Crosswalk
AEO/AEO-S
Where the corpus maps to AEO/AEO-S: UK HMRC Authorized Economic Operator customs and trade security programme.
Canonical citation
- Standard ID
- AEO/AEOS (UK)
- Current version
- -
- Publication date
- -
- Topic
- UK HMRC Authorized Economic Operator customs and trade security programme (Security and Safety authorization); requirement areas per HMRC guidance, which carries no versioned edition, so the version columns record none
- Upstream check location
- https://
www.gov.uk/ guidance/ authorised-economic-operator-certification (opens in a new tab) - Last verified (UTC)
- needs-reconfirm
Mapped control areas, 7
Control areas from the reverse crosswalk
The Reverse Framework Control Crosswalk Matrix answers which documents address a given control identifier or family. It names this programme in its combined section "CTPAT MSC and BASC v6 (trade and supply-chain security)". The table is that whole section, the same one the CTPAT (2020) instrument page shows.
Coverage, 7 domains
Coverage by domain
From the GRC Library Compliance Alignment Matrix; the main crosswalk table's document counts land here.
Governance, 7 documents
- Governance Library CharterManagement commitment
- Exception and Risk Acceptance Management PolicyRisk management
- Records Retention and Destruction StandardDocumentation security, Trade records retention
- Document Index and Classification RegisterDocumentation security
- Continuous Assurance and Improvement FrameworkIT controls review and testing
- Metrics, Monitoring and Performance Reporting FrameworkIT controls review and testing
- Data Retention ScheduleDocumentation security, Trade records retention
Risk, 15 documents
- Enterprise Governance and Risk Management PolicyManagement commitment, Risk management
- Enterprise Risk Management StandardIT security risk management, Risk management
- Third-Party and Supply Chain Risk StandardBusiness partners, IT security risk management
- Risk Assessment Methodology ProcedureIT security risk management
- Risk Register ProcedureIT security risk management
- Risk Acceptance ProcedureRisk management
- Assurance Map RegisterIT controls review and testing
- Key Risk Indicator CatalogueIT controls review and testing
- Scenario Risk CatalogueIT security risk management
- Quantitative Risk Analysis GuidelineIT security risk management
- Enterprise Risk Register TemplateIT security risk management
- Operational Risk Register TemplateIT security risk management
- Risk Appetite Statement TemplateManagement commitment, Risk management
- Board Risk Report TemplateManagement commitment
- AI-Specific Risk Methodology AnnexIT security risk management
Compliance, 13 documents
- Compliance, Audit, and CAPA Management PolicyIT controls review and testing
- Global Regulatory Applicability RegisterManagement commitment
- BASC IT Compliance Monitoring and KPIsIT controls review and testing
- UK AEO-S IT and Cybersecurity RequirementsAccess to IT systems, Information systems security, IT security incidents, Trade records retention
- Legal and Regulatory Compliance PolicyCustoms compliance and AEO obligations
- Audit Planning ProcedureIT controls review and testing
- Logistics Sector GRC Requirements AnnexBusiness partners
- BASC Information Security PolicyInformation systems security
- UK AEO IT Self-Assessment ProcedureAll AEO-S IT requirement areas
- US CTPAT IT and Cybersecurity Compliance Controls RegisterAll AEO-S IT requirement areas
- US CTPAT Minimum Security Criteria Controls RegisterPhysical and access security, Personnel security, Business partners
- Canada PIP IT and Cybersecurity Compliance Controls RegisterAll AEO-S IT requirement areas
- Trade Compliance Programme Gap Assessment TemplateManagement commitment, Business partners, IT controls review and testing
Security, 35 documents
- Information Security PolicyInformation systems security
- Identity and Access Management PolicyAccess to IT systems
- Acceptable Use PolicyPersonnel security
- Encryption and Key Management PolicyInformation systems security
- Logging and Monitoring StandardIT security incidents, Trade records retention
- Data Classification and Handling StandardDocumentation security
- Privileged Access Management StandardAccess to IT systems
- Authentication and Password Management StandardAccess to IT systems, Personnel security screening
- Security Incident Response ProcedureIT security incident detection and response
- Vulnerability Management ProcedureIT security controls review and testing
- Cryptographic Key Lifecycle Management FrameworkInformation systems security
- Cryptographic Key Operations ProcedureInformation systems security
- Key Escrow and Recovery ProcedureInformation systems security
- Post-Quantum Cryptography Readiness RoadmapInformation systems security
- Access Control ProcedureAccess to IT systems
- Identity Management ProcedureAccess to IT systems
- IT Onboarding and Offboarding ProcedureAccess to IT systems
- Zero Trust Architecture FrameworkAccess to IT systems
- Bring Your Own Device (BYOD) PolicyInformation systems security
- Network Communications Security PolicyInformation systems security
- Endpoint Hardening StandardInformation systems security
