Food Defense Plan

Aligned with SQF Code Edition 9 – System Element 2.8.3

Requirement Overview

SQF Code Edition 9, System Element 2.8.3, requires:

“A food defense plan shall be established and effectively implemented to ensure the site is protected from intentional acts of sabotage or terrorist-like incidents. The plan shall be based on a risk assessment of potential threats.”

A food defense program safeguards against intentional contamination by identifying facility vulnerabilities and implementing security and monitoring systems.

Disclaimer: Food Safety Systems is not affiliated with or endorsed by the Safe Quality Food Institute (SQFI). This content is for internal compliance and training purposes only. For official program requirements, visit www.sqfi.com.

Key Compliance Objectives

  • Identify site-specific threats and access vulnerabilities

    Document and implement food defense control measures

    Monitor access and install security protocols

    Train employees and conduct simulation drills

Step-by-Step Compliance Implementation

1. Conduct a Site-Specific Threat Assessment

  • Key Areas to Assess:

    • Perimeter and gate security

      Raw material and finished goods storage

      Processing, blending, and packing zones

      Shipping, receiving, and driver access points

      Utilities (e.g., water, HVAC, compressed air systems)

    Evidence to Maintain:

    • Completed food defense vulnerability assessment

      Facility layout with zone-specific risk classification

      Security risk analysis with prioritized zones

2. Develop and Document the Food Defense Plan

  • Your Plan Should Include:

    • Vulnerable areas and entry points

      Physical and procedural barriers

      Emergency and response protocols

      Assigned roles and responsibilities

    Evidence to Maintain:

    • Signed and version-controlled food defense plan

      Internal SOPs for each control measure

      Organizational chart showing designated response personnel

3. Install Security Measures and Access Controls

  • Example Controls:

    • Badge or biometric access for employees

      Visitor and contractor sign-in logs

      CCTV coverage of critical areas

      Sealed packaging zones with tamper-proof features

      Lockable or restricted ingredient storage

    Evidence to Maintain:

    • Access control records

      Surveillance system inspection and maintenance logs

      Visitor tracking logs and review summaries

4. Train Staff and Run Food Defense Drills

  • Training Program Must Include:

    • Annual training for all site personnel

      Role-specific training for security or facility leads

      Simulated food defense breach scenarios

      Documentation of response, gaps, and corrective actions

    Evidence to Maintain:

    • Attendance records from food defense training sessions

      Drill reports with findings and CAPAs

      Evaluation forms from simulated incidents

5. Review and Update the Plan Annually

  • Annual Program Review Includes:

    • Plan revalidation or update (especially after facility changes)

      Review of any past incidents or audit findings

      Improvements based on drill outcomes or supplier alerts

    Evidence to Maintain:

    • Annual review log and sign-off documentation

      Updated versions of food defense plans and SOPs

      Meeting minutes or review notes

Common Audit Findings & Recommended Fixes

Finding Corrective Action
No written food defense plan Create a documented plan with assigned roles and updates
Inadequate perimeter security Install physical barriers or access control devices
No employee training on threats Conduct annual site-wide awareness training
No record of drills or updates Schedule simulations and maintain change logs

Auditor Verification Checklist

Expect SQF auditors to:

  • Review the written and signed food defense plan

    Inspect access control logs, cameras, and visitor records

    Verify employee training and role-specific drills

    Examine annual plan reviews or version history

Implementation Roadmap

Build Your Program

  • Conduct a site vulnerability assessment

    Create a zone-specific risk profile

Train and Validate

  • Train staff in awareness and breach response

    Run drills and evaluate effectiveness

Operate and Monitor

  • Control facility access and monitor sensitive zones

    Maintain logs for visitors and surveillance

Improve Continuously

  • Review and revise the plan annually

    Update after structural, supplier, or incident changes

Why This Matters?

An effective food defense plan:

  • Shields your operations from deliberate harm

    Supports compliance with SQF, FSMA, and GFSI standards

    Builds confidence among regulators, customers, and stakeholders

    Demonstrates proactive risk management

Need Support Developing Your Food Defense Program?

Food Safety Systems provides:

  • Editable food defense plan templates

    Drill simulation scripts and evaluation forms

    Access control SOP examples

    Audit checklists and annual review logs