Foreword

This PAS was sponsored by the Department for Environment, Food & Rural Affairs (Defra) and the Food Standards Agency (FSA). Its development was facilitated by BSI Standards Limited and it was published under licence from The British Standards Institution. It came into effect on 16 November 2017.

Acknowledgement is given to the following organizations that were involved in the development of this PAS as members of the steering group:

• Agrico UK Limited
• British Frozen Food Federation (BFFF)
• Campden BRI
• Crowe Clark Whitehill LLP
• Danone
• Department for Environment, Food & Rural Affairs (Defra)
• Food Standards Agency
• GIST Limited
• McDonald’s Europe
• National Cyber Security Centre (NCSC)
• Sodexo Limited
• Tesco UK
• Tulip Limited
• University College London
• Willis Towers Watson

Acknowledgement is also given to the members of a wider review panel who were consulted in the development of this PAS.

The British Standards Institution retains ownership and copyright of this PAS. BSI Standards Limited as the publisher of the PAS reserves the right to withdraw or amend this PAS on receipt of authoritative advice that it is appropriate to do so. This PAS will be reviewed at intervals not exceeding two years, and any amendments arising from the review will be published as an amended PAS and publicized in Update Standards.

This PAS is not to be regarded as a British Standard. It will be withdrawn upon publication of its content in, or as, a British Standard.

The PAS process enables a guide to be rapidly developed in order to fulfil an immediate need in industry. A PAS can be considered for further development as a British Standard, or constitute part of the UK input into the development of a European or International Standard.

Supersession

This PAS supersedes PAS 96:2014, which is withdrawn.

Information about this document

This is a full revision of the PAS 96:2014, and introduces the following principal changes:

• normative and informative references have been updated;
• subclause 3.7 Cyber-crime has been revised;
• subclause 6.2.4 added to cover vulnerabilities related to cyber-attacks;
• two new fictional case studies have been added as subclauses A.5 and A.6 to illustrate cyber security issues;
• Annex B updated;
• Annex D added covering 10 steps to cyber security;
• some editorial amendments have been undertaken.

Use of this document

As a guide, this PAS takes the form of guidance and recommendations. It should not be quoted as if it were a specification or a code of practice and claims of compliance cannot be made to it.

Presentational conventions

The guidance in this standard is presented in roman (i.e. upright) type. Any recommendations are expressed in sentences in which the principal auxiliary verb is “should”.

Commentary, explanation and general informative material is presented in smaller italic type, and does not constitute a normative element.

Contractual and legal considerations

This publication does not purport to include all the necessary provisions of a contract. Users are responsible for its correct application.

Compliance with a PAS cannot confer immunity from legal obligations.

PAS 96:2017

Guide to protecting and defending food and drink from deliberate attack

Current

Published:

16 Nov 2017