24


TAPA STANDARDS FAQs STANDARDS FAQs #46 A monthly update by TAPA EMEA's Standards Lead, Mark Mark Gruentjes Steve McHugh


Gruentjes, and Executive Director Standards, Steve McHugh After receiving a steady stream of questions about TAPA’s Security Standards from Audit Bodies and our members, we feel it is beneficial to share some of the questions received and the responses given by the TAPA EMEA Standards Team. We aim to cover 3-5 questions in Vigilant each month.


When the current revision of TAPA’s Facility Security Requirements (FSR) was launched on 1 July 2020, there were two significant differences to previous versions of the Standard:


1. The inclusion of a new Multi-site certification option, allowing multiple sites to be certified under 1 parent certification;


2. The separation of the FSR Standard into two sections:


a) The FSR Certification and Framework Document 2020


b) The FSR 2020


The Multi-site certification option has been covered in many previous FAQ articles. So, this month, we will focus on questions on the FSR Certification and Framework Document 2020.


If you would like to raise a new topic for discussion or ask questions about one of our published responses, please contact us using this link...


CLICK HERE Question 2.


Is the FSR Certification and Framework Document 2020 part of the FSR certification audit?


Answer: Not directly, as the FSR certification audit is still focused on the FSR requirements. However, a non- compliance on some FSR requirements may also be linked to practices referenced in the FSR Certification and Framework Document. So, a good knowledge of both is required to ensure Auditors and LSP/Applicants fully understand the requirements. Our FSR training has been updated to cover both documents.


Question 1. Why did TAPA separate the FSR into two separate documents?


Answer: Over time, the FSR content has grown significantly. However, until the 2020 version, the Standard had always been documented into two segments: Section 1 - the narrative that covered all the processes to achieve certification, and Section 2 - the practice section that covered the mandatory requirements.


Section 2 was also used to create the certification audit requirements. With the continued growth in content and the additional text needed to support the addition of Multi-site certification, it was agreed that, from 2020, the FSR would be separated into two documents, one focused on the certification practices and the other on the actual requirements.


Question 3.


For my company security management system, which elements of the FSR Certification and Framework Document should I reference in our policy and procedures?


Answer: TAPA recommends that the TAPA Standards are incorporated into the company’s own security policy and procedures. This can take many forms, from referencing the TAPA Standards as company policy to providing detailed policy/procedures on the company approach to implementing TAPA certification and how certification requirements are maintained internally and with external partners. The FSR Certification and Framework Document covers a lot of the audit scope and periodic tasks that need to be completed on a regular basis. These are easily absorbed into a company’s own security programmes, if required.


Page 1  |  Page 2  |  Page 3  |  Page 4  |  Page 5  |  Page 6  |  Page 7  |  Page 8  |  Page 9  |  Page 10  |  Page 11  |  Page 12  |  Page 13  |  Page 14  |  Page 15  |  Page 16  |  Page 17  |  Page 18  |  Page 19  |  Page 20  |  Page 21  |  Page 22  |  Page 23  |  Page 24  |  Page 25  |  Page 26