Hi Nazia! As Ryan mentioned, tossing a wide net and testing for everything isn't exactly viable when it comes to malicious contamination.
When I was writing my FDP I had the 'what to test for' as a variable, to be determined post investigation. So for an example mock scenario:
- Was informed anon by an employee that employee X hates supervisor Y, and was going to put 'something' in the mixer on 'Y's shift
- Reviewed cameras and witness X going to another employee's line and putting unknown substance in lot-210405B, saved recording to jump drive
- Sequestered all material of lot-210405B
- Performed thorough investigation (you'd put everything you did in the investigation here or make it up since it's mock)
- During investigation of X's locker found diazinon insecticide
- Sample of lot-210405B was sent to Z lab to undergo a battery of testing, including but not limited to presence of organophosphate insecticides
The battery of testing would be my random grab bag of potable water testing I do annually on city water, but what I'm looking for is the presence of the poison I am pretty sure X put into the product. Either way, that product is being destroyed, I'm just building the case and getting irrefutable evidence with the testing.