Food Defense Training Under the 2026 FDA Food Code

Food safety controls address accidental contamination and foodborne illness. Food defense focuses on intentional acts, such as tampering or deliberate adulteration. The 2026 FDA Food Code makes that distinction operational by adding employee awareness and reporting to the person in charge's active-managerial-control duties.

What the person in charge must ensure

Under the new paragraph 2-103.11(R), employees should be aware of food defense in a way related to their assigned duties. They should know examples of suspicious activity or signs of intentional adulteration and report them to the person in charge. The expectation is role-relevant awareness, not that every employee conduct a formal federal threat assessment.

Examples of suspicious activity

Depending on the operation and task, examples might include an unauthorized person entering food-preparation or storage areas, a broken seal, an unexplained chemical container, evidence that a product was tampered with, or an unusual access pattern. Staff should follow the establishment's procedures, protect exposed food, and promptly alert the person in charge rather than investigate a possible threat on their own.

Food defense is not the same as the federal Intentional Adulteration Rule

FDA's Food Code is a model for retail and food-service regulators. The federal FSMA Intentional Adulteration Rule applies to covered food facilities under separate criteria and includes its own mitigation-strategy requirements. Do not assume that the Food Code paragraph alone makes every restaurant subject to every requirement in 21 CFR Part 121.

A practical training system

A manager can connect food-defense awareness to onboarding, role-specific training, access controls, visitor procedures, seal checks, and a clear reporting channel. Staff need to know whom to contact and what immediate steps protect food and people. Keep records where local rules or the establishment's procedures require them.

Exam traps

• Treating food defense as identical to preventing accidental cross-contamination.
• Assigning employees an investigative role rather than reporting suspicious activity.
• Assuming the 2026 FDA model code is automatically adopted everywhere.
• Confusing the retail Food Code provision with the separate federal Intentional Adulteration Rule.

Key takeaway

The 2026 Food Code places food-defense awareness and suspicious-activity reporting within the person in charge's management duties. Train workers for their role, make escalation simple, and follow the jurisdiction's adopted code.

Make awareness specific to the employee’s role

The model-code language connects awareness to assigned duties. A receiving employee may need to recognize an unexpected delivery, damaged seal, or unverified driver. A prep employee may need to notice an unauthorized person in a restricted work area or packaging that appears altered. A closing employee may focus on access points and securing storage. Training should make clear which situations are unusual in that operation and who receives the report. The aim is practical recognition and escalation, not asking a food employee to determine intent or perform a security investigation.

The 2026 Food Code commentary allows an operation-specific awareness approach. A person in charge can explain food defense during onboarding, reinforce it in short team briefings, and connect the message to visitor, delivery, and access procedures already used at the establishment. A quick scenario can confirm that employees know how to respond: “A delivery arrives with a seal that does not match the paperwork. What do you do, and whom do you tell?” The answer should follow the establishment’s procedure and identify the person in charge. Follow the adopted local code and any additional employer or jurisdiction training requirements.

Respond to a concern without contaminating evidence or food

If an employee notices possible tampering, the immediate priority is to protect people and prevent questionable food from being served. Stop handling or using the affected item, keep it separate from other food when that can be done safely, and promptly tell the person in charge. The PIC can follow the establishment’s response plan, preserve relevant packaging or delivery details where appropriate, and contact the regulatory authority or emergency services if warranted. Employees should not taste the food, confront a suspected person, or move a potentially dangerous item unless the response plan or emergency responders direct them to do so.

For example, if a sealed ingredient container arrives with an unexplained broken seal, the receiver should pause acceptance, keep the item out of production, note the time and delivery information, and contact the PIC. The PIC then decides next steps under the written receiving and incident procedures. A damaged seal can have an innocent explanation, so staff should report observable facts rather than accuse someone. Clear reporting channels make it easier to act quickly while preserving an accurate record.

Keep food safety and food defense distinct

Food safety controls reduce hazards introduced unintentionally through poor time and temperature control, cross-contamination, or inadequate cleaning. Food defense awareness concerns the possibility of intentional adulteration and suspicious activity. A temperature-abused shipment is primarily a food-safety concern; an unexplained puncture or opened seal may also require a food-defense response. In either situation the product should be held and reported under the establishment’s procedure, but the reason for concern and follow-up may differ. One practice does not replace the other.

The Food Code is FDA’s model for retail and food-service jurisdictions. Its publication does not by itself tell a food employee which edition a local authority has adopted or whether a particular provision is already enforceable in that location. Managers should check the applicable state, tribal, territorial, or local rules and any permit conditions. On the exam, distinguish the model-code duty from the separate federal FSMA Intentional Adulteration Rule, which applies to covered facilities under its own scope and requirements.

Turn reports into better procedures

After a concern is resolved, the person in charge can review whether employees knew what to notice, whom to contact, and how to keep the affected product out of use. If a report was delayed because roles were unclear, revise the contact list or receiving procedure and brief the relevant staff. A response review should focus on improving access controls and communication, not assigning blame before the facts are known. Keep written records when required by the jurisdiction or the establishment’s procedures. Repeating short, role-specific scenarios helps new and existing employees recognize suspicious activity without disrupting ordinary food-safety work.