Home  -  Standards  -  Standards FAQ

TAPA STANDARDS – FAQ Section

Standards general


What happens to ideas for changes to standards that are sent to TAPA?

Standards requirements are mandatory to pass certification. What if I can’t meet or don’t think a requirements is needed what are my options?

How are waivers requests processed?

When a revised standard is released how will this affect my existing certification status?

What are the costs for certification?

How often are the standards updated?

We are interested in getting TAPA certified. Can you give us information and contact details on the TAPA certification process?

Country laws often restrict the use of criminal background vetting. As this is a requirement in the TAPA Standards, how should LSP’s and Applicants seeking to be certified deal with this?

What are the requirements for the LSP/Applicant person who is conducting the interim self audits between certification audits? Must this person be an Authorised Auditor (TAPA trained/approved)?

Why did we need Self-Certification for TAPA Standards?

How are costs reduced for Logistics Service Providers?

As Self-Certification is a lower cost option for Logistics Service Providers, why should FSR A&B and TSR 1&2 still be considered?

Can you provide me with some advice on how to get started with Self-Certification and explain what’s involved?

I see three different types of audits mentioned in the Standards. Can you explain what they are for?

Who can qualify as an Authorised Auditor (AA)?

What are the requirements for the LSP/ Applicant person who is conducting the interim self audits between certification audits? Must this person be an Authorised Auditor (TAPA trained/approved)?

My business is too small to have our own TAPA-trained Authorised Auditor. For selfcertification, the TAPA Standards state that “An Authorised Auditor can be an internal employee/associate, trained and authorised by TAPA as an FSR/TSR/PSR Authorised Auditor”. Can you explain what you mean by “associate” and how I could use this option?

I have been approached by a security company offering to complete my TAPA self-certification audits. Does TAPA authorise third-party auditing/inspection companies to complete self-certification for the TAPA Standards?

How many waiver requests does TAPA EMEA receive and how many are approved?

What advice can you give to ensure a waiver request is likely to be approved?

When waiver requests are denied, what can the LSP/Applicant do to avoid their certification audit failing?

Who reviews and approves the waivers in EMEA?

If I have a need for the same waiver at more than one location, do I need to submit a waiver for each one?

Exactly what is GDPR?

The TAPA Standards require certain records to be made and stored to help provide deterrents and maintain a robust audit trail should a security incident require further investigation. Is it no longer possible to follow these requirements in the EU?

The TAPA Standards require certain records to be made and stored to help provide deterrents and maintain a robust audit trail should a security incident require further investigation. What is the best approach to avoiding claims that the TAPA Standards conflict with the EU GDPR?

Should there be a conflict between the GDPR company policy and TAPA’s requirements, what should I do?

We consider CCTV images are personal data. TAPA requires that I keep the recorded images for 30 days. How can I achieve this and meet TAPA and GDPR requirements?

I heard that truck GPS data is considered personal data as it tracks driver movements? Does TAPA have a view on this?

It has been mentioned at TAPA meetings that the Association will be looking into “modular” standards. Are there any updates on what’s happening?

If I have any comments on the existing or future TAPA Standards, who should I contact?

When will work on updating the Standards begin?

I have some comments to share on the existing Standards that may help improve the next revision. Who should I send these to and what happens with the request?

Who should pay the costs to meet TAPA Standards?

Why is this clause in the TAPA Standards?

Some of my facilities do not use English language. Does the clause below mean I can translate the standards into local languages?

Can you explain the slightly different comments I found on use of subcontractors in the TAPA Standards?

If I get self-certified, no-one checks if my audit is accurate. I could say I meet all the requirements without doing anything. Is this a weakness in the scheme?

My company is using more self certifications to prove we are TAPA compliant to our customers. It’s really working out well for us. Why can’t I use self-certification for the higher security levels of TAPA’s Security Standards?

Please explain the reasons why Logistics Service Providers seek to obtain TAPA certification?

If I wanted to promote my TAPA certification to my customers, what advice can TAPA give me?

