm and where mitigation can be applied. **Options:** ##### Not identified **Score:** 0 ##### Identified informally **Score:** 1 ##### Documented for most process steps **Score:** 2 ##### Documented for all steps with rationale **Score:** 3 #### Are focused mitigation strategies in place at each actionable step? **Options:** ##### None **Score:** 0 ##### General site security only **Score:** 1 ##### Strategies for some steps **Score:** 2 ##### Specific strategies at every actionable step **Score:** 3 #### Do you monitor the mitigation strategies and record the results? **Options:** ##### No monitoring **Score:** 0 ##### Monitoring done but not recorded **Score:** 1 ##### Recorded for most strategies **Score:** 2 ##### Recorded with defined frequency and responsible role for all **Score:** 3 #### Is there a documented corrective action procedure when a strategy fails? **Options:** ##### No procedure **Score:** 0 ##### Informal practice **Score:** 1 ##### Written but untested **Score:** 2 ##### Written, trained and used in an exercise or real case **Score:** 3 #### How well are the key access points to the site and sensitive areas controlled? **Help:** Includes bulk liquid receiving, ingredient handling, mixing, and storage tanks. **Options:** ##### Open access **Score:** 0 ##### Perimeter fencing only **Score:** 1 ##### Badge or key control for most areas **Score:** 2 ##### Layered control with visitor logs, escorts and audits of access lists **Score:** 3 #### Have employees at actionable steps had food defense awareness training? **Options:** ##### No training **Score:** 0 ##### Some staff trained **Score:** 1 ##### All relevant staff trained at hire **Score:** 2 ##### Trained at hire and refreshed yearly with records **Score:** 3 #### Do you verify the plan through calibration, record review and reanalysis? **Options:** ##### No verification **Score:** 0 ##### Ad hoc review **Score:** 1 ##### Annual review of records **Score:** 2 ##### Annual reanalysis, record review and reanalysis after process or layout changes **Score:** 3 #### Do you know whether your facility is covered, very small or otherwise exempt? **Options:** ##### Have not checked **Score:** 0 ##### Believe we are exempt but not documented **Score:** 1 ##### Documented coverage decision without review **Score:** 2 ##### Documented decision reviewed against current FDA guidance **Score:** 3 **Bands:** #### Not ready **Min:** 0 **Max:** 39 **Verdict:** Core elements of a food defense plan are missing or informal. **Recommendations:** - Confirm whether your facility is covered under 21 CFR Part 121 - Assign a qualified individual and schedule food defense training - Map your process flow and run the vulnerability assessment first #### Partially ready **Min:** 40 **Max:** 69 **Verdict:** You have some controls, but documentation and monitoring are thin. **Recommendations:** - Write down actionable process steps with the rationale - Assign monitoring frequency and responsible roles to each strategy - Create corrective action and verification procedures #### Mostly ready **Min:** 70 **Max:** 89 **Verdict:** A workable plan exists; focus on evidence and consistency. **Recommendations:** - Test the corrective action process with a tabletop exercise - Confirm training records cover every relevant employee - Schedule reanalysis after any layout or process change #### Strong **Min:** 90 **Max:** 100 **Verdict:** Your food defense program is well documented and maintained. **Recommendations:** - Keep annual reanalysis on the calendar - Review insider threat and contractor access controls - Align the plan with your certification scheme's food defense clauses ## Content **Intro:** The FSMA Intentional Adulteration rule, 21 CFR Part 121, asks covered food facilities to protect against acts meant to cause wide-scale public health harm. This ten-question assessment tells you where your program stands before an inspection or customer audit. **Sections:** #### How to use the assessment **Body:** Answer based on what you can prove with records, not on intent. Each question scores zero to three and the total is shown as a percentage band. Use the recommendations as an action list. Re-run the assessment after each improvement and keep the dated results as evidence of continuous improvement. **Bullets:** - Have the qualified individual complete or review it - Attach the evidence for each answer in your food defense file - Repeat after layout, process or ownership changes #### What the rule asks for **Body:** A covered facility prepares and implements a written food defense plan that includes a vulnerability assessment, mitigation strategies for each actionable process step, monitoring, corrective actions and verification. Training and record-keeping are required. Some facilities qualify as very small businesses or are otherwise exempt, so the first step is to document your coverage decision against current FDA guidance. #### Reading your score **Body:** A low score on questions 1 to 3 means the plan foundation is missing. A low score on questions 4 to 6 means strategies exist on paper but cannot be shown in operation. Low scores on 7 and 8 point to people and access gaps, which are often the cheapest to close. Do not trade a good score on physical security for gaps in monitoring records. #### Common mistakes **Body:** Treating food defense as the same as food safety or as only a fence and cameras, skipping bulk liquid receiving and ingredient handling as vulnerabilities, not training seasonal staff, and not reanalyzing after a line change. Documentation without monitoring does not satisfy the rule. **Cta:** Netray can help tie access, training and corrective action records into your ERP. The assessment is free and needs no contact. **Faq:** #### Which regulation is the IA rule? **Answer:** It is 21 CFR Part 121, Mitigation Strategies to Protect Food Against Intentional Adulteration, issued under FSMA. It applies to covered facilities, with exemptions such as very small businesses. #### Is food defense the same as food safety? **Answer:** No. Food safety addresses unintentional hazards. Food defense addresses intentional acts, including by insiders, meant to cause harm. They overlap in controls but use different assessments. #### What is an actionable process step? **Answer:** A point, step or procedure where a significant vulnerability exists and where mitigation strategies can be applied to reduce it. The rule describes how to identify them using key activity types. #### Who must prepare the plan? **Answer:** A qualified individual with training or equivalent experience in food defense must prepare it or oversee its preparation, according to the rule. Check the current text for the exact requirement. ## Search terms food defense plan assessment, intentional adulteration rule, FSMA 121 food defense, food defense self assessment, actionable process step, food defense mitigation strategies, food defense plan template, FDA IA rule readiness --- Talk to an engineer: https://netray.co/contact?intent=erp_ai | Machine catalog: https://netray.co/agent/catalog.json