FSR 2011 Freight Suppliers Minimum Security Requirements
FSR 2011 Freight Suppliers Minimum Security Requirements
FSR 2011 Freight Suppliers Minimum Security Requirements
TAPA
FSR 2011 FREIGHT SUPPLIERS MINIMUM SECURITY REQUIREMENTS
Contents
Section 1 - Requirements
1. Scope
(a) (b) (c) (d) (e) (f) Forward Freight Security Requirements Related Documents FSR Applicable Areas Resources to Implement the FSR Definitions
2. 3.
Contract Acceptance
(a) Supplier's Responsibilities at Acceptance of the Contract
4.
5. 6.
Security/Loss Investigations
(a) Supplier Investigation Responsibilities
Waivers
(a) (b) Waivers Waiver Process
7.
1 TAPA CONFIDENTIAL Transported Asset Protection Association 20002012, All Rights Reserved
Section 2 Specifications
I. Supplier Facility/Truck Freight Security Requirements
Section 3 Forms
FORM 3.1 REQUEST FOR WAIVER
Section 1 - Requirements
1. Scope
(a) Forward
Transported Asset Protection Association (TAPA) is an association of security professionals and related business partners from high technology and high value companies who have organized for the purpose of addressing the emerging security threats that are common to the high value industry supply chain. A fundamental TAPA objective is to affect positive change in the security practices of the freight transportation and insurance communities as a whole. Major freight service providers are moving toward TAPA-recognized security standards for the care and handling of freight and are recognizing the inherent value of doing so.
Details the process to plan and conduct the precertification meeting. This meeting will assist in determining if Supplier facilities & transportation methods meet the minimum-security requirements. For use by Buyer & TAPA certified independent assessors. (Provided by Audit Firm) Provides associated scoring criteria (0, 1 or 2) for meeting each specific FSR. Lists FSRs by classification (A, B or C) and provides calculation for scoring.
Jan 1, 2011
Jan 1, 2011
Jan 1, 2011
(f) Definitions
TERM Buyer Supplier CCTV DEFINITION Purchaser of services and/or owner of transported goods Provider of transportation and/or logistics services Closed Circuit Television
3 TAPA CONFIDENTIAL Transported Asset Protection Association 20002012, All Rights Reserved
DEFINITION Digital Video Recorder Freight Security Requirements: Note the terms freight and cargo are utilized interchangeably for all intents and purposes within the TAPA scope and documents. Criminal incidents occurring within local area of Suppliers facilities. Supplier Corrective Action Requirement Transported Asset Protection Association Certified Auditor
2. Contract Acceptance
(a) Suppliers Responsibilities at Acceptance of the Contract
At acceptance of the contract, the Supplier shall submit to the regional representatives of the Buyers Logistics organization and the Buyers Security Management, a copy of the Suppliers security policy and procedures or plan for ensuring safe and secure transportation, in-transit storage and warehousing of Buyers assets. Copies of Suppliers security procedures that are relevant to the security of Buyers assets shall be submitted to the Buyer for review. Suppliers security procedures must not be in conflict with the agreed upon FSR. Any and all documentation shall be handled as confidential information. In cases where the Suppliers security procedures do not meet the FSR, the Supplier shall take the following actions:
I.
The Supplier shall present a detailed written action plan, which outlines the noncompliant FSR area and the corrective action to be taken, with implementation dates not to exceed 60 days from date of acceptance of contract. Supplier will attain TAPA Certification within 60 days for all facilities that will handle Buyers assets. For areas that are not FSR compliant, a negotiated contingency plan between Supplier & Buyer shall be agreed to and in place at the commencement of the contract period. The contingency plan is designed for use when the Supplier needs time to upgrade security on new routes and shall not exceed 60 days in duration. Any exception to the maximum 60-day duration referenced herein shall have prior written approval from the Buyer requiring FSR certification. Supplier will note and respond to Buyers concerns regarding security concerns not covered by the FSR.
II. III.
IV. V.
4 TAPA CONFIDENTIAL Transported Asset Protection Association 20002012, All Rights Reserved
VI.
