20


STANDARDS SUPPORT STANDARDS FAQs #5 A new monthly update by Mark Gruentjes, TAPA EMEA Standards Lead


After receiving a steady stream of questions about TAPA’s Security Standards from Audit Bodies and our members, we feel it will be beneficial to share some of the questions received and the responses given by the TAPA EMEA Standards Team. We aim to cover 2-3 questions in Vigilant each month.


Keep your questions coming!


This new FAQ service has already reached article #5! We still have many questions in the pipeline and plan to continue to support TAPA EMEA members by publishing new questions and answers each month.


As we have addressed many of the less complex topics previously, in this issue we are tackling two questions that need a more detailed explanation. These are two good examples from the FSR and TSR Security Standards that we hope will provide you with more clarification on our requirements.


If you would like to raise a new topic for discussion or ask questions about one of our published responses, please contact us at info@tapaemea.org


Question 1.


FSR 6.2.1 requires that the supplier must have a formally appointed person for security on site who is responsible for maintaining T


AP A FSR and company supply chain security


requirements. The supplier must also have a person (can be the same) responsible for monitoring the FSR programme. This includes scheduling compliance checks, communications with AAs, recertification, changes to the FSR Standard, etc.


Note: These persons can be an employee or outsourced person under contract to perform this role.


This looks like more than 1 requirement? Can you provide more of an explanation on what I can or cannot do to appoint the "formerly appointed person on site" and the "person responsible for monitoring the FSR programme"? What evidence is required to prove we have appointed this person?


Answer:


• For each certified site it is a requirement that a site-based person is appointed for security and who is responsible for day-to-day FSR compliance and other Supplier supply chain security procedures.


• If the supplier has multiple sites, they must appoint a site-based person at each site to maintain day-to-day FSR compliance.


• In addition to the FSR day-to-day compliance role, TAPA’s FSR requires that a person is appointed to oversee the TAPA certification programme and ensure all periodic checks, fault rectification and recertification are part of managed programmes, and be the point of contact for TAPA-related matters for the Supplier. The Supplier can choose to appoint one person to perform this role for multiple sites and/or combine it with the TAPA compliance duties of one of the site-based persons. Typically, larger operations will appoint a security manager to oversee their


TAPA activities across the group but rely on a site-based person to ensure ongoing compliance is maintained. Smaller operations may only have one TAPA certified site and then it would be acceptable for one person to perform both roles.


• It is also permitted for the Supplier to outsource the role (e.g. a guarding company or security consultancy) but they must then have a contract in place with the outsourced company that names the persons and lists the duties to be performed. The outsourced company cannot use any TAPA training or recognition received to obtain or maintain business for their other clients.


• For evidence, it is sufficient that you have documentation informing these persons of their duties and/or it’s covered in your documented internal procedures. These positions need to be filled before certification.


Page 1  |  Page 2  |  Page 3  |  Page 4  |  Page 5  |  Page 6  |  Page 7  |  Page 8  |  Page 9  |  Page 10  |  Page 11  |  Page 12  |  Page 13  |  Page 14  |  Page 15  |  Page 16  |  Page 17  |  Page 18  |  Page 19  |  Page 20  |  Page 21  |  Page 22  |  Page 23  |  Page 24