One page per clause
The requirement in our words, the evidence an assessor asks for, the common gaps and what to do before publication.
Open the registerThe law and guidance around the barrier, in market order
The standard is voluntary unless a contract, a regulator or a scheme adopts it. For each market the frameworks were chosen by a scan of the held library, not from a fixed list. The order is the United States, the European Union, the United Kingdom and Australia. Where a market has no single barrier law, the page says so and names the held references that shape the decision.
The scan used the buyer's activity and asset: physical security, hostile vehicle mitigation, critical infrastructure, site protection and operational resilience. Frameworks that govern this website's own mail, storage or cookies are not counted as duties here.
United States
The US has no single vehicle barrier law. The site protection standard, the federal control catalogue and the supply chain programme are the held references that shape a barrier decision.
| Framework held | Why it matters to this buyer |
|---|---|
| ANSI/ASIS PAP.1-2012 Physical Asset Protection | The physical asset protection standard. It frames the barrier as one layer in a site protection plan, alongside the perimeter, the access control and the response. |
| NIST SP 800-53 Rev 5 | The security and privacy controls catalogue. The physical and environmental protection family covers site access and the physical protection of facilities. |
| C-TPAT, Customs-Trade Partnership Against Terrorism | The supply chain security programme. Its vehicle access and parking requirements matter where a barrier protects a freight or port site. |
European Union
The EU framework is risk-based. NIS2 supplies the duty, and the two ISO standards supply the continuity and risk methods that a barrier decision uses.
| Framework held | Why it matters to this buyer |
|---|---|
| NIS2 Directive | The critical infrastructure risk management directive. It requires risk management measures for essential and important entities, including physical security. |
| ISO 22301:2019 | The business continuity standard. A barrier is a continuity control where a vehicle impact could stop a site, so the continuity plan and the barrier plan should agree. |
| ISO 31000:2018 | The risk management guidelines. They give the method for the risk assessment that decides the threat, the stand-off and the residual risk. |
United Kingdom
The UK has sector regulators rather than one barrier law. The water direction, the financial resilience regime and the building safety regime are the held references that touch a site barrier.
| Framework held | Why it matters to this buyer |
|---|---|
| UK Security and Emergency Measures Direction (SEMD), Water Industry | The direction that sets security and emergency measures for the water industry. It is a concrete example of a regulator requiring physical protection of sites. |
| UK FCA/PRA Operational Resilience Framework | The operational resilience regime for financial firms. It requires important business services to stay within impact tolerances, which a site protection plan supports. |
| UK Building Safety Act 2022 | The building safety regime. It matters where a barrier, its foundation or a vehicle approach interacts with a higher-risk building and its safety case. |
Australia
The Australian framework is duty-based. The SOCI act and the CIRMP rules set the critical infrastructure duty, and the work health and safety act sets the general duty to people at the site.
| Framework held | Why it matters to this buyer |
|---|---|
| Security of Critical Infrastructure Act 2018 (SOCI) | The critical infrastructure act. It imposes risk management and reporting duties on critical infrastructure assets, including physical security. |
| Critical Infrastructure Risk Management Program (CIRMP) Rules 2023 | The rules that require a risk management programme for critical infrastructure. They connect the barrier to the asset's risk profile and its reporting. |
| Australia Work Health and Safety Act 2011 (Cth) | The work health and safety act. The duty to protect people at a workplace supports a barrier decision where a vehicle hazard exists. |
How to read this page. The standard gives the test method and the rating. These frameworks give the legal and regulatory context. A clause answer on this site is not a statement of any of these laws. Read the framework page before relying on a duty.
THE RECORD THIS IS BUILT FROM
Read from the public record, not invented
Every clause answer on this site points to the official record or the public preview behind it, so you can check any line yourself. The register holds 25 records, 111 evidence lines and 100 common failure lines. The dates come from the ISO stage record. The amendment text is not public, and this site does not describe what it changes.
16 CLAUSES
9 ANNEX RECORDS
Normative and informative, labelled
Annex A is normative and carries the measurement controls. Annexes B to D are informative and say so.
Open the annexesONE STAGE RECORD
No invented date
Stage 50.00 is recorded on 8 October 2026. The planning date is an estimate and is labelled wherever it appears.
Read the recordThe base standard is published. The amendment text is not public at FDIS. Each record cites the public source it comes from. Where the public record is silent, the page says so.