Skip to content
Noon EliteNoon Elite

Standards calendar

Visitor and contractor control: what changed in each UK audit standard, 2024 to 2027

For the technical, quality or security manager who plans by dates. A new issue lands, audits move to it on a set day, and one or two lines about visitors or contractors change. Below, the dates that touch reception, newest first, each read at source, with what changed and the page that quotes the clause.

Try it yourself, no sign-up

Sign in on a demonstration kiosk, then open the fire roll call on your phone. Do not enter real details: everything typed is deleted within the hour.

Book a 15 minute callGo to the dates

From £150 a month plus VAT, iPad and stand included. We are not auditors or certification bodies.

The dates

Newest first

Each date was read at its source on 26 September 2026. Where a source does not say what changed for visitors, the entry says what the version asks instead. Your certification body confirms which issue your next audit is against.

  1. Coming

    TISAX, VDA ISA 2027

    The basis of TISAX assessments ordered from this date

    Published on 1 July 2026. Visitor management for prototype protection moves from 8.1.7 to 8.1.8, and its question now names registration and escorting of visitors; the four must level requirements, including the documented non-disclosure obligation before access, are unchanged.

    TISAX visitor management: the clauses in full

  2. TAPA FSR 2026

    Effective

    The visitor requirements move from 7.3 to 4.1. 4.1.5 keeps the 30 day log and adds that the individual visited and the reason for the visit must be traceable from it; 4.1.4 adds a paragraph on digital IDs.

    TAPA FSR visitor log: the clauses in full

  3. SALSA, Issue 7

    All SALSA audits against Issue 7, with no transition period

    New clause 4.3.3 asks for a procedure for visitor tours and tastings. 1.2.2 now includes footwear in the protective clothing worn by employees, visitors and contractors, and requires a procedure for it.

    SALSA visitor control: the clauses in full

  4. BRCGS Packaging Materials, Position Statement P708

    Effective

    Adds one sentence to 4.4.1, the product defence plan: where personnel are engaged in threat assessments and product defence plans, the individual or team responsible shall be appropriately trained. The visitor reporting system in 4.4.2 is unchanged.

    BRCGS packaging visitor control: the clauses in full

  5. FSSC 22000, Version 7

    Published

    Audits against Version 6 are allowed up to 30 April 2027, and upgrade audits against Version 7 run from 1 May 2027 to 30 April 2028. Prerequisite programmes move to the ISO 22002 series of 2025; the scheme document itself has no requirement naming visitors or contractors, and ISO 22002-1:2025 is sold by ISO and we have not read it.

    No page on this site yet.

  6. BRCGS Packaging Materials, Issue 7

    Audits begin

    Published on 28 October 2024. 4.4.2 asks that access to the site by personnel, contractors and visitors is controlled and that a visitor reporting system is in place; 6.4.2 asks, where permitted by law, that visitors and contractors complete a health questionnaire or otherwise confirm they are free of symptoms.

    BRCGS packaging visitor control: the clauses in full

  7. UFAS Scheme Rules and Standard 2024, Version 1.1

    Effective

    F 1.6 is marked new: employees, contractors and visitors, including vehicle drivers, must be advised that entering the site with a communicable enteric disease is not permitted. F 1.2, F 1.4 and F 1.5, on access, eating and smoking, and workwear, are marked updated.

    UFAS feed mill visitor control: the clauses in full

  8. BRCGS079, Protocol on Unannounced Audits, Version 6

    Published

    The protocol for the unannounced audit every BRCGS Food Safety, Packaging Materials and Storage and Distribution site has at least once in three years. Version 6 updated the planning process in 2.1, clarified the four months in which a site cannot change certification body, and updated the consequences of refusing the audit in 5.1.

    BRCGS unannounced audit: the clauses in full

  9. PCI DSS, v4.0.1

    Published

    The version the PCI Security Standards Council’s library serves. The visitor requirements are 9.3.1 to 9.3.4, and 9.3.4 keeps the visitor log for at least three months, unless otherwise restricted by law.

    PCI DSS visitor log: the clauses in full

  10. Def Stan 05-138, Issue 4

    Issued

    Moves from five Cyber Risk Profiles to four, Level 0 to Level 3. Control 1503, visitor access management, applies at Levels 1, 2 and 3: visitor access and exit shall be logged and visitors shall wear visitor ID badges.

    Def Stan 05-138 visitor access: the clauses in full

  11. IFS Food, Version 8

    Mandatory for IFS Food audits

    Knock out requirement 3.2.2 asks that the requirements for personal hygiene are understood and applied by all relevant personnel, contractors and visitors; 4.21.2 asks the food defence plan for a policy of access by employees, visitors and contractors.

    IFS Food visitor hygiene: the clauses in full

What the kiosk records

The record does not change when the issue does

Whatever the issue number, the kiosk records the same things: who signed in, their company, who they came to see, when they arrived and left, and the exact wording they accepted, kept by its fingerprint. When a new issue asks visitors to be told something new, you change the wording on the dashboard and it applies to the next person who signs in.

What stays by hand

Reading the new issue is yours

  • Deciding what a new clause means for your site, and writing the procedure it asks for.
  • Tours, tastings, escorts and health conversations happen with people, not on the screen. The kiosk records acceptance of your wording; it does not ask questions or store answers.
  • The kiosk does not make a site compliant, certified or audit ready. The auditor decides what the record is worth.

Before you ask

Three questions about the dates

When do SALSA audits move to Issue 7?

From 1 September 2026 all SALSA audits are conducted against Issue 7, regardless of when your audit falls, and SALSA says there is no transition period. Issue 7 adds clause 4.3.3, a procedure for visitor tours and tastings. Read on salsafood.co.uk on 26 September 2026.

When did TAPA FSR 2026 take effect?

On 15 September 2026, as printed in the standard. The visitor requirements are now 4.1.1 to 4.1.7, where FSR 2023 had them at 7.3, and 4.1.5 adds that the individual visited and the reason for the visit must be traceable from the log.

Which VDA ISA version applies to a TISAX assessment?

ENX says ISA 2027 applies to TISAX assessments ordered from 1 January 2027, and ISA 6 to those ordered from 1 April 2024. In ISA 2027 visitor management for prototype protection is 8.1.8 rather than 8.1.7. Your audit provider confirms which version your assessment uses.

Every standard on one pageHow long to keep the recordWhat the log must contain

Also asked of sites like yours

The other things somebody may ask you to evidence

Each of these is a page about one standard, one duty or one visitor, written the same way as this one: what it actually asks for, what an iPad at reception records towards it, and where it does not help.

Every standard on one page: the clause numbers, the version and the date each was read, on one printable table.

Advise sites on this standard? Referral terms are on one page.

Next step

Bring your audit date to the call

Fifteen minutes on the phone. Tell us which issue your next audit is against and when, and we will tell you straight whether a kiosk is worth having in place by then.

Book a 15 minute call

No site visit needed and nothing to install. If it is not a fit we will say so on the call.

Would rather email? [email protected]

Not the person who signs it off? Send them the one page business case