CBP Posts a Recommended Supply Chain Security Risk Assessment Guide for C-TPAT Companies

The U.S. Customs and Border Protection (CBP) recently posted a “Customs-Trade Partnership Against Terrorism (C-TPAT) 5 Step Risk Assessment Process Guide” on its website, to assist C-TPAT companies in conducting an international security risk assessment of their supply chains. The assessment is part of the minimum security criteria necessary for C-TPAT participation.

CBP has found that many C-TPAT members are not assessing potential threats and vulnerabilities in their international supply chains. While CPB states that C-TPAT members are not required to utilize the 5 Step Risk Assessment Process, it does expect all members to have a documented process for determining and addressing security risks.

The recommended 5 Step Risk Assessment Process, as outlined by CBP, consists of:

• Mapping Cargo and Business Partners — identifying business partners and how cargo moves throughout the supply chain to include modes of transportation (air, sea, rail, or truck) and nodes (country of origin, transit points).

• Conducting a Threat Assessment — identifying threats such as terrorism, contraband/human smuggling, organized crime, or other conditions that may increase the probability of a security breach.

• Conducting a Security Vulnerability Assessment — Based on C-TPAT minimum security criteria, determining if business partners have gaps, vulnerabilities, or weaknesses that may lead to a security breach.

• Preparing an Action Plan to Address Vulnerabilities — developing a written strategy to address potential gaps, vulnerabilities, and weaknesses.

• Documenting How the Security Risk Assessment is Conducted — writing the policies/procedures for conducting the risk assessment.

C-TPAT is a voluntary government-business initiative to build cooperative relationships that strengthen and improve overall international supply chain and U.S. border security. Even without official participation in C-TPAT, companies are encouraged to consider employing C-TPAT guidelines in their security practices. For more information visit CBP.gov or contact Industry Partnership Programs at industry.partnership@dhs.gov.