The Supplier will only negotiate with the approved TAPA Certification body for waivers for non-applicable TAPA FSR security measures or where alternative actions are taken to control security risks. The regional TAPA governing body will approve/decline all waivers submitted by the Supplier through the independent audit firm. Suppliers who submit to FSR certification independent of a Buyers requirement are not exempt from any portion of the FSR.
VII.
II. III.
II.
5 TAPA CONFIDENTIAL Transported Asset Protection Association 20002012, All Rights Reserved
III.
The requirement for TAPA certification is also extended to any Supplier subcontractors facility where the Buyers assets will be stored, distributed or transit through. The Buyer reserves the right to conduct unscheduled audits. The Buyer shall give a minimum of 24 hours notice to the Supplier. TAPA certified auditors shall inform the Supplier of assessment/audit results within ten (10) working days from the completion of the audit. A summary of the findings/results should be given informally to the Supplier on the day of the audit/assessment at the closing conference. Supplier shall have deemed to pass the audit and be certified for that specific facility location if a TAPA FSR audit score of 60% or higher is achieved in each individual section (excluding Sections 6, 7 and 8) in addition to an overall consolidated sections score of 60% or higher; all mandatory items must be scored at least a 1 as well. Supplier shall still be responsible for completing SCAR items in the agreed time scale, even when certification is achieved. Clearance of the non-mandatory SCAR is at the option of the Supplier but must be disclosed to Buyer. When the TAPA certified auditor submits a SCAR to the Supplier associated with the audit findings, the Supplier shall respond to the auditor within ten working days, documenting the action to be taken and the date the action will be completed. SCAR completion dates may be negotiated between the auditor and the Supplier. However, unless the TAPA certification body approves a waiver from process, corrective action implementation shall not exceed sixty (60) days from notification to the Supplier. The Supplier is required to complete self-audits of their facilities and their subcontractors facilities as detailed in section IV paragraph (d).
IV. V.
VI.
VII.
VIII.
TAPA Certification body shall periodically complete their own classification assessments and ultimately make the decision on the final classification to be assigned to each of Supplier facilities handling or storing of Buyers assets. The Supplier or Buyer can request the facility to be re-assessed if either party considers the assessment category to have changed. I. The Building Classification Assessment methodology is set forth as follows: Pre-Contract & where TAPA Certification has not been previously granted. Using TAPA audit forms, Supplier classifies facilities that will be used in the transport of Buyers assets by being rated at least a 1 in each of the mandatory audit areas, obtain a score of 60% or higher in each individual section (excluding Sections 6, 7 and 8) as well as 60% or higher for the overall consolidated sections score. Final classification is attained (within 30 days), when the Supplier facility complies with or has agreements in place with the TAPA auditor, that will meet all the requirements of a category and is assessed by an independent TAPA auditor.
7 TAPA CONFIDENTIAL Transported Asset Protection Association 20002012, All Rights Reserved
CLASSIFICATION
SUPPLIERS/SUBCONTRACTORS REQUIREMENTS
SECURITY
AUDIT
Independent Auditor: Certification audit conducted 1st year, valid for three years, then re-certification is required. Supplier Self Assessment: Annually and submitted to the TAPA CA (who performed the original audit) within two weeks of original certification anniversary dates. Independent Auditor: Certification audit conducted 1st year, valid for three years, then re-certification is required. Supplier Self Assessment: Annually and submitted to the TAPA CA (who performed the original audit) within two weeks of original certification anniversary dates. No audits by Buyer or independent auditor required. Supplier audits, when requested by Buyer.
5. Security/Loss Investigations
(a) Supplier Investigative Responsibilities
I. The Supplier, its agents and sub-contractors shall actively cooperate with law enforcement authorities, and the Buyer or their appointed agents in the conduct of an investigation into product, material or equipment that is lost, stolen, damaged or tampered with while in the care, custody and control of the Supplier or when the Supplier can provide assistance to any such investigation. All information, including regular updates, gathered by the Supplier, its sub-contractors or agents during the investigation shall be shared with the Buyer. A reporting procedure shall be included in the Suppliers own security procedures, see Section 2 The Buyer, or appointed agent, shall have the right to oversee and participate in such investigations.
II.
III.
