CTPAT SECURITY QUESTIONNAIRE

It is our intent to work with our business partners as a team to improve supply chain security, as part of our commitment to the C-TPAT program. Our company, as well as our business partners must remain compliant with all security criteria. For more information regarding C-TPAT program requirements, please review the security criteria provided at: https://www.cbp.gov/border-security/ports-entry/cargo-security/c-tpat-customs-trade-partnership-against-terrorism/apply/security-criteria.

Company Name(Required)

First Name(Required)

Last Name(Required)

Phone Number(Required)

Email(Required)

Is your company CTPAT certified?(Required)

Does your company have a written and verifiable process for the screening/selection of your business partners?(Required)

Is your company a certified member of an equivalent World Customs Organization (WCO) accredited supply chain security program administered by your country's customs authority?(Required)

Does your company have a written and verifiable process for the screening/selection of your business partners?(Required)

Does your company require your business partners (within your international supply chain) to demonstrate that they are compliant with C-TPAT security criteria?(Required)

Based on your Business Model, does your company conduct periodic reviews of your security procedures and facilities to verify compliance with C-TPAT security criteria?(Required)

Prior to stuffing, does your company conduct (or ensure they are conducted) container inspections to verify the physical integrity of the container and locking mechanisms of the doors?(Required)

Is there a documented (i.e. checklist) 7-point or 17-point inspection system in place?(Required)

Are empty or full containers stored in a secure area to prevent unauthorized access and/ or manipulation?(Required)

Are procedures in place for neutralizing unauthorized access and reporting a security breach?(Required)

Does your company use high security seals (ISO PAS 17712 compliant) for all shipments destined for the United States?(Required)

Does your company have a copy of the ISO- Lab Test Certification Report for the seals you use?(Required)

Does your company have written procedures governing seal control and affixing protocols?(Required)

Does your company have designated employees who maintain, distribute and affix container seals?(Required)

Does your company maintain a documented inventory for the issuance of seals?(Required)

Does your company cross-reference/ verify the seal number & container number with shipping documents?(Required)

Does your company written procedures include reporting compromised seals and or containers (i.e. security breach) to the appropriate authorities and/ or U.S. Customs?(Required)

Does your company contract the highway carrier/ trucking company?(Required)

Does the contract with the trucking company mandate/ stipulate security procedures?(Required)

Does your company restrict the trucking company from sub-contracting to another highway carrier?(Required)

Does your company ensure the trucking company follows In-Transit procedures (shipment integrity, container/ conveyance inspections, reporting incidents where unauthorized persons, unmanifested cargo, or signs of tampering conveyance are discovered?(Required)

Does your company ensure a tracking and monitoring system is in place for shipments/ conveyances? (Note: An adequate tracking & monitoring system would include, but not be limited to one of the following: Global Positioning System (GPS); Truck to Dispatch communication; other Web-Based Monitoring systems)(Required)

Does your company ensure the tracking and monitoring system is detailed, documented and verifiable? (i.e. GPS reports, Truck to Dispatch communication logs, etc.)(Required)

Does your company ensure that GPS reports and/ or Truck to Dispatch communication logs are reviewed/ verified by management periodically?(Required)

Does your company ensure the trucking company’s written procedures include reporting compromised seals and or containers (i.e. security breaches) to the appropriate authorities and/ or U.S. Customs?(Required)

Does your company ensure the highway carrier uses an ISO PAS high security seal or padlock in-transit?(Required)

Does your company ensure the trucking company’s written procedures include designated, or pre-determined travel routes?(Required)

Are procedures in place to ensure that all cargo information is legible, accurate, complete, and verified to protect against the improper exchange or loss of information?(Required)

Does all cargo information accurately include the description, weight, labels, marks and piece count as verified against the invoice, cargo manifest delivery or purchase order?(Required)

Are shortages, overages, and other significant discrepancies resolved or investigated?(Required)

Are cargo packages tamper-evident (tape, straps, plastic-wrap, etc.)?(Required)

When illegal or suspicious activities are detected, are the appropriate law enforcement and/ or U.S. Customs notified?(Required)

Are documented procedures in place to screen prospective and current employees?(Required)

Do documented procedures include verifying all application information (employment history, references, etc.)?(Required)

Does management maintain employee files with employee data (application, copy of government ID, training, HR notes, company-issued property, etc.)?(Required)

Are background checks, government/ police checks (or similar) conducted prior to employment?(Required)

Are drug tests conducted, prior to employment?(Required)

Once employed, are periodic checks and reinvestigations performed (regularly scheduled, based on cause, and/ or the sensitivity of the employee’s position)?(Required)

Are documented procedures in place to remove identification, facility, and system access codes for terminated employees?(Required)

Does the facility have security guards who control access?(Required)

Are security guard duties written and verifiable?(Required)

Does access control include positive identification of all employees, visitors, and vendors at all points of entry?(Required)

Are employees issued company photo-identification badges (ID)?(Required)

Are visitors and vendors required to present photo identification and issued temporary ID upon arrival?(Required)

Does management / security adequately control the issuance and removal of employee, visitor, and vendor badges?(Required)

Does management / security maintain a daily visitor / vendor log?(Required)

Are there procedures in place to restrict access to ‘sensitive’ and/ or ‘secure’ areas of the facility?(Required)

Does the facility have barriers to prevent and/ or deter unauthorized access?(Required)

Is perimeter fencing regularly inspected for integrity and damage?(Required)

Are entrance/ exit gates utilized by vehicles and/ or employees manned by security and/ or monitored by cameras?(Required)

Are the facility buildings soundly constructed of materials to resist unlawful entry?(Required)

Are the facility buildings regularly inspected by security or management and repairs made, as necessary?(Required)

Does the facility have adequate lighting inside and outside, including; entrances and exits, cargo handling and storage areas, fence lines and parking areas?(Required)

Does the facility have an intrusion alarm system?(Required)

Is the facility interior monitored by video-surveillance cameras (packaging, cargo handling, storage areas, shipping/ receiving, server room, offices, etc.)?(Required)

Is the facility exterior monitored by video-surveillance cameras (entrances and exits, fence line and parking areas, cargo handling, shipping/ receiving, etc.)?(Required)

Does your company have IT security policies, procedures, and standards in place?(Required)

Does your company have a written IT security policy?(Required)

Do employees receive training on the IT security policies, standards, and procedures?(Required)

Are employees assigned individual accounts and passwords?(Required)

Do automated systems require and/ or force a periodic password change?(Required)

Does the computer automatically lock or turn off when incorrect passwords are used; numerous failed login attempts occur, or after periods of inactivity?(Required)

Is there a system in place to identify the abuse of the IT policy, including improper access, tampering, or the altering of business data?(Required)

Are all system violators subject to appropriate disciplinary actions for abuse?(Required)

Is company data (shipping information, etc.) regularly backed up on an external storage device?(Required)

Does your company have a security training and threat awareness program?(Required)

Have all employees received security training; including terrorist threat awareness and drug smuggling?(Required)

Do all employees know the company procedures/ policies for reporting security breaches, suspicious people and suspicious incidents?(Required)

Do all employees receive periodic, refresher security training?(Required)

Do employees in shipping/ receiving, truck drivers, and other sensitive areas of the facility receive additional, job-specific security training?(Required)

Is employee security training documented and verifiable?(Required)

For all “Yes” answers, I can provide a brief overview of our process/procedures. For all “Yes, we have a Written Company SOP…” answers, I can provide the written SOP. For all “No” and “N/A” answers, I can provide an explanation

CAPTCHA