journal article·2025-10-14Open access

Food and Agriculture Defense in the Supply Chain: A Critical Review

Nina Puhač Bogadi, Natalija Uršulin-Trstenjak, Bojan Šarkanj, Ivana Dodlek Šarkanj

Applied Sciences· Volume 15· Issue 20

Abstract

The malicious contamination of food has been recognized by the World Health Organization (WHO) as a real and current threat that must be integrated into food safety systems to ensure preparedness for deliberate attacks. Traditional approaches, such as HACCP, effectively address unintentional hazards but remain insufficient against intentional contamination and sabotage. Food defense frameworks such as HACCP (Hazard Analysis and Critical Control Points), VACCP (Vulnerability Assessment and Critical Control Points), and TACCP (Threat Assessment and Critical Control Points) represent complementary methodologies, addressing unintentional, economically motivated, and deliberate threats, respectively. This review critically examines food defense frameworks across the European Union, the United States, and the United Kingdom, as well as standards benchmarked by the Global Food Safety Initiative (GFSI), drawing on peer-reviewed and grey literature sources. In the United States, the Food Safety Modernization Act (FSMA) mandates the development and periodic reassessment of food defense plans, while the European Union primarily relies on general food law and voluntary certification schemes. The United Kingdom’s PAS 96:2017 standard provides TACCP-based guidance that also acknowledges cybercrime as a deliberate threat. Building on these regulatory and operational gaps, this paper proposes the Cyber-FSMS model, an integrated framework that combines traditional food defense pillars with cyber risk management to address cyber–physical vulnerabilities in increasingly digitalized supply chains. The model introduces six interconnected components (governance, vulnerability assessment, mitigation, monitoring, verification, and recovery) designed to embed cyber-resilience into Food Safety Management Systems (FSMS). Priority actions include regulatory harmonization, practical support for small and medium-sized enterprises (SMEs), and the alignment of cyber-resilience principles with upcoming GFSI benchmarking developments, thereby strengthening the integrity, robustness, and adaptability of global food supply chains.
Source: crossref · Quality: baseline

Research context

OpenAlex topics: Supply Chain Resilience and Risk Management

SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.

Affiliations

Podravka Inc., Food Industry, A. Starčevića 32, 48000 Koprivnica, Croatia

Department of Food Technology, University North, Trg dr. Žarka Dolinara 1, 48000 Koprivnica, Croatia

References (100+)

