Participant-C-TPAT 1D-ACTIVITIES FILE (Mar 24, 22).pptx

Participant-C-TPAT 1D-ACTIVITIES FILE (Mar 24, 22).pptx

1. C-TPAT ACTIVITIES FILE

2. ACTIVITY 1 Brainstorm to define your organization purpose & challenges on C-TPAT Implementation

3. YOUR ORGANIZATION CHALLENGES May 29, 2024 Challenge 1: Challenge 2: Challenge 3:

4. ACTIVITY 2 Identify the MSC clauses and describe the CTS elements

5. IDENTIFY THE CLAUSE & DESCRIBE THE CTS 1. Cybersecurity Clause No. CTS: 2. Agricultural Security Clause No: CTS: 3. Prevention of Trade-Based Money Laundering and Terrorist Financing Clause No: CTS: 4. Using Security Technology Clause No: CTS:

6. ACTIVITY 3 Please share your organization Security Management Representative (or POC) roles and responsibilities

7. SECURITY MANAGEMENT REPRESENTATIVE (POINT OF CONTACT) ROLES & RESPONSIBILITIES May 29, 2024 Task 1: Task 2: Task 3: Task 4:

8. ACTIVITY 4 Develop a Risk Assessment for your organization per the MSC….

9. RISK ASSESSMENT TEAM 1 – 5 May 29, 2024

10. ACTIVITY 5 List out the critical elements of MSC – Cybersecurity++++ Process or Departments

11. TEAM 1 – 5 ? ? ? ? ? ? ? ? ? ?

12. TEAM 1 – 5 Process/Activity: Department 1 Clause Critical Elements & Evidence Severity

13. ACTIVITY 6 List out the critical elements of MSC – Agricultural Security++++ Process or Departments

14. TEAM 1 – 5 ? ? ? ? ? ? ? ? ? ?

15. TEAM 1 – 5 Process/Activity: Department 1 Clause Critical Elements & Evidence Severity

16. ACTIVITY 7 List out the critical elements of MSC – Physical Security Process or Departments

17. TEAM 1 – 5 ? ? ? ? ? ? ? ? ? ?

18. TEAM 1 – 5 Process/Activity: Department 1 Clause Critical Elements & Evidence Severity

19. ACTIVITY 12 Set True or False and identify the Clause No.

20. C-TPAT MSC: TRUE /FALSE Clause C-TPAT Member must build a robust Supply Chain Security Program, and must incorporate representatives from all of the relevant departments into a team C-TPAT Audit is mandatory for any non-US Factory that produces finished goods, loads a container or trailer or ships products directly to US Retailers The C-TPAT policy should be make available to all employees Risk Assessments must be reviewed annually and no earlier CTPAT Members must have comprehensive written cybersecurity policies and/or procedures to protect information technology (IT) systems US CBP Officer cannot fly over to Malaysia to audit Malaysian Companies on C-TPAT C-TPAT is a United States Government Supply Chain Security program intended to ensure the continuance of safe global trade C-TPAT MSC criteria MUST means non conforming may result to major or critical Employees must trained on how to recognize internal conspiracies, maintain product integrity and challenge unauthorized access to secure areas Security technology should be utilized to monitor premises and prevent unauthorized access to sensitive areas A Supplier without a PASSED C-TPAT Audit cannot ship products to US Security technology systems should be configured with an alternative power source Personnel operating and managing security technology systems must receive operations and maintenance training in their specific areas

21. ACTIVITY 14 Identify the respective Clause No against the Top Challenges non conformities

22. TOP CHALLENGES (1) 1. Employees are not required to visibly display the Company ID Clause No. 2. Does not require pre-employment screenings for security personnel (ext. agencies) Clause No. 3. Does not request information from business partners on their membership status in other supply chain security programs, such as Authorized Economic Operation (AEO - European), Partner in Protection (PIP - Canada), C-TPAP (US) or other regional programs Clause No. 4. Does not require relevant business partners to provide copies of their security policies vs C-TPAT (access controls, procedural security, etc.) Clause No. 5. Packing areas not restricted to authorized employees/persons only. Unauthorized employees and/or visitors can access the packing areas Clause No.

23. TOP CHALLENGES (2) 6. Data Integrity Maintenance procedures was not prevented from unauthorized personnel from making changes + not recorded Clause No. 7. Drivers communicate trip details to HQ or client, but not required to Document Clause No. 8. Does not maintain a log/inventory for ISO 17712 seals (classification, acceptance, and withdrawal of mechanical freight container seals. It provides a single source of information on mechanical seals which are acceptable for securing freight containers in international commerce) Clause No. 9. Does not maintain written procedures for use, control + tracking of seals – vehicles Clause No.

24. TOP CHALLENGES (3) 10. Does not maintain a log/inventory for ISO 17712 seals Clause No. 11. No evidence of the written procedure for a 7-point pre-loading container/conveyance inspection is followed. Evidence is not maintained for a min 90 days Clause No.

25. TOP CHALLENGES (4) 12. Employees not trained on how to recognize internal conspiracies, maintain product integrity + challenge unauthorized access to secure areas Clause No. 13. CCTV records not maintained for a min of 30 days Clause No. 14. Dangerous materials are not stored separately or are not stored in a secure manner Clause No. 15. No written Risk Assessment procedures for evaluating risk posed by relevant business partners Clause No. 16. Designated management personnel does not conduct facility visits of their business partners (cargo handler) C-TPAT Clause No.

26. TOP CHALLENGES (5) 17. Equipped alarm system not adequate vs the size + physical set up of the factory Clause No. 19. Facility is not equipped with an anti-intrusion alarm system Clause No. 20. Employees working in restricted areas not trained on how to handle unauthorized access to secure areas Clause No. 21. Exterior doors + windows remain unlocked when building is not occupied Clause No.