If we wanted to incorporate TAPA branding into our own promotional material, can TAPA help us with this?

I know some Logistics Service Providers who have an agreement with their customers that they must be TAPA compliant. What does this mean? Is it a benefit option?

I know some Logistics Service Providers who have an agreement with their customers that they must be TAPA compliant. What does this mean? Is it a benefit option?

How will TAPA introduce control measures to address supply chain cyber threats?

If the 2020 versions of the Standards are ready now, why can’t I use them to be certified before 1 July?

I want to prepare for TSR 2020 certification. Where can I find the audit forms?

I want to check my operation against the new FSR/TSR Standards to see which changes are needed and to identify any additional costs. I know the official TAPA audit templates are not available yet, so how would you suggest I check my compliance status?

I note there is a new addition in the FSR for ‘IT and Cyber Security Threat’. It is good to see TAPA addressing this important topic. Why is this an optional and not mandatory requirement when surely in the world we live in today, the protection of our networks is a core requirement?

When TAPA introduced the 2017 versions of the Security Standards, you produced a comparison chart for the previous 2014 versions to highlight the differences in the new Standards. Does the same exist for the 2020 version?

The new cyber requirements in both FSR and TSR 2020 are only optional. Based on the increasing awareness and discussions regarding cyber risks, should this be changed from optional to mandatory?

We are already TSR and FSR certified. Will the new formats increase my costs and the number of requirements I need to be compliant with?

Can I use and gain certification before the 1 July introduction of FSR/TSR 2020?

How and when will I get copies of the draft FSR and TSR Security Standards?

How can I provide feedback to TAPA if I have any comments on the updated FSR/TSR?

If I need help to understand the new Standards, who can I contact?

When will the new FSR and TSR Standards come into force?

Can I still use the FSR/TSR 2017 versions after 1 July 2020?

What should I do to prepare for the new Standards?

After obtaining FSR Level A certification a year ago, I recently received a reminder to complete and submit a self-audit to the audit body. Can you explain what is required and the purpose of these audits?

My company uses a different audit body to the ones TAPA has approved. Why can’t I use the same audit body?

I’d like to see the updated 2020 Standards as soon as possible so I can assess any changes I may need to make to my operations. When will they be available for review?

As I make preparation plans for FSR and TSR 2020, will TAPA be available to help me make decisions on the best way to transition to the new versions?

Will TAPA be publishing the details on the changes between the old and new versions of the Standards?

I hear about Standards being published this year but they don’t come into effect until July 2020. Why the delay? Is there a schedule we need to know about?

Who can I contact if I have concerns about my existing TAPA certification being impacted by the release of revised TAPA Standards?

How will TAPA provide more information and support to existing TAPA Standards certificate holders to help them plan their transition to the new revision of the Standards?

How will TAPA introduce control measures to address supply chain cyber threats?

Training


How do I find more details about TAPA training?

Do I need to participate in TAPA training for the updated Standards?

When will the updated training schedule be published and what form will it take?

FSR


Why is a risk assessment be required for FSR Certification?

I am certifying to FSR and I’m not sure when or when not to apply ISO certified seals to trailers. I am sending out different types of loads to direct-to-end customers, multi-drop customers and direct to other hubs for onward distribution. What does TAPA FSR require?

What are my options if I need to allow parking in the 25m zone?

We cannot comply with requirement 1.5.1 and will need to request a waiver. Can you give some advice of what should be included in the waiver request?

For 1.5.1 I have no options to restrict parking, we need the parking spaces. Why is a waiver for 1.5.1 required if I think there are no risks? The FSR says “permitted to shipping and receiving areas if pre-approved and restricted to signed/ designated parking areas”. We do all this already so we do not see why a waiver is also needed?

We lease a warehouse unit and are seeking TAPA FSR certification. Can the CCTV system be under the total and sole control of the owner of building?

Is it allowed to have analogue cameras with digital recording?

For FSR 5.4.4 local law does not allow me to store any CCTV images. Is this sufficient evidence for a waiver to be approved?