Show source-provided references
1. Food Safety, Food Fraud, and Food Defense: A Fast Evolving Literature10.1111/1750-3841.13256 ↗
2. The One Health High-Level Expert Panel (OHHLEP)10.1186/s42522-023-00085-2 ↗
3. FAO, UNEP, WHO, and WOAH (2022). One Health Joint Plan of Action, 2022–2026: Working Together for the Health of Humans, Animals, Plants and the Environment, WHO.
4. Supply Chain Viability and the COVID-19 Pandemic: A Conceptual and Formal Generalisation of Four Major Adaptation Strategies10.1080/00207543.2021.1890852 ↗
5. Blockchain and Agricultural Supply Chains Traceability: Research Trends and Future Challenges10.1016/j.promfg.2020.02.054 ↗
6. FAO (2017). The Future of Food and Agriculture: Trends and Challenges, Food and Agriculture Organization of the United Nations.
7. Calicioglu, O., Flammini, A., Bracco, S., Bellù, L., and Sims, R. (2019). The Future Challenges of Food and Agriculture: An Integrated Analysis of Trends and Solutions. Sustainability, 11.10.3390/su11010222 ↗
8. Roosevelt, M., Raile, E.D., and Anderson, J.R. (2023). Resilience in Food Systems: Concepts and Measurement Options in an Expanding Research Agenda. Agronomy, 13.10.3390/agronomy13020444 ↗
9. The Melamine Incident: Implications for International Food and Feed Safety10.1289/ehp.0900949 ↗
10. EFSA (2011). Shiga Toxin-Producing E. coli (STEC) O104:H4 2011 Outbreaks in Europe: Taking Stock. EFSA J., 9, 2390.10.2903/j.efsa.2011.2390 ↗
11. The Guardian (2025, August 29). US Meatpacking Plants Get Back on Stream after Crippling Cyber-Attack. Available online: https://www.theguardian.com/food/2021/jun/02/cyber-attack-targets-worlds-largest-meat-processing-company.
12. WHO (2002). Terrorist Threats to Food: Guidance for Establishing and Strengthening Prevention and Response Systems, WHO. Available online: https://apps.who.int/iris/handle/10665/42619.
13. U.S. Code of Federal Regulations (2025, August 18). Mitigation Strategies to Protect Food Against Intentional Adulteration (21 CFR Part 121), Available online: https://www.ecfr.gov/current/title-21/chapter-I/subchapter-B/part-121.
14. U.S. FDA (2022, November 28). Background on the FDA Food Safety Modernization Act (FSMA), Available online: https://www.fda.gov/food/food-safety-modernization-act-fsma/background-fda-food-safety-modernization-act-fsma.
15. European Commission (2025, August 29). Health and Food Safety 2023—Annual Report on Monitoring the Application of EU Law. Available online: https://commission.europa.eu/law/application-eu-law/implementing-eu-law/infringement-procedure/2023-annual-report-monitoring-application-eu-law/health-and-food-safety-2023_en.
16. European Parliament and Council (2022, October 15). Regulation (EC) No 178/2002 (General Food Law). Available online: https://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX:32002R0178.
17. GFSI (2020). Benchmarking Requirements Part I: The GFSI Benchmarking Process, GFSI.
18. BSI (2017). PAS 96: Guide to Protecting and Defending Food and Drink from Deliberate Attack, BSI. Available online: https://www.bsigroup.com/en-ID/pas-96-food-defence/.
19. Smart Food Safe (2025, September 15). Exploring the Concepts of HACCP, TACCP & VACCP. Available online: https://smartfoodsafe.com/haccp-taccp-vaccp/.
20. Resilience of Local Food Systems and Links to Food Security—A Review of Some Important Concepts in the Context of COVID-19 and Other Shocks10.1007/s12571-020-01076-1 ↗
21. Botschner, J., Corley, C., Fraser, E.D.G., Kotak, R., McMahon, D., and Newman, L. (2024). Cybersecurity in Digital Agriculture: A National Security Risk?. Advances in Science, Technology & Security Applications, Springer.10.1007/978-3-031-67608-6_6 ↗
22. ENISA (2025, August 29). Report on the State of the Cybersecurity in the Union. Available online: https://www.enisa.europa.eu/publications/2024-report-on-the-state-of-the-cybersecurity-in-the-union.
