Food Defense Readiness Assessment for the FSMA Intentional Adulteration Rule
The FSMA Intentional Adulteration rule, 21 CFR Part 121, asks covered food facilities to protect against acts meant to cause wide-scale public health harm. This ten-question assessment tells you where your program stands before an inspection or customer audit.
1. Do you have a written food defense plan?
The IA rule (21 CFR Part 121) requires a written plan for covered facilities, prepared by a qualified individual.
2. Has a qualified individual with food defense training done the vulnerability assessment?
3. Have you identified actionable process steps?
Process steps where an attack could cause wide public health harm and where mitigation can be applied.
4. Are focused mitigation strategies in place at each actionable step?
5. Do you monitor the mitigation strategies and record the results?
6. Is there a documented corrective action procedure when a strategy fails?
7. How well are the key access points to the site and sensitive areas controlled?
Includes bulk liquid receiving, ingredient handling, mixing, and storage tanks.
8. Have employees at actionable steps had food defense awareness training?
9. Do you verify the plan through calibration, record review and reanalysis?
10. Do you know whether your facility is covered, very small or otherwise exempt?
How to use the assessment
Answer based on what you can prove with records, not on intent. Each question scores zero to three and the total is shown as a percentage band. Use the recommendations as an action list. Re-run the assessment after each improvement and keep the dated results as evidence of continuous improvement.
- Have the qualified individual complete or review it
- Attach the evidence for each answer in your food defense file
- Repeat after layout, process or ownership changes
What the rule asks for
A covered facility prepares and implements a written food defense plan that includes a vulnerability assessment, mitigation strategies for each actionable process step, monitoring, corrective actions and verification. Training and record-keeping are required. Some facilities qualify as very small businesses or are otherwise exempt, so the first step is to document your coverage decision against current FDA guidance.
Reading your score
A low score on questions 1 to 3 means the plan foundation is missing. A low score on questions 4 to 6 means strategies exist on paper but cannot be shown in operation. Low scores on 7 and 8 point to people and access gaps, which are often the cheapest to close. Do not trade a good score on physical security for gaps in monitoring records.
Common mistakes
Treating food defense as the same as food safety or as only a fence and cameras, skipping bulk liquid receiving and ingredient handling as vulnerabilities, not training seasonal staff, and not reanalyzing after a line change. Documentation without monitoring does not satisfy the rule.
Frequently Asked Questions
Which regulation is the IA rule?
It is 21 CFR Part 121, Mitigation Strategies to Protect Food Against Intentional Adulteration, issued under FSMA. It applies to covered facilities, with exemptions such as very small businesses.
Is food defense the same as food safety?
No. Food safety addresses unintentional hazards. Food defense addresses intentional acts, including by insiders, meant to cause harm. They overlap in controls but use different assessments.
What is an actionable process step?
A point, step or procedure where a significant vulnerability exists and where mitigation strategies can be applied to reduce it. The rule describes how to identify them using key activity types.
Who must prepare the plan?
A qualified individual with training or equivalent experience in food defense must prepare it or oversee its preparation, according to the rule. Check the current text for the exact requirement.
Netray can help tie access, training and corrective action records into your ERP. The assessment is free and needs no contact.
Related Tools
Food Plant GMP Internal Audit Checklist (21 CFR 117 Subpart B)
Walk-through GMP checklist for food plants covering personnel, premises, equipment, sanitation, processes and storage.
Developer ToolsFood Lot Traceability SQL Query Generator (Forward and Backward)
Fill in your table and column names to get recursive SQL that traces a lot back to suppliers or forward to customers.
Industry TemplatesMajor Food Allergens Reference: US, EU and Canada
Compare which allergens are regulated in the US, EU and Canada, with the ingredients where each one tends to hide.
Industry TemplatesMetal Detector Challenge Test Log Template
Document the start-up, hourly and end-of-shift checks of a metal detector with test pieces, reject confirmation and corrective action.
More Compliance & Contracts tools
See all- SAP SoD Residual Risk Score Calculator
- SAP Firefighter ID Usage Review Log
- IBM i (AS/400) User Profile Access Review Worksheet
- SyteLine Security and User Access Audit Checklist
- Infor XA (MAPICS) User Access Review Worksheet
- China ERP Data Security and Compliance Assessment
- ERP Vendor Data Processing Agreement Outline
- GDPR ERP Data Migration Checklist
- EU Machinery Regulation 2023/1230 Readiness Checklist