TAPA is a set of industry security standards to protect high-value, theft-targeted goods as they move, are stored, and are parked along the supply chain. Rather than a single document, TAPA maintains certifiable Security Standard Requirements specifying minimum physical, procedural, and technological security controls. The standards are relevant to manufacturers of theft-prone products, logistics service providers, freight carriers, and the customers and insurers who depend on secure cargo movements.
Already operate to TAPA security requirements?
If your organization has implemented security based on the TAPA standards and you’re looking for a certification partner, our dedicated certification page has everything you need — from process overview to a personalized quote.
What is TAPA, from a certification body’s perspective?
From a certification body’s standpoint, TAPA is a family of industry security standards owned and maintained by the Transported Asset Protection Association rather than by a national or international standards organization. Each standard is certifiable: an organization’s sites, fleets, or parking locations are assessed against the applicable security requirements, and on demonstrated conformance a TAPA certificate is issued and registered with the Association under a unique tracking number.
The standards are tiered into security levels rather than built on the Harmonized Structure used by ISO management system standards. Higher levels demand independent third-party audit by a TAPA-approved certification body, while the entry level allows a registered, trained self-certification audit. Independent certification matters because it produces verifiable, comparable
As a certification body, DQS assesses and certifies conformance — it does not design or implement your security program. That independence is what gives a certificate its value: the organization builds and runs the security controls, and an accredited, TAPA-approved third party verifies them against the standard.
Key Facts about TAPA at a Glance
| Full Title | TAPA Security Standards |
| Published by | Transported Asset Protection Association (TAPA), operating through its regional associations (Americas, EMEA, and APAC) |
| First Published | Late 1990s; the Association was formed in 1997 and the requirements have been revised on a multi-year cycle since |
| Applicable to | Manufacturers of high-value, theft-targeted goods, logistics service providers, freight carriers, and parking-site operators in the global supply chain |
| Certifiable | Yes. Conformance is demonstrated through certification — independent third-party audit by a TAPA-approved certification body at higher security levels, with a registered self-certification option available at the entry level. |
| Structure | Tiered security levels defining minimum physical, procedural, and technological controls, supported by a defined certification framework |
Context and Drivers for TAPA
Cargo Crime and Financial Loss
Cargo theft remains a persistent and costly threat across road, warehouse, and air freight, with organized criminal groups targeting high-value and easily resold goods such as electronics, pharmaceuticals, apparel, and metals. The TAPA standards exist precisely to counter this exposure, drawing on real-time incident data gathered through the Association’s Incident Information Service to shape requirements that reflect current attack methods and loss patterns. For shippers and carriers, the financial and reputational cost of a single major loss is often far greater than the cost of systematic prevention.
Supply Chain Security Expectations
Securing freight is increasingly a shared expectation across the supply chain rather than the concern of a single party. Large shippers commonly require their logistics partners to operate to a defined TAPA level as a condition of doing business, and a recognized certificate provides a comparable reference that buyers and partners can rely on without conducting their own bespoke assessments. This makes TAPA conformance a practical instrument for managing security across multi-tier, cross-border logistics networks.
Customer and Insurer Requirements
Customers and cargo insurers are central drivers of TAPA adoption. Insurers may reflect certified security controls in their risk evaluation and terms, while customers in high-risk sectors increasingly treat a TAPA certificate as a baseline credential for handling their goods. The standards therefore function as a common language of security between commercial parties whose interests — protecting value in transit and in storage — are closely aligned.
Core Requirements for TAPA
Facility Security Requirements (FSR)
FSR sets minimum requirements for the secure handling and transportation-related temporary storage of goods at facilities such as warehouses and distribution centers. It addresses perimeter and building security, access control, intruder detection and alarm response, surveillance, and the procedures and personnel controls that surround them. FSR is structured into three security levels — A (the most demanding), B, and C — so that the depth of controls can be matched to the risk and to customer requirements. Level C single sites may use a registered self-certification audit, while Levels A and B require independent third-party audit.
Trucking Security Requirements (TSR)
TSR specifies minimum requirements for the secure road transportation of high-value goods. It covers the security specification of tractor units and trailers, in-company processes and their control, and a dedicated communications and tracking infrastructure for vehicles and loads. TSR is organized into three security levels (1, 2, and 3) and further distinguishes carriers by fleet size into Large, Medium, and Small categories, so that requirements scale appropriately to the operation. As with FSR, higher levels rely on independent audit while the entry level allows a registered self-certification route.