23. TQCSI (2025, September 15). Food Defence & Food Fraud: VACCP Food Fraud Plan & TACCP Food Defence. Available online: https://www.tqcsi.com/resources/food-defence-food-fraud.
24. Food Defence System in Food Industry: Perspective of the EU Countries10.1007/s00003-016-1022-8 ↗
25. U.S. Food and Drug Administration (2025, September 29). Food Safety Modernization Act (FSMA), Available online: https://www.fda.gov/food/guidance-regulation-food-and-dietary-supplements/food-safety-modernization-act-fsma.
26. GFSI (2014). Position Paper on Mitigating the Public Health Risk of Food Fraud, GFSI.
27. Cybersecurity Threats in Agriculture Supply Chains: A Comprehensive Review10.30574/wjarr.2022.15.3.0888 ↗
28. FAO (2022). Note on the Impact of the War on Food Security in Ukraine, FAO.
29. Kimball, A.M. (2016). Risky Trade, Routledge.10.4324/9781315606590 ↗
30. Viability of Intertwined Supply Networks: Extending the Supply Chain Resilience Angles towards Survivability—A Position Paper Motivated by COVID-19 Outbreak10.1080/00207543.2020.1750727 ↗
31. Responding to Systemic Crisis: The Case of Agroterrorism10.1080/10576100701200165 ↗
32. FAO (2020). The State of Food Security and Nutrition in the World, FAO.
33. Engler-Stringer, R. (2014). Food Security. Encyclopedia of Quality of Life and Well-Being Research, Springer.10.1007/978-94-007-0753-5_1073 ↗
34. Food Security in the Gulf Cooperation Council Countries: Challenges and Prospects10.12691/jfs-7-5-2 ↗
35. The PRISMA 2020 Statement: An Updated Guideline for Reporting Systematic Reviews10.1136/bmj.n71 ↗
36. AI and Blockchain in Critical Food Supply Infrastructure: Cybersecurity Threats and Solutions
37. OECD Publishing (2025). OECD-FAO Agricultural Outlook 2021–2030, OECD. Available online: https://www.oecd.org/en/publications/oecd-fao-agricultural-outlook-2021-2030_19428846-en.html.
38. U.S. FDA (2024). Mitigation Strategies to Protect Food Against Intentional Adulteration (Final Rule).
39. Interrater Reliability: The Kappa Statistic10.11613/BM.2012.031 ↗
40. Rayyan—A Web and Mobile App for Systematic Reviews10.1186/s13643-016-0384-4 ↗
41. AMSTAR 2: A Critical Appraisal Tool for Systematic Reviews That Include Randomised or Non-Randomised Studies of Healthcare Interventions, or Both10.1136/bmj.j4008 ↗
42. Lindgren, K.-A., and Lang, T. (2023). Food Security and the Fractured Consensus on Food Resilience: An Analysis of Development Agency Narratives, Palgrave Macmillan.10.1007/978-3-031-23535-1_4 ↗
43. The Mixed Methods Appraisal Tool (MMAT) Version 2018 for Information Professionals and Researchers
44. U.S. Food and Drug Administration (2022, November 10). An Overview of the CARVER + Shock Method for Food Sector Vulnerability Assessments, Available online: https://www.fda.gov/food/food-defense-initiatives/carver-shock-primer.
45. Definition and Characteristics of Short Agri-Food Supply Chains for Products
46. Potential Impacts of Ukraine-Russia Armed Conflict on Global Wheat Food Security: A Quantitative Exploration10.1016/j.gfs.2022.100659 ↗
47. James (2025, August 29). 8 Recent Cyber Attacks on Food Production and Agriculture. Available online: https://wisdiam.com/publications/recent-cyber-attacks-food-agriculture-sector/.
48. Orton, E. (WIRED, 2022). Get Ready for Cyber-Attacks on Global Food Supplies, WIRED.
49. Defining Supply Chain Management10.1002/j.2158-1592.2001.tb00001.x ↗
50. EFSA (2025, August 29). Food Incident Preparedness and Response. Available online: https://www.efsa.europa.eu/en/topics/topic/food-incident-preparedness-and-response.
51. OECD, and FAO (2016). OECD-FAO Guidance for Responsible Agricultural Supply Chains, OECD Publishing.
52. Caprile, A. (2022). EPRS—European Parliamentary Research Service: PE 729.367, Members’ Research Service. Available online: https://www.europarl.europa.eu/ReData/etudes/ATAG/2022/729367/EPRS_ATA(2022)729367_EN.pdf.
