Mitigation Strategies to Protect Food Against Intentional Adulteration
The FSMA "food defense" rule requiring registered food facilities to protect against intentional adulteration aimed at causing wide-scale public-health harm. Facilities must conduct a vulnerability assessment, identify actionable process steps, implement mitigation strategies, and maintain a written food-defense plan.
What this does not cover
stated in the document's own scope- Covers intentional adulteration intended to cause wide-scale public-health harm; unintentional food-safety hazards are addressed by the preventive-controls rules (Parts 117 and 507).
- Targets acts aimed at wide-scale harm, not economically motivated adulteration or acts targeting a single facility’s reputation, which the rule does not primarily address.
- Applies to registered food facilities within scope; small businesses and certain operations qualify for exemptions set out in the rule.
Always verify against the current published text before relying on it for a submission or inspection.
Overview
21 CFR Part 121 is the FDA Food Safety Modernization Act rule on mitigation strategies to protect food against intentional adulteration — the "food defense" rule. Unlike food-safety rules aimed at unintentional hazards, it targets deliberate acts intended to cause wide-scale public-health harm, such as an act of terrorism against the food supply. A covered facility must conduct a vulnerability assessment to find the significant vulnerabilities at its process steps, identify actionable process steps, put mitigation strategies in place at those steps, and manage them through monitoring, corrective actions, and verification — all captured in a written food-defense plan.
Scope & applicability
Registered domestic and foreign food facilities — protection of food against intentional adulteration intended to cause wide-scale harm.
Legal basis & how it acquires force
Part 121 is a binding regulation in Title 21 CFR, issued by the FDA under the Federal Food, Drug, and Cosmetic Act as amended by the FDA Food Safety Modernization Act of 2011. The rule implements FSMA’s intentional-adulteration provision, which directed FDA to require mitigation strategies at facilities where intentional adulteration could cause wide-scale harm. Compliance is a legal obligation for covered facilities registered under the Act, with the written food-defense plan and its management being the codified requirement.
Document structure
| Part | Covers |
|---|---|
| General provisions and applicability | Definitions, covered facilities, and the exemptions from the rule |
| Food defense plan | The written plan pulling together the assessment, strategies, and procedures |
| Vulnerability assessment | Identifying significant vulnerabilities and actionable process steps |
| Mitigation strategies | Strategies applied at actionable process steps to reduce the vulnerability |
| Mitigation strategies management | Monitoring, corrective actions, and verification of the strategies |
| Training and records | Personnel training and the records that document the program |
Key requirements
- Conduct a vulnerability assessment to identify actionable process steps
- Implement and monitor mitigation strategies at those steps
- Prepare and maintain a written food-defense plan
- Train personnel and keep food-defense records
Implementation tips
- Keep food defense (Part 121) separate from food safety (Part 117) in your plans — they answer different questions
- Reassess vulnerabilities when the process or threat picture changes
- Document mitigation-strategy monitoring; it is the evidence of an active program
Revision notes
Finalised under FSMA in 2016 with compliance dates from 2019; the first US regulation mandating food-defense planning.
Where this control fails
live FDA enforcementLive FDA recalls SPEQ maps to this standard’s topics — a SPEQ interpretation, not an FDA classification.
International alignment
Part 121 is the intentional-adulteration member of the FSMA rule family, distinct from the preventive-controls rules (21 CFR Part 117 for human food, Part 507 for animal food) that address unintentional hazards. Its vulnerability-assessment-and-mitigation structure parallels the hazard-analysis logic of those rules but is aimed at deliberate contamination. It is a US food-defense regulation without a direct ICH/PIC/S counterpart.
21 CFR Part 121: frequently asked questions
Quick answers to common questions about 21 CFR Part 121.
What is the "food defense" rule?
21 CFR Part 121, the FSMA rule requiring covered food facilities to protect against intentional adulteration aimed at causing wide-scale public-health harm. It calls for a vulnerability assessment, mitigation strategies at actionable process steps, and a written food-defense plan.
How is Part 121 different from the preventive-controls rules?
The preventive-controls rules (Parts 117 and 507) address unintentional hazards. Part 121 addresses deliberate acts intended to cause wide-scale harm, which is why it uses a vulnerability assessment rather than a hazard analysis of ordinary food-safety risks.
What must a food-defense plan contain?
The written plan documents the vulnerability assessment and actionable process steps, the mitigation strategies applied at those steps, and the procedures for monitoring, corrective actions, and verification, together with the required training and records.
This standard in practice
Recall domain is a SPEQ mapping of this standard’s topics, not an FDA classification.