Commercially operated vehicles – framework for mitigating security risks from malicious use
The Department for Transport (DfT) and the Centre for the Protection of National Infrastructure (CPNI) sponsored this “Publically Available Specification” standard. BSI Standards Limited facilitated its development and it was published under BSI licence, effective on 31st May 2021.
PAS 29000 specifies requirements for the process of identifying, implementing and maintaining security measures to reduce the risk of commercially operated vehicles being used in acts of terrorism and other forms of serious and organised crime including drug operations, vehicle cargo theft as well as undesirable actions such as anti-social behaviour.
PAS 29000 provides guidelines for organisations to assess and manage risks associated with their supply chains. It focuses on sustainability and resilience, offering frameworks and best practices to help businesses identify, evaluate, and address potential risks in the supply chain. The standard covers business continuity, and helps organisations ensure that they are managing these risks in a way that is aligned with broader sustainability goals. It is particularly useful for companies looking to improve their supply chain’s resilience to disruptions, regulatory challenges, and other external pressures.
PAS 29000 is intended for operators (irrespective of whether they lease, hire or are owned by operator and/or driver) of:
The PAS does not apply to organisations whose sole business relates to the hiring out of commercial vehicles.
Section 4 of the specification initiates the approach to risk assess the required security protocols for operating commercial vehicles. If that risk assessment shows no appetite or need to implement PAS 29000 then the matter ends there and you need not get in touch with QSS!
If that same risk assessment shows actions are required, any required counter measures to avoid malicious use drives a required response utilising;
Section 5 – initiates your approach to security of your commercial vehicles;
Section 6 – allows you to develop a security plan;
Section 7 – allows you to assess specific security risks;
Section 8 – helps you in identifying, assessing and recording existing security risk mitigation measures;
Section 9 – helps you to determine, develop and implement any additional security risk mitigation measures required.
Section 10 – guides you in how you shall monitor and audit compliance.
Section 11 – guides you to how you shall respond to any security breaches and/or incidents and;
Section 12 – drives continual review of your security management plan.
This can all be summarised as:
When a business engages QSS (Quality Service Standards Ltd) to carry out its assessment and certification processes, an “Initial Assessment” will be carried out by QSS to audit the company’s compliance against PAS 29000. Following this (and subject to the clearance of any nonconformities) a certificate will be issued, usually valid for 12 months. Then annual surveillance assessments are carried out normally leading to renewal of certification for a further 12 months (subject to any nonconformities).
Costs for this can be obtained by contacting David Woodhouse, QSS General Manager at:
Quality Service Standards Ltd.,
Unit 3, The Progression Centre, Mark Road,
Hemel Hempstead, HP2 7DW
T: +44 (0)1923 699840
E: admin@qssonline.co.uk
© Quality Service Standards Ltd. Registered in England & Wales, No. 03804633. Registered Address: Unit 3, The Progression Centre, Mark Road, Hemel Hempstead, HP2 7DW.
