Supplementing clause 16.2 of ISO 22002-100:2025, the organization makes sure that people with suitable knowledge and competence prepare and keep up both the food defense threat assessment and the food defense plan, and that the plan is put into practice, backed by the food safety management system, compliant with the law that applies, inclusive of every product and process within the organization's scope, and kept current. Organizations in subcategory FII must further make sure their suppliers operate a food defense plan of their own.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.