Food Defense Isn't Food Safety. HiPP Just Proved It.

On April 19, Austrian authorities confirmed that a jar of HiPP organic baby food had tested positive for bromadiolone, an anticoagulant rodenticide. The seized jar was found in the Burgenland region. The product was a 190-gram carrot-and-potato variety for infants five months and older.

It wasn't a sanitation failure. The Czech Republic Regional Public Prosecutor's Office in Brno reported that police separately seized two jars from a Brno store that matched the description in an email from an unknown perpetrator. A suspect emailed a description of the jars they had seeded, and police used the description to find them on the shelf.

That's extortion by rat poison. That's the scenario the US Intentional Adulteration rule was written to prevent.

The US Inspector Doesn't Care That It Happened in Austria

HiPP is not sold at US retail. That doesn't matter to anyone running a US food facility right now.

The FDA started comprehensive Intentional Adulteration inspections in September 2024. Compliance deadlines under 21 CFR 121 have all passed. Very small businesses, averaging less than $10 million in annual food sales, are exempt from most of the rule's requirements. Everyone else is in scope. When a Consumer Safety Officer arrives at your facility today, they issue two Form 482s on the way in. One for food safety. One for food defense. Same officer, same day.

If you've never seen the second form before, that's a problem.

Food Safety Assumes Good Faith. Food Defense Doesn't.

A HACCP plan is built around hazards that could reasonably enter the process by accident. An IA plan is built around the opposite assumption: someone is trying to hurt your consumers or your company, and the food is the weapon.

The vulnerability questions are different. Food safety asks where contamination could enter. Food defense asks where a small amount of intentional contaminant, added by a person with a motive, could harm a lot of people downstream.

The rule requires five things, and a lot of IA plans were written once from a template and filed:

• A vulnerability assessment identifying actionable process steps

• Mitigation strategies for each one

• Monitoring procedures

• Corrective action procedures

• Verification and record-keeping

The plan has to be written. The mitigation strategies have to be observable on the floor. And the whole thing has to be reanalyzed at least every three years per 21 CFR 121.126. If you wrote yours in 2019 and haven't opened it since, you're already past the reanalysis trigger.

This is different from the supplier-caused recall scenario we covered earlier this month. That one assumes your supplier failed you by accident. Food defense assumes someone, inside or outside your facility, is trying to cause harm.

Four Things to Audit Before the CSO Arrives

1. When was your vulnerability assessment last reanalyzed?

Reanalysis is required every three years, minimum. It's also triggered by significant facility changes, new vulnerability information, failed mitigation strategies, or an FDA directive. If you added a product line last year, re-piped a bulk tank, switched to a new ingredient supplier with open totes, or moved a CIP station, the vulnerability profile changed. The plan should have changed with it.

Open the plan. Check the signature date. If it's more than three years old, your first corrective action is scheduling the reanalysis.

2. Can someone walk into your actionable process steps?

The rule focuses specifically on the steps where a small amount of contaminant could harm a lot of consumers. Bulk liquid receiving. Ingredient storage and mixing. Open conveyor lines before the kill step. Those are the places the rule expects mitigation strategies.

Walk each one. Not with the plan in hand. With the eye of someone trying to get in. Unlocked door to a mix tank. Unsecured dock during a break. Shared badge swipes at a shift change. A camera aimed at a blind spot.

The inspector will walk it with the plan in hand. The gap between what the plan says and what the floor looks like is the finding.

3. Who is your Food Defense Qualified Individual, and when did they last train?

The rule requires an FDQI. FSPCA runs four courses aligned to different parts of 21 CFR 121: plan preparation and reanalysis, vulnerability assessment with the Key Activity Types method, vulnerability assessment with the full method, and mitigation strategies.

If the person named on your plan retired, left the company, or got reassigned to another line, you don't have an FDQI. You have a paper trail. An inspector who asks to speak with your FDQI and gets told "she moved to quality" gets a finding.

4. Does the plan describe what actually happens, or what someone wrote?

"Tamper-evident packaging" on a plan means nothing if the floor uses unsealed totes between two process steps. "Access control" means nothing if the receiving dock door stays propped open for forklift traffic during summer shifts.

The plan is a contract with the inspector about what the facility does. The floor either honors it or it doesn't.

The Scenario Is Not Sophisticated

The person who seeded the Brno jars didn't need inside knowledge of the manufacturing process or an exotic contaminant. They bought rat poison at a hardware store and figured out how to get product onto a shelf. Then they emailed the description.

The same vector exists in every country where consumer products move through open supply chains. It's the reason the IA Rule exists. It's the reason FDA stood up a Food Defense Inspection Team with its own Form 482. And it's the reason an IA plan that sits in a binder between audits is a liability, not an asset.

If your IA plan hasn't been touched in three years, open it before an inspector does.

See how Beacon handles food defense alongside food safety. Documentation lives next to your food safety plan. Your FDQI lives next to your PCQI. Reanalysis triggers show up on the same calendar as the rest of your compliance work. Call me at (313) 484-4887.