FSR 6.2.1 requires that the supplier must have a formally appointed person for security on site who is responsible for maintaining TAPA FSR and company supply chain security requirements. The supplier must also have a person (can be the same) responsible for monitoring the FSR programme. This includes scheduling compliance checks, communications with AAs, recertification, changes to the FSR Standard, etc. Note: These persons can be an employee or outsourced person under contract to perform this role This looks like more than 1 requirement? Can you provide more of an explanation on what I can or cannot do to appoint the "formerly appointed person on site" and the "person responsible for monitoring the FSR programme"? What evidence is required to prove we have appointed this person?

Can you give an example of unacceptable and acceptable evidence to support CCTV recordings? TAPA FSR: 5.4.4 CCTV recordings stored for a minimum of 30 days where allowed by local law. LSP/Applicant must provide evidence of any local laws that prohibit the use of CCTV and/or limit the video data storage to less than 30 days

Can you give an example of unacceptable and acceptable evidence for lighting to support CCTV recordings? TAPA FSR 5.5.1: Exterior and interior lighting levels are sufficient to support CCTV images that allow investigation and evidential quality image recording.

Can you give an example of unacceptable and acceptable evidence for escorted visitors who are permitted access to the warehouse areas? TAPA FSR: 4.4.4 LSP’s/Applicant’s authorized workforce and escorted visitors permitted access to dock/warehouse areas based on a business need and restricted.

I don’t have an internal Authorised Auditor. Can I use one of the TAPA-approved Independent Audit Bodies (IAB) to complete my FSR Level C self-certification audit?

I have heard comments that the FSR certification model will change. Is this true?

Why are we looking at the possibility of changing the FSR certification model to a multi-site certification model?

Are there any significant changes planned for the next revision of the FSR?

This passage can be found in the TAPA Standards: The resources to meet the requirements of the FSR shall be the responsibility of the LSP/Applicant and at the LSP’s/Applicant’s own expense, unless as negotiated or otherwise agreed upon by Buyer and LSP/Applicant. What do you mean by resources?

My facility is already FSR Level 3 selfcertified. My client requires that I have FSR Level 1. It will be costly to upgrade our security and I don’t agree it is needed. How can TAPA help me explain this to my client?

For FSR Level A, I see a fence is required or there is an option for no fence? Surely a fence is required for the highest security level. Can you explain the reasons?

CCTV Systems. FSR 5.4.2 states that a “Minimum 3 frames per second per camera” is required. Modern CCTV installations can achieve and do much better than this. Some studies suggest a minimum of 10 frames per second is needed to preserve evidential quality images. Why is the TAPA frame rate so low?

For FSR Level A, I see a fence is required or there is an option for no fence? Surely a fence is required for the highest security level. Can you explain the reasons?

As a large multi-national truck operator, we often receive cargo from, and ship with, companies which only allow their drivers to use their company issued ID when entering our facility. When challenged, they stated this was adequate for identification purposes and was a policy to protect their drivers from identify theft as ID documents are often scanned or photocopied. TAPA requirements are quite clear: “3.3.1 All drivers identified using government-issued photo ID (e.g. driver’s licence; passport or national ID card, etc.) and a driver log maintained”. What should we do when situations like the above happen?

In a previous article, TAPA mentioned the use of Multi-Site Certification being introduced in the next revision. I already have more than 10 sites certified under the existing single site certification process, so what are my options? Will I be forced to convert to a Multi-Site Certification if I do not see the need yet?

I like what I have seen so far in the updated FSR 2020. The new multi-site option could benefit my company, but what is the best way forward?

When I complete the FSR 2020 training, I plan to self-certify the warehouses my company operates to FSR level C. As I will be qualified as a TAPA Authorised Auditor, can I now also audit my sub-contractor’s warehouse, which stores and handles shipments for us?

For FSR 2020 multi-site certification, what do I need to do in preparation for the Independent Auditor’s visit?

