Commentary - this is very broad/open and care must taken when preparing this program A concern would be claiming too many vulnerabilities and then having to correct too much (and the expense of that).
Below is a summary of the major sections of the document.
Requirements - "Each covered facility is required to prepare and implement a food defense plan. This written plan must identify vulnerabilities and actionable process steps, mitigation strategies, and procedures for food defense monitoring, corrective actions and verification. A reanalysis is required every three years or when certain criteria are met, including mitigation strategies that are determined to be improperly implemented. " .
1. You must prepare, or have prepared, and implement a written food defense plan.
This includes: