At the 2009 C-TPAT seminar held in New Orleans, a general session conducted by CBP presented updates on the C-TPAT program. The session is for CBP to demonstrate to the trade community that the program is evolving and there is commitment by the government regarding the program and supply chain security. Some key statistics are presented below.

Number of companies certified to date (April 2009): 9,128

4,213 Importers
55 Marine Port Authorities and Terminal Operators
731 Consolidators
851 Foreign Manufacturers
791 Brokers
2,487 Carriers

Number of companies validation

10,994 Total validations completed
8,396 Initial validations completed
2,598 Re-validations completed
3,748 Validations in 2008
29 New companies in Tier 3

Tier III members: 292

In 2009 CBP will be:

conducting unannounced visits of members previously involved in breaches
visiting multiple supply chains (for importers based upon risk before issuing a validation determination and granting benefits)
issuing a new best practice catalogue
having more focus outreach
finding more countries to partner with (mutual recognition)
refining portal and functionally
further refining information regarding C-TPAT
verifying in re-validations that companies have applied all action required from previous validations.

One out of 55 C-TPAT sea containers are examined

One out of 11 non C-TPAT sea containers were examined

One out of 6.5 C-TPAT trucks were examined

One out of 1.4 non C-TPAT trucks were examined

Tier I: 3.5 times less

Tier II: 4.5 times less

Tier III: 7 times less

C-TPAT importers are examined on average 5 times less than non C-TPAT

Tiers

I. 90 days to review security
II. Certified and validated
III. Only importers

Portal

Automated reports
On-line tutorials
Supply chain workshops
Revised company and security profile
Security survey C-TPAT (Q2)
Northern border highway conference (August 2009)
C-TPAT annual conference in Los Angeles (March 2010)

Mutual Recognition

The four Phases to Mutual Recognition

Side by side comparison of the program requirements
Joint validations
Mutual recognition arrangements (signing)
Development of mutual recognition operational procedures, primarily information sharing

Most actively

Japan (completed phase one and two)
Singapore (completed phases one and two)
- Waiting to sign, expected June 2009
EU (completed phase one, phase two pending)
Korea (AEO) (in the process of phase one)

Argentina (program exchange)

Australia (program exchange)

Brazil (training)

Chile (program exchange)

China (program exchange)

Colombia (training)

Ghana (training)

Guatemala (program exchange)

Israel (program exchange)

Kenya (training)

Malaysia (program exchange)

Mexico (program exchange)

Peru (program exchange)

Philippines (program exchange)

Switzerland (program exchange)

Taiwan (program exchange)

75% of the members in PIP/PEP are in C-TPAT

Best Practices

It was also discussed that:

The bar is constantly being raised
The best practices are always changing
There are 200 specialists
The information in 2006 catalog are still up to date but some may no longer be considered best practices
Best practices addendum in 2009
Companies should add best practices to their security profile

Management support

Management to be involved in C-TPAT
Performing risk/self assessments
Ensuring employees are aware of C-TPAT

Business Partners

Use third parties to perform periodic audits of business partners’ security procedures
Table top exercises (testing employees)
Business partners address areas of vulnerability

Conveyance security

High security seals (multiple)
Tamper evident tape, labels
Automated tracking systems for modes of transportation

Physical access controls

Biometrics
Comprehensive searches of employees vehicles (upon entry/exit from facility)
Innovative access control and key systems
Vehicle gate pass controls and parking permits

Procedural security

Test (table top exercises)
Employee rotation policies to prevent collusion
Automated tools for advanced scheduling

Security training

Security awareness training for employees and business partners
Periodic web-based training
Posting of security updates

Information technology

Agreement regarding change of password
Multiple passwords