I’ve been following the FAQ’s on FSR multi-site. Now the FSR Standard has been published, I think this may be the option I’m looking for. I’m just not sure how flexible the Central Function requirement can be. Can I have all my FSR sites in EMEA, APAC and Americas come under 1 Central Function?

We are constructing a new facility and will invest in a sophisticated automated visitor management system. The system will not require a visitor to be processed by a person on entering and leaving the facility. Visitors will be met and permitted access by the person they are visiting only after being processed by the system. We are looking to achieve an FSR Level A certification for this facility but have noted that the FSR Standard states that ‘Access at office area visitor entry point(s) must be controlled by an employee /guard/receptionist who has been trained on badge issuance, controls, logging, visitors, escort requirement’. Does this mean our facility cannot be TAPA certified even though I am using state-of-the-art automated visitor controls?

My FSR Level A certified facility has a very busy goods receiving/ shipping yard and we have more than enough external cameras to view the dock areas. During our last TAPA audit, our docks were in constant use and as soon as one truck departed another would soon take its place. The auditor did not issue a corrective action but did say we should consider having more cameras and/or control truck movements, so the camera views were not obstructed so often. I disagreed with the auditor’s comments. We cannot do anything that impacts the operational efficiency without good reasons. What advice can you give me in case this comes up again in a future audit?

Why is the recording rate for CCTV images being increased from to 3 to 8 frames per second (FPS) in the FSR 2020? When my site is recertified, must I upgrade the CCTV system?

We have our next certification in May 2020. Can we still certify our warehouse against the requirements of the 2017 version or is the 2020 version going to already be binding at that time?

I see FSR 2020 will offer a multiple site certification option. I need to know more about this so I can see if it’s something we want to introduce. Who can I contact?

I have 2 sites that need to be FSR certified. Where can I find information on the audit bodies?

I see from previous updates that FSR will be available in single site (as today) or multi-site options. If I were to consider converting my existing 4 certified sites to the single multi-site certification options, what are the main differences, and would I save on auditing costs?

I have 3 uncertified sites that I would like to be self-certified to FSR Level C. Can I add these to the multi-site option certification?

When I transition my existing FSR 2017 certified sites to FSR 2020, will there be additional cost investment needed to meet the new Standards?

In a previous article, TAPA mentioned the use of Multi-Site Certification being introduced in the next revision. I already have more than 10 sites certified under the existing single site certification process, so what are my options? Will I be forced to convert to a Multi-Site Certification if I do not see the need yet?

PSR


What is the PSR Security Standard and who is it intended for?

I saw an older version of PSR. What’s new in PSR 2018?

Why do we need PSR?

Is PSR a global standard?

How is PSR linked to incident data?

I want to use secure parking sites for my trucks in transit. I find that there are not enough sites with parking places available or they are expensive to use. What is TAPA’s view of this situation and why do you think your PSR Standard will make any difference?

TSR


ISO compliant seals are very expensive. Where can I find low cost alternatives?

Are there specific rules for seals on TSR 1 multi-stop routes? Can we use an electronic seal?

We are concerned about privacy compliance and keeping records of interviews for later use. Can you provide any guidance on what to look for when auditing TSR E.8? TSR E.8 Re-hiring: Procedures are in place to prevent LSP/Applicant from re-hiring workforce if denial/termination criteria are still valid. Note: Records are reviewed prior to re-hiring (Ex: background of previously terminated personnel or rejected applicants previously denied employment).

Can you give an example of unacceptable and acceptable evidence provided for a TSR Vehicle Register that meets TAPA requirements? TAPA TSR: 3.11.1 Vehicles to be utilized under the TSR must be listed in the LSP's/Applicant’s TSR Vehicle Register. There is no specific format for the Register, however, it must include at least the following information: Tractor identification information, trailer identification information, TSR level, date(s) of audits and self-assessments, any exceptions, corrections, date of correction.

