21 CFR §121.126

1. (a)Requirement for a food defense plan. You must prepare, or have prepared, and implement a written food defense plan.
2. (b)Contents of a food defense plan. The written food defense plan must include:
   1. (1)The written vulnerability assessment, including required explanations, to identify significant vulnerabilities and actionable process steps as required by § 121.130(c);
   2. (2)The written mitigation strategies, including required explanations, as required by § 121.135(b);
   3. (3)The written procedures for the food defense monitoring of the implementation of the mitigation strategies as required by § 121.140(a);
   4. (4)The written procedures for food defense corrective actions as required by § 121.145(a)(1); and
   5. (5)The written procedures for food defense verification as required by § 121.150(b).
3. (c)Records. The food defense plan required by this section is a record that is subject to the requirements of subpart D of this part.