- Email Security StandardInformation systems security
- Data Loss Prevention StandardDocumentation security
- SaaS Security Posture Management StandardInformation systems security
- Remote Working Security StandardInformation systems security
- Incident Escalation MatrixIT security incident detection and response
- Security Ticket Reporting SchemeIT security incident detection and response
- Security Operations Centre Operating Model StandardIT security incidents
- Penetration Testing and Red Team StandardIT security controls review and testing
- Threat Modelling StandardIT security controls review and testing
- Security Disciplinary Process ProcedurePersonnel security
- Personnel Security Screening StandardPersonnel security
- Security Awareness and Training StandardPersonnel security
- Insider Risk Programme FrameworkIT security incidents
- Acceptance Into Service PolicyInformation systems security
Operations, 15 documents
- Production Security RequirementsIT systems protection
- Network Security and Segmentation StandardIT systems protection
- Cloud Security Configuration BaselineInformation systems security
- Physical Security of IT Infrastructure StandardPhysical and access security
- Certificate Authority Management StandardInformation systems security
- Change Management and Configuration Control ProcedureIT systems protection
- Endpoint Management and Device Compliance ProcedureIT security incident detection and response
- Media Handling and Transport ProcedureDocumentation security
- Security Monitoring and Alert Management ProcedureIT security incident detection and response
- Threat Intelligence and SIEM Operations ProcedureIT security incident detection and response
- Patch Management ProcedureIT systems protection
- Release Management ProcedureIT systems protection
- Asset Inventory RegisterIT systems protection
- IT Operations Key Performance Indicators RegisterIT controls review and testing
- IT Security Operations RegisterIT security incident detection and response
Supply chain, 13 documents
- Supplier and Cloud Governance FrameworkBusiness partners
- Supplier Security and Privacy Assurance StandardBusiness partners
- Supplier Resilience Monitoring StandardBusiness partners
- Supplier Due Diligence ProcedureBusiness partners
- Supplier Onboarding Security Review ProcedureBusiness partners
- Supplier Ongoing Monitoring ProcedureBusiness partners
- Supplier Audit ProcedureBusiness partners, IT controls review and testing
- Supplier Exit and Data Return ProcedureBusiness partners
- Fourth-Party and Nth-Party Risk ProcedureBusiness partners, IT security risk management
- Supplier Risk Register TemplateBusiness partners
- Supplier Offboarding Evidence TemplateBusiness partners
- Supplier Security QuestionnaireBusiness partners
- Trade and Supply-Chain Continuity Controls AnnexBusiness partners, IT systems backup and continuity
Resilience, 17 documents
- Business Continuity and Disaster Recovery PolicyIT systems backup and continuity
- Business Continuity and Disaster Recovery StandardIT systems backup and continuity
- Backup and Recovery ProcedureIT systems backup and continuity
- Business Continuity and Resilience FrameworkIT systems backup and continuity
- Business Continuity and Crisis Management PlanBusiness continuity
- IT Disaster Recovery PlanIT systems backup and continuity
- Pandemic Continuity PlanBusiness continuity
- Physical Site Continuity PlanBusiness continuity
- Business Impact Analysis ProcedureBusiness continuity
- Continuity and Recovery Testing ProcedureIT systems backup and continuity
- Crisis Management and Emergency Operations Activation ProcedureBusiness continuity
- Cross-Domain Incident Coordination ProcedureIT security incident detection and response
- Security Incident Reporting and Escalation ProcedureIT security incident detection and response
- Emergency Operations Contact Directory RegisterBusiness continuity
- Resilience Metrics and Testing Log RegisterIT controls review and testing
- Departmental Continuity Plan TemplateBusiness continuity
- Recovery Runbook TemplateIT systems backup and continuity
Corpus citations, 3
Documents naming it in their framework alignment
Generated from each document's framework alignment list in the taxonomy, through the committed alias map.
- Audit Planning ProcedureCompliance
- Third-Party and Supply Chain Risk StandardRisk
- UK AEO IT Self-Assessment ProcedureCompliance
Note
What this mapping is
From the GRC Library Compliance Alignment Matrix: citations are indicative, not exhaustive (the representative-citation convention), and no entry constitutes a certification, attestation, or legal opinion.
From the Reverse Framework Control Crosswalk Matrix: coverage is partial, and external control identifiers and clause numbers are referenced for navigation only; the library does not reproduce third-party control text.
From the Cross-Framework Alignment Matrix: the alignment is not an official mapping, certification claim, legal opinion, or reproduction of third-party framework content.
The standards, laws, frameworks, and programmes in the canonical citations register, mapped here or not, are listed with their current editions on the Standards & frameworks page, generated from that register.