Parking Security Requirements (PSR) TAPA EMEA
PSR sets minimum requirements for the security of parking sites and cargo yards, which represent a recognized weak point when goods stand unattended. It addresses site protection, monitoring, lighting, access control, and operational procedures, with the broader aim of increasing the number of secure, verified parking locations available to carriers planning their routes. By raising parking-site security to a defined standard, PSR closes a gap between the controlled environments addressed by FSR and TSR.
Freight Broker Security Requirements (FBSR) TAPA AMERICAS
Freight Broker Security Requirements (FBSR) is a baseline security standard designed for freight brokers who arrange transportation without owning physical assets like trucks or warehouses.
The Certification Framework
Across all standards, conformance is assessed against a TAPA-defined certification framework and audit checklist. A certificate is typically valid for three years, during which the certified organization performs an annual self-assessment, with recertification at the end of the cycle. Audits may be conducted only by TAPA-trained and authorized auditors, and every certificate is registered centrally with a tracking number to support traceability and comparability.
Target Groups and Application Areas for TAPA
The TAPA standards are designed for any organization that owns, moves, stores, or parks goods that are attractive to thieves. In practice this centers on two groups: the buyers and manufacturers whose products are at risk, and the logistics service providers and freight carriers who handle those products on their behalf. Parking-site operators form a third group addressed specifically by PSR.
Typical sectors include technology and high-tech electronics, pharmaceuticals and healthcare, automotive parts, apparel and footwear, cosmetics and personal care, food and beverage, and high-value metals — together with the warehousing, road haulage, and freight-forwarding operations that serve them. Within these settings, the standards provide a structured basis for identifying and assessing security risk and for selecting proportionate controls. Used this way, TAPA conformance supports informed, evidence-based security decisions and provides a consistent reference point across sites and trading partners; it does not by itself eliminate theft, but it establishes a verified framework within which loss is systematically reduced.
Relationship to Customs Security Programs
TAPA is sometimes mentioned in the same context as customs security programs such as the European Union’s Authorized Economic Operator (AEO) scheme and the United States Customs-Trade Partnership Against Terrorism (C-TPAT). These are regulatory or governmental trade-facilitation programs focused on customs and border security, not industry certification standards, and they are not interchangeable with TAPA. They are noted here only because they share the broad goal of supply chain security; an organization may participate in them independently of its TAPA conformance.
Your organization already operates secure facilities, fleets, or parking sites based on the TAPA standards — and you’re now considering independent certification?
Learn more on our dedicated TAPA Certification page.
About DQS as a certification body
This article is part of the DQS Knowledge Center, a resource on management system standards and certification processes. For context on who produced it:
- One of Germany’s first management system certifiers — DQS issued its first certificate in 1986 and has audited and certified management systems for over 40 years.
- Operates from more than 80 offices in 60 countries with a worldwide network of more than 3,000 auditors.
- Accredited and TAPA-approved for FSR, TSR, and PSR certification alongside related standards such as ISO 28000 and ISO 9001 — so supply chain security and broader management systems can be certified from a single provider.
- Member of IQNet, the international certification network, supporting cross-border recognition of DQS certificates.
The articles in this Knowledge Center are written and reviewed by DQS specialists working with these standards in audit practice. Where applicable, content is verified against the current version of the standard, the issuing body’s official publications, and recent regulatory or accreditation guidance. This article was last reviewed on 15 June 2026.
Frequently Asked Questions about TAPA
Is TAPA an ISO standard?
No. TAPA standards are industry security standards developed and owned by the Transported Asset Protection Association, not by the International Organization for Standardization. They are certifiable in their own right and sit alongside, rather than within, the ISO catalog.
Is TAPA mandatory?
TAPA conformance is voluntary in regulatory terms — no law requires it. In commercial practice, however, large shippers and customers frequently make a defined TAPA level a contractual condition for handling their goods, so it can be effectively mandatory for logistics providers serving high-risk cargo.
Who can carry out a TAPA certification?
Higher-level certification is carried out by certification bodies that are both appropriately accredited and approved by TAPA, using auditors trained and authorized against the relevant standard. Entry-level self-certification may be performed by a trained, TAPA-registered auditor within the organization.