GRCLibrary.ai

Register

US CTPAT Minimum Security Criteria Controls Register

This register documents the organization's implementation status against the CTPAT Minimum Security Criteria, grouped in this register's eight domains: corporate security, physical security, access controls, personnel security, procedural security (cargo handling), business partner security, information technology, and conveyance and cargo unit security. The library holds no complete CBP criteria text (its only held CBP CTPAT source is a cybersecurity checklist job aid, which reflects only the cybersecurity criteria), so each CTPAT Criterion cell is the library's own summary, unverified against CBP wording, and coverage of every criterion CBP applies to the organization's entity type is not confirmed. It complements compliance/logistics/register-ctpat-united-states-it-controls.md, which focuses specifically on IT and cybersecurity criteria.

Type
Register
Version
1.0.9
Date
2026-11-07
Owner
Supplier Risk Maintainer
Approving authority
Governance Library Maintainer
Classification
Public
Confidentiality
Public
Category
Compliance: Logistics Sector
Review frequency
Annual and upon CTPAT criteria revision, CBP validation visit, or material supply chain change
Licence
CC BY-SA 4.0

Read the full text on GitHub (opens in a new tab)

Outline

  • Purpose
  • Programme overview
  • Domain 1: corporate security
  • Domain 2: physical security
  • Domain 3: access controls
  • Domain 4: personnel security
  • Domain 5: procedural security (cargo handling)
  • Domain 6: business partner security
  • Domain 7: information technology
  • Domain 8: conveyance and cargo unit security
  • UK AEO-S parallel controls
  • Annual review and CBP profile update

Related documents