4.3 Food Defense, ALERT, and Outbreak Response

Food safety is accidental; food defense is deliberate

Food safety is the set of controls that stop unintentional contamination — a sick cook, a slow cool, a dirty slicer, a sanitizer bottle left on the spice rack. Food defense is the set of controls that stop intentional contamination — someone trying to put a chemical, a pathogen, or a foreign object into food, ice, or the water supply on purpose. The same building needs both. A manager who only thinks about FAT TOM will miss a tampered spice container, an unlocked chemical cage, or a stranger in the prep room.

The FDA’s retail teaching tool is ALERT: Assure, Look, Employees, Reports, Threat. It is a memory hook for a defense posture, not a separate permit and not a replacement for time/temperature control. You still follow the Food Code. ALERT tells you where intentional harm usually enters and what a Person in Charge should already have decided before a threat appears.

Restrict access and watch for the unusual

Prep rooms, chemical cages, water connections, and dry storage are not public hallways. Restrict access to people who have a job there. Keep a visitor log for contractors, pest-control technicians, salespeople, and even welcome inspectors through the same sign-in habit. Do not let a “new vendor” walk product into the walk-in without a receiver. Watch for unusual activity: a broken lock, a seal that has been cut and retaped, an unlabeled container that nobody claims, an employee lingering in an area they never work, or a self-service station that looks disturbed.

Tamper-evident packaging is a Look step. Reject deliveries with torn bags, resealed cases, or inner seals that have been disturbed. Once product is in house, keep chemicals and the water supply secured. An open sanitizer concentrate next to an unlocked back door is both a chemical-storage failure from the last section and a food-defense gap in this one.

Self-service needs the same eyes. Unattended salad bars, beverage stations, and condiment caddies are easier to tamper with than a line that a cook never leaves. Lids, sneeze guards, and staff who actually watch the station are defense controls, not only hygiene controls.

Food Defense Is Now Codified, Not Just Guidance

The Supplement to the 2022 Food Code moved food defense out of the guidance annexes and into the Code itself. FOOD DEFENSE became a defined term in §1-201.10(B): "the effort to protect food from acts of intentional adulteration or tampering." Two operational hooks followed:

• §2-102.11(C)(18) added food defense as an area of knowledge the person in charge can be questioned on during an inspection: "Explaining steps that are taken to prevent intentional adulteration by consumers, employees, or other persons including monitoring operations, ingredients, supplies, and finished products for unusual or suspicious activities, or other food defense activities." Priority Foundation
• §2-103.11(R) added a PIC duty to ensure that "employees are aware of food defense, such as signs of intentional acts of adulteration as it relates to their assigned duties, and report suspicious activity to the person in charge." Priority Foundation
• The lead-in sentence of §2-103.11 was rewritten to read: "The person in charge shall maintain active managerial control of foodborne illness risk factors by ensuring that…" — so every duty in that section now hangs off an explicit AMC obligation.

That is the difference between the old posture and the current one. Before, ALERT was an FDA outreach tool a manager could adopt voluntarily. Now, in a jurisdiction that has adopted the Supplement, an inspector can ask the PIC to explain the establishment's food-defense steps as a demonstration-of-knowledge item, and making sure staff can recognize and report suspicious activity is a listed PIC duty. NRFSP tracks it as task 106 Manage Food Defense Process.

If you suspect tampering

Do not taste the product to “see if it is okay.” Isolate it. Hold it for the regulatory authority (RA) or law enforcement. Notify the Person in Charge (PIC) immediately, then the regulatory authority and, when the situation warrants, law enforcement. Document what you saw, who had access, lot codes if present, and what you isolated. Do not dump the evidence down the drain to avoid a scene. Do not serve a “maybe it is fine” batch on the next ticket. Do not post speculation on social media. The defense failure may be criminal; treat the product as evidence and as a guest-protection hold at the same time.

A resealed spice container that nobody ordered, a chemical jug moved off its locked shelf, or ice that smells like something that is not ice are enough to trigger isolation. You do not need laboratory confirmation before you stop using the item.

Outbreak response in the first day

A suspected foodborne outbreak is operational, not theatrical. Identify the implicated food or meal period if you can. Isolate remaining product — do not keep selling the chicken salad while you “wait for lab results.” Retain invoices, temperature logs, cooling records, and staff schedules. Those documents are how investigators reconstruct who handled what and whether time/temperature control held. Cooperate with the health department. Notify customers if the regulatory authority directs you to. Document every step. After the immediate hold, review which Active Managerial Control (AMC) procedure failed: an ill worker who was not excluded, a cooler that was not logged, a supplier you never verified, or a vomit event that was wiped with a sanitizer rag.

One sick guest is still an illness report you take seriously. Two or more similar illnesses after the same food meet the usual outbreak threshold taught earlier in this guide. Either way, isolation and documentation start now, not after a newspaper call.

Vomiting and diarrhea cleanup — FDA 2-501.11

Norovirus is the reason a splash of sanitizer on a carpet is not a cleanup plan. FDA Food Code 2-501.11 requires written procedures for employees to follow when vomit or fecal matter is discharged onto surfaces in the establishment. The procedures must minimize spread to employees, consumers, food, and surfaces. Use a norovirus-effective Environmental Protection Agency (EPA)–registered disinfectant at the labeled concentration and contact time. A routine food-contact sanitizer that is correctly mixed for a clean counter is not automatically a norovirus disinfectant.

The written plan should already exist before anyone is sick in the dining room. Block off the area, discard nearby exposed food, remove vomit with appropriate personal protective equipment, disinfect hard surfaces with the labeled norovirus-effective product, and handle carpets and soft surfaces as the plan and the label allow. Staff who clean wash hands, change soiled clothes, and stay off the line if they become ill. Then review whether the ill person should have been excluded before the event. A cleanup that uses only the salad-station sanitizer bucket is an AMC failure even if the spot looks clean.

Imminent health hazards: stop, notify, discard

An imminent health hazard is a situation that may endanger public health if the operation continues. The Food Code list that CFPM items use includes sewage backup, no potable water, no hot water when it is required, extended interruption of electrical service, fire, and flood. Misuse of poisonous or toxic materials and the onset of an apparent foodborne outbreak also belong in that emergency frame.

The managerial sequence is not creative. Stop service in the affected operation or area. Notify the regulatory authority. Discard affected time/temperature control for safety (TCS) food and any food that may have been contaminated by sewage, floodwater, fire-suppression chemicals, or a long power outage that took TCS food into the temperature danger zone without a documented recovery. Do not run a “candlelight service” on a dead cooler. Do not ladle soup around a sewage backup in the dish pit. Do not tell guests that bottled soda makes a building without potable water acceptable for full service. Resume only when the RA agrees the hazard is controlled and the remaining food is safe.

A power outage is a clock-and-thermometer problem as well as a defense problem. If TCS food in cold holding rises above 41°F and you cannot document a safe recovery, discard. If hot-held TCS food falls into the danger zone and the four-hour cumulative limit is gone, discard. Fire-suppression chemicals on exposed food are chemical contamination; those items are not “smoky specials.” Floodwater and sewage are not rinse-and-serve events.

Exam traps

Do not treat food defense as the same thing as a cooling chart. Do not taste suspected tampered food. Do not clean a vomit event with the same sanitizer bucket you use on the salad station unless that product is labeled and used as a norovirus-effective disinfectant. Do not keep serving during a sewage backup because the dining room still has power. Do not throw away temperature logs and invoices because they look incriminating — those records are how you cooperate and how you prove what was still safe.