Can you give an example of unacceptable and acceptable evidence that shows driver training is sufficient? TAPA TSR: 4.1.1 Security Threat Awareness training program conducted with drivers and documented in driver records. This training, as a minimum, shall include threat awareness, robbery response, vehicle checking, and recognition of developing threats, use of secure parking, appropriate responses to threatening events and communication with police and management. This training must take place at least every 2 years.

Can you give an example of unacceptable and acceptable evidence for locking of truck cab doors? TAPA TSR: 1.1.1 Driver procedures require that truck doors are locked during transit.

We’re a forwarder that only uses sub-contracted trucking. My client requires us to provide TSR Level 3 trucks for their shipments. Two of my sub-contractors are willing to be TAPA TSR Level 3 self-certified but do not have a TAPA trained Authorised Auditor to complete their audits. Can we use one of our Authorised Auditors to conduct the necessary TAPA audits at our sub-contractors?

Are any significant changes planned for the TSR Standard?

As a medium-size courier company, we previously looked at TSR. It was not a good fit for our business as we only operate final mile deliveries using vans. I am now aware TAPA is looking at security requirements for vans and fixed body trucks in the next revision. Should I relook at TSR certification for my business?

I am moving containers by road and then internationally by sea. Can I use TSR to cover the security requirements with my Logistics Service Providers?

It’s clear from reading the TSR 2020 that Auditors will look for evidence of compliance before and during the certification. I note that the TSR Vehicle Register is a critical record for auditors (assessing compliance) and the LSP (managing compliance). How can both auditors and the LSPs use the Vehicle Register to assist in the certification audit?

Does TAPA have any other advice for creating and maintaining a TSR Vehicle Register?

The TSR has some interesting new ideas on vehicle escorts and truck monitoring. Would TAPA be able to help me with supplier and equipment selection?

My TSR 1 2017 certification expires in November this year and I will re-certify to TSR 2020. My main customer wants me to add Escorts and Cyber Threat to my certification. What must I do to prepare and add these to my certification?

I’m concerned that my existing TSR 1 2017 certification may not pass the TSR 1 2020 certification requirements on some of the technical requirements. For example: TSR 1 2020 requires: A tracking device must be installed on the trailer/container in a covert location. The device can be installed internally or externally and, where available, must be capable of utilizing at least two methods of signalling such as: • Method 1 - 3G or 4G or 5G • Method 2 - SMS/GPRS using GSM • Method 3 - CDMA • Method 4 - Satellite tracking device • Must be equipped with at least one covert antenna TSR 1 2017 requires: When the tractor and trailer can be separated, a tracking device must be installed in a covert location in both the tractor and trailer and, where available, must be capable of utilizing at least two methods of signalling such as 3G, or SMS/GPRS using GSM or CDMA and must be equipped with at least one covert antenna.

Can you help me obtain a copy of the TAPA Locking Systems Guidance document as mentioned in the TSR 2020 Draft Standard?

I’m told sea containers are now part of the TSR Standard. Is TSR now multi-modal and can I now certify my sea containers for transport by road, rail and sea?

Does the TSR address any of the threats we currently see with ‘Last Mile’ deliveries?

Can you provide any update on what TAPA means by TSR Modular Standards?

Can you provide any information on the 4 modules that will be available in the updated TSR?

What other features will be new in the TSR?

I am told TSR 2020 will have major changes. Can you assure me that I won’t have to make major investments in my truck fleet to maintain my certification status?

We are an existing TSR Level 1 certified company with many trucks. My certificate is valid until May 2021. What should I do to prepare for the new TSR 2020?

Why is TAPA promoting use of its own Parking Security Requirements (PSR) when the EU will introduce its own Parking Security standard? Surely one standard for the industry will make more sense?

As a medium-size courier company, we previously looked at TSR. It was not a good fit for our business as we only operate final mile deliveries using vans. I am now aware TAPA is looking at security requirements for vans and fixed body trucks in the next revision. Should I relook at TSR certification for my business?

Please click on the above image to download our latest conference video from Dublin!

Latest News and Views

New TAPA Brochure

Raising security standards within the supply chain.