Customs Trade Partnership Against Terrorists or CTPAT has defined a set of requirements for exporters. The aim is to reduce the supply chain risks posed to logistics industry. This presentation would help in understanding CTPAT and its requirements, and how to qualify as CTPAT vendor.

1. C-TPAT Security Awareness
Varinder Kumar
CISO, Trident Gr.
@cyber24x7

2. Let’s understand the problem
Avg 2000 containers of size 1
TEU in a cargo ship
Avg Container Weight: 26280
kg for 1 TEU
7th Dec 2020
#cyber24x7

3. Risk on Ground
US Air Freight Cargo Statistics, https://www.bts.gov
US Shipping Cargo Statistics, https://www.cbp.gov
7th Dec 2020
#cyber24x7

4. Risk on Ground
As the risk to
recipient/destination
country is from
vendors who are not
under their control and
are part of the delivery
chain from seller to
buyer, its called as
supply chain risk.
• Each container touches 5 points minimum before it is loaded to ship and may travel through
3 or more ports before hitting the destination
• Each container is exposed to : Road transportation crew, port crew, ship loading crew, ship
crew and during sail it can be accessed by criminals too.
How much space you need to hide 100 kg of
explosives or 500 Kg of drugs or even smuggle 100
humans in one of 2000 containers !!
That’s the risk we are talking about here
7th Dec 2020
#cyber24x7

5. So What is Supply Chain Management

6. Supply Chain Management
• A supply chain is a network between a company and its suppliers to produce and distribute a
specific product to the final buyer. This network includes different activities, people,
entities, information, and resources. The supply chain also represents the steps it takes to
get the product or service from its original state to the customer.
• Companies develop supply chains so they can reduce their costs and remain competitive in
the business landscape
• Supply chain management is the handling of the entire production flow of a good or
service — starting from the raw components all the way to delivering the final product to
the consumer.
7th Dec 2020
#cyber24x7

7. C-TPAT
Cybersecurity Guide (howtocybersecurity.blogspot.com)

8. Introduction to C-TPAT
• Customs-Trade Partnership Against Terrorism (C-TPAT) is United States Governments
Supply Chain Security program intended to ensure the continuation of safe global free
trade.
• Customs Trade Partnership Against Terrorism (CTPAT) is but one layer in U.S. Customs and
Border Protection’s (CBP) multi-layered cargo enforcement strategy.
• An effective supply chain security program can improve the overall security in several areas
by illegal trade, reducing cargo theft, preventing the transportation of illegal drugs, human
smuggling, arms and weapons of mass destruction , protecting the country against crime,
unrest and saving human lives.
7th Dec 2020
#cyber24x7

9. Introduction to C-TPAT
• C-TPAT was launched in 2003 as a U.S. Government’s Response to 9/11 attacks.
• Two main goals :
• 1. strengthening and improving U.S. border security, and
• 2. helping businesses grow their supply chains under safe practices by minimizing or preventing misuse of the
international supply chain for carrying out criminal and terrorism related activities, or human trafficking.
• C-TPAT is a voluntary government-business initiative to build cooperative relationships that
strengthen and improve overall international supply chain and U.S. border security.
• C-TPAT demands a close cooperation among the members who form the international
supply chain system consisting of importers, carriers, transporters, licensed customs brokers
and manufacturers etc.
7th Dec 2020
#cyber24x7

10. Why C-TPAT
• Terrorists, criminals use any and all available means for carrying out their illegal activities.
• The global supply chain is complex , inter-woven with many friendly and unfriendly
countries , with touch points which are insecure, unmonitored and have many gaps.
• US and EU is highly dependent on many manufacturing plants for its products and raw
material which are located in other countries .
• More than 95% of these materials are sent via containers either via air or ships.
• These manufactures/ product or material suppliers must meet US customs & border
protections supply chain security obligation of C-TPAT.
7th Dec 2020
#cyber24x7

11. C-TPAT Benefits
• Reduced Cargo Inspections, faster movement : preference in clearance from the ports.
• Reduced disruptions in supply chain due to delays caused by border checks.
• Demonstrates good corporate citizenship and compliance to laws.
• Makes the company more competitive via vis no CTPAT vendors.
• Enhances brand reputation and trustworthiness with international buyers.
• Offers a chance to be eligible for other U.S. Government pilot programs like the Food and
Drug Administration’s Secure SupplyChain program
• Assignment of a SupplyChain Security Specialist to the company
• Business resumption priority following a natural calamity, fire or terrorist attack
• Priority consideration at CBP’s industry-focused Centers of Excellence and Expertise
7th Dec 2020
#cyber24x7

12. Who Can Be Certified
• U.S. Importers of Record
• U.S./Canada Highway Carriers
• U.S./Mexico Highway Carriers
• Rail Carriers, Sea Carriers and Air Carriers
• U.S. Marine Port Authority/Terminal Operators
• U.S.Air Freight Consolidators, OceanTPT Intermediaries & NVOCCs
• Mexican Manufacturers & other international manufacturers
• Licensed U.S. Customs Brokers
7th Dec 2020
#cyber24x7

13. How to become a C-TPAT Partner
Cybersecurity Guide (howtocybersecurity.blogspot.com)

14. C-TPAT Participation
• C-TPAT Security criteria defines a set of security requirements , becoming a C-TPAT certified
partner requires one to meet the C-TPAT security criteria.
• 4 Core principals that C-TPAT demands to be adhered to are :
• Security
• Accountability
• ProcessTransparency
• Reducing terrorism and crime risks
7th Dec 2020
#cyber24x7

15. C-TPAT Participation
• Participating member/vendors need to apply for the C-TPAT membership through the
website : https://ctpat.cbp.dhs.gov/trade-web/index
• Before applying it’s a good idea to read the tutorial at :
https://www.cbp.gov/sites/default/files/documents/Applying%20to%20C-TPAT.pdf
• The application program is focused on ensuring the participant members are aware of the
minimum security requirements listed at link : https://www.cbp.gov/border-security/ports-
entry/cargo-security/ctpat-customs-trade-partnership-against-terrorism/apply/security-
criteria
• The next slide describes the minimal security requirements summary, divided into phases.
7th Dec 2020
#cyber24x7

16. C-TPAT Requirements
• Phase I
• Container Security
• Physical Security
• Physical AccessControls
• Phase II
• Personnel Security
• Procedural Security
• IT Security
• SecurityTraining andThreat Awareness
• Phase III: Business Partner Requirements
7th Dec 2020
#cyber24x7

17. Phase I: Container Security
Cybersecurity Guide (howtocybersecurity.blogspot.com)

18. ThankYou
• Any Questions
• Follow me/Send questions on myTwitter handle @cyber24x7
7th Dec 2020
Cybersecurity Guide (howtocybersecurity.blogspot.com)