Regarding Food Defense; since my point of view: the related software FDPB is like the GMPs pre-requisites guideline due shows general recommendations; and the FDA´s CARVER + Shock software is like the
HACCP approach due evaluate and gives you the focused strategies in order to manage the risk for each specific facility. I recommended apply both; and integrate in one document.
Nevertheless FDPB would be use as such, but the focused analysys depends of how risks are estimated for the team; CARVER + Shock ask you questions and the software shows an ¨automatic¨ evaluation.
By the way; I already did this way for up 10 food facilities; it works.