53. Okupa, H. (2020). Cybersecurity and the Future of Agri-Food Industries. [Master’s Thesis, Kansas State University]. Available online: https://krex.k-state.edu/items/b0df534a-11cf-48b2-94a3-41e94ab64515.
54. Ingemundsen, A.A. (2025). Cyber Security Risks in Norwegian Agriculture and the Influence on National Food Security. [Master’s Thesis, UiT The Arctic University of Norway]. Available online: https://hdl.handle.net/10037/37890.
55. BRCGS (2022). Global Standard for Food Safety, BRCGS.
56. IFS (2025, August 29). IFS Food Standard Version 8—Doctrine v4 (EN). Available online: https://www.ifs-certification.com/images/ifs_documents/IFS_Food_v8_doctrine_v4_EN.pdf.
57. Food Safety Magazine Editorial Team (2025, September 15). GFSI Releases Benchmarking Requirements Version 2024, Food Safety Magazine, Available online: https://www.food-safety.com/articles/10028-gfsi-releases-benchmarking-requirements-version-2024.
58. Sayegh, E. (2025, August 29). Cyberattack on Whole Foods Supplier Disrupts Supply Chain—Again, Forbes, Available online: https://www.forbes.com/sites/emilsayegh/2025/06/19/cyberattack-on-whole-foods-supplier-disrupts-food-supply-chain-again/.
59. Reuters (2025, June 09). Whole Foods Supplier United Natural Foods Says Cyber Incident Disrupted Operations. Available online: https://www.reuters.com/business/whole-foods-supplier-united-natural-foods-says-cyber-incident-disrupted-2025-06-09/.
60. Cybersecurity Dive (2025, June 10). UNFI Cyberattack Disrupted Grocery Distribution and Reduced Earnings. Available online: https://www.cybersecuritydive.com/news/unfi-cyberattack-reduce-quarterly-earnings/751849/.
61. FoodNavigator (2025, June 11). Whole Foods Supplier UNFI Hit by Cyberattack Causing Distribution Delays. Available online: https://www.foodnavigator.com/Article/2025/06/11/wholefoods-supplier-unfi-hit-by-cyber-attack/.
62. International Society of Automation (ISA) (2025, September 15). ISA/IEC 62443 Series of Standards—The World’s Only Consensus-Based Automation and Control Systems Cybersecurity Standards. Available online: https://www.isa.org/standards-and-publications/isa-standards/isa-iec-62443-series-of-standards.
63. NIST (2025, August 28). The NIST Cybersecurity Framework (CSF) 2.0, Available online: https://nvlpubs.nist.gov/nistpubs/CSWP/NIST.CSWP.29.pdf.10.6028/NIST.CSWP.29.nor ↗
64. GS1 (2025, September 15). EPCIS and CBV Implementation Guideline: Using EPCIS & CBV to Increase Supply Chain Visibility. Available online: https://www.gs1.org/docs/epc/EPCIS_Guideline.pdf.
65. Blockchain in Operations and Supply Chain Management: Benefits, Challenges and Future Research Opportunities
66. The Rise of Blockchain Technology in Agriculture and Food Supply Chains10.1016/j.tifs.2019.07.034 ↗
67. Cyber-Physical Systems Security—A Survey10.1109/JIOT.2017.2703172 ↗
68. GFSI (2024). Benchmarking Requirements Part IV: Glossary of Terms, GFSI.
69. FIRST (2025, September 15). Common Vulnerability Scoring System Version 4.0: Specification Document. Available online: https://www.first.org/cvss/v4-0/specification-document.
70. Security Risks in Cyber-Physical Systems—A Systematic Mapping Study10.1002/smr.2346 ↗
71. Cyber-Physical Energy Systems Security: Threat Modeling, Risk Assessment, Resources, Metrics, and Case Studies10.1109/ACCESS.2021.3058403 ↗
72. Model-Based Risk Assessment for Cyber-Physical Systems Security10.1016/j.cose.2020.101864 ↗
73. Applying Blockchain Technology to Improve Agri-Food Traceability: A Review of Development Methods, Benefits and Challenges
74. Zetter, K. (2025, September 15). Inside the Cunning, Unprecedented Hack of Ukraine’s Power Grid. Available online: https://www.wired.com/2016/03/inside-cunning-unprecedented-hack-ukraines-power-grid/.
75. Tian, F. (2016, January 24–26). An Agri-Food Supply Chain Traceability System for China Based on RFID & Blockchain Technology. Proceedings of the 2016 13th International Conference on Service Systems and Service Management (ICSSSM 2016), Kunming, China.