8 TAPA CONFIDENTIAL Transported Asset Protection Association 20002012, All Rights Reserved
6. Waivers
(a) Waivers
In exceptional circumstances, the TAPA CA may be confronted with a waiver request for a specific security requirement in part or whole on behalf of the Supplier. TAPA reviews and approves/denies all waiver requests. It is the TAPA CAs responsibility to decide whether the request is valid and that substantial mitigating reason(s) exist that led to the waiver application. Request for waivers are more likely to be approved by TAPA if alternative security controls are introduced to mitigate the security exposure. Waivers are valid for up to a maximum of 1 year. The original requirement must be completed on the expiration date of the waiver or requested and approved again.
II.
III.
IV.
9 TAPA CONFIDENTIAL Transported Asset Protection Association 20002012, All Rights Reserved
10 TAPA CONFIDENTIAL Transported Asset Protection Association 20002012, All Rights Reserved
Section 2 Specifications
I. Supplier Facility/Truck Freight Security Requirements
1. Perimeter Security
1.1 Perimeter Fencing (including gates)
1.1.1 Cargo handling and shipping and receiving yard enclosed by perimeter fencing.
M M
1.3. Lighting
1.3.1 Flood lighting of loading/unloading areas. 1.3.2 Dock doors illuminated externally at night. 1.3.3 Exterior and interior lighting levels support high quality CCTV images and recording.
11 TAPA CONFIDENTIAL Transported Asset Protection Association 20002012, All Rights Reserved
M M
M M M
3. Facility Dock/Warehouse
3.1. Access control between office and dock/warehouse
3.1.1 Security controlled access points (e.g., Guard, card access or CCTV with intercom).
12 TAPA CONFIDENTIAL Transported Asset Protection Association 20002012, All Rights Reserved
M M
M M
4. Security Systems
4.1. Monitoring of security systems
4.1.1 24x7x366 monitoring post; secure from attack. 4.1.2 All security system alarms responded to in real-time 24x7x366.
13 TAPA CONFIDENTIAL Transported Asset Protection Association 20002012, All Rights Reserved
M M
M M M
M M M
M M M M
5. Security Procedures
5.1 Documented security procedures
5.1.1 Local documented procedures for handling Buyers assets and escalation procedures for communicating security incidents to Buyer. 5.1.2 Process for timely reporting of lost, missing or stolen Buyers assets. Incidents to be reported by the Supplier to the Buyer within 12 hours; Obvious thefts reported immediately. 5.1.3 Emergency Buyer and local management contacts for security incidents listed and available.
14 TAPA CONFIDENTIAL Transported Asset Protection Association 20002012, All Rights Reserved
M M
M M
15 TAPA CONFIDENTIAL Transported Asset Protection Association 20002012, All Rights Reserved
6.3. Loading/unloading
6.3.1 Proof of shipping and receiving records (Proof of Delivery, Bill of Lading, Waybill, etc.). 6.3.2 Policy in place requiring driver to be present for loading and unloading when allowed.
7. Pre-Alerts
7.1 System of Pre-Alerts
7.1.1 Pre-alert capability in place. 7.1.2 Destination to notify origin within 4 hours of receipt of shipment, reconciling pre-alert shipment details.
17 TAPA CONFIDENTIAL Transported Asset Protection Association 20002012, All Rights Reserved
18 TAPA CONFIDENTIAL Transported Asset Protection Association 20002012, All Rights Reserved
Section 3 Forms
FORM 3.1 REQUEST FOR WAIVER
DATE OF SUPPLIER REQUEST FACILITY LOCATION NAME OF PERSON REQUESTING WAIVER POSITION SIGNATURE FREIGHT SECURITY REQUIREMENT FOR WHICH WAIVER IS BEING REQUESTED
(ONE REQUIREMENT ONLY, USE ADDITIONAL REQUEST FORMS IF NECESSARY):
Waiver #:
This Section For TAPA Use Only Waiver Approved (Y/N) Date Waiver Commenced Date Waiver Expires (maximum 1 year) Approved By (Name): Approved By (Signature): Date: Waiver Reference #
19 TAPA CONFIDENTIAL Transported Asset Protection Association 20002012, All Rights Reserved