76. U.S. FDA (2016). Mitigation Strategies to Protect Food Against Intentional Adulteration. Final Rule Fed. Regist., 81, 34165–34223.
77. Linkov, I., and Trump, B.D. (2019). The Science and Practice of Resilience. Springer Handbooks: Risk, Systems and Decisions, Springer.10.1007/978-3-030-04565-4 ↗
78. Welsh, C. (2022). The Russia-Ukraine War and Global Food Security: A Seven-Week Assessment, and the Way Forward for Policymakers, Center for Strategic and International Studies.
79. COVID-19 Risks to Global Food Security10.1126/science.abc4765 ↗
80. Food Supply Chains during the COVID-19 Pandemic10.1111/cjag.12237 ↗
81. Food Sovereignty: A New Rights Framework for Food and Nature?
82. Enhancing Capacity of Scientists and Practitioners for Promoting More Sustainable and Resilient Food Systems in Indonesia and the South Pacific10.30852/sb.2022.2004 ↗
83. Upton, J., Avîrvarei, A.C., Bottex, B., Georganas, A., Georgiev, M., Johnson, J., and Gkrintzali, G. (2023). 2023 Crisis Preparedness Training: Annual Report, European Food Safety Authority. EFSA Supporting Publications 20.10.2903/sp.efsa.2023.EN-8505 ↗
84. Caron, P., Daguet, E., and Dury, S. (2023). The Global Food System Is Not Broken but Its Resilience Is Threatened. Resilience and Food Security in a Food Systems Context, Palgrave Macmillan.10.1007/978-3-031-23535-1_3 ↗
85. Bryan, E., Ringler, C., and Meinzen-Dick, R. (2023). Gender, Resilience, and Food Systems. Resilience and Food Security in a Food Systems Context, Palgrave Macmillan.10.1007/978-3-031-23535-1_8 ↗
86. TCI Systems (2025, August 29). IFS Food Standard Version 7—Food Safety Systems (Blog). Available online: https://tcisys.com/blog/ifs-food-standard-version-7/.
87. Food Fraud Vulnerability and Its Key Factors10.1016/j.tifs.2017.06.017 ↗
88. Detection of milk fat adulteration with margarine and palm oil in kajmak10.15567/mljekarstvo.2025.0203 ↗
89. Detection of Olive Oil Adulteration
90. A Critical Review on Analytical Techniques to Detect Adulteration of Extra Virgin Olive Oil10.1016/j.tifs.2019.07.045 ↗
91. Quality Labels on Agricultural and Food Products
92. Risk Management and Risk Communication of an Illegal Use of Sulphites in Meat Preparations10.2478/ijser-2023-0004 ↗
93. Medić, A., and Medana, C. (2025). Advances in Food Metabolomics. Appl. Sci., 15.10.3390/app15158283 ↗
94. Zhang, S., Chen, J., Gao, F., Su, W., Li, T., and Wang, Y. (2025). Foodomics as a Tool for Evaluating Food Authenticity and Safety from Field to Table: A Review. Foods, 14.10.3390/foods14010015 ↗
95. Monitoring of Nitrites and Nitrates Levels in Leafy Vegetables (Spinach and Lettuce): A Contribution to Risk Assessment10.1002/jsfa.6439 ↗
96. Evaluation of Nitrate Contents in Regulated and Non-Regulated Leafy Vegetables of High Consumption in the Canary Islands, Spain: Risk Assessment10.1016/j.fct.2020.111812 ↗
97. Stagnari, F., Polilli, W., Campanelli, G., Platani, C., Trasmundi, F., Scortichini, G., and Galieni, A. (2023). Nitrate Content Assessment in Spinach: Exploring the Potential of Spectral Reflectance in Open Field Experiments. Agronomy, 13.10.3390/agronomy13010193 ↗
98. Milešević, J., Vranić, D., Gurinović, M., Korićanac, V., Borović, B., Zeković, M., Šarac, I., Milićević, D.R., and Glibetić, M. (2022). The Intake of Phosphorus and Nitrites through Meat Products: A Health Risk Assessment of Children Aged 1 to 9 Years Old in Serbia. Nutrients, 14.10.3390/nu14020242 ↗
99. Uršulin-Trstenjak, N., Šarkanj, I.D., Sajko, M., Vitez, D., and Živoder, I. (2021). Determination of the Personal Nutritional Status of Elderly Populations Based on Basic Foodomics Elements. Foods, 10.10.3390/foods10102391 ↗
100. WHO, FAO, and OIE/WOAH (2019). Taking a Multisectoral, One Health Approach: A Tripartite Guide to Addressing Zoonotic Diseases in Countries, WHO.