C-TPAT Minimum Security Criteria Self-Assessment

Self-assessment inspection template for evaluating compliance with C-TPAT Minimum Security Criteria across physical security, access controls, personnel screening, and business partner security controls.

Assessment Scope and Program Governance

• Written C-TPAT security procedures are current, approved, and available to staff
  Verify that documented security procedures exist, are controlled, and reflect current operations.
• Security responsibilities are assigned to a named owner or team
  Confirm accountability for C-TPAT implementation, review, and corrective actions.
• Last internal security review date
  Record the most recent self-assessment or internal review date.
• Assessment scope includes all relevant sites and functions
  Confirm the assessment covers facilities, yards, docks, offices, and outsourced processes within scope.

Facility Perimeter and Physical Security

• Perimeter fencing, walls, or equivalent barriers are intact and free of unauthorized openings
  Check for gaps, damage, climb points, or bypass routes around the facility perimeter.
• Exterior doors, gates, and windows are secured with functioning locks or equivalent controls
  Verify that access points close and lock properly and show no signs of tampering.
• Lighting provides adequate visibility for entrances, docks, yards, and perimeter areas
  Assess whether lighting supports detection of unauthorized activity during normal operating and after-hours conditions.
• Cameras cover critical access points and high-risk cargo areas
  Verify CCTV or equivalent monitoring coverage for entrances, exits, loading areas, and storage zones.
• Security alarms or intrusion detection are functional where installed
  Confirm alarm systems are tested, monitored, and documented as operational.

Access Control and Visitor Management

• Employee access is restricted to authorized areas based on job role
  Verify role-based access controls are used for offices, production areas, warehouses, and secure storage locations.
• Badges, keys, cards, or credentials are issued, tracked, and revoked when no longer needed
  Check that access media are controlled and that lost, stolen, or terminated-user credentials are promptly disabled.
• Visitor sign-in, identification, and escort procedures are followed
  Confirm visitors present identification, are logged, and are escorted in restricted areas as required.
• Contractors and drivers are controlled while on site
  Verify temporary personnel and drivers are identified, limited to authorized areas, and supervised where required.
• Access logs are retained and reviewed for anomalies
  Check whether entry logs, badge records, or gate logs are maintained and periodically reviewed for irregular activity.

Personnel Screening and Training

• Pre-employment screening is performed for applicable roles
  Verify background screening or equivalent vetting is completed where permitted by law and company policy.
• Security awareness training is completed for employees with cargo or facility access
  Confirm training covers recognizing suspicious activity, reporting concerns, and protecting access credentials.
• Training records are current and retained
  Review whether completion records are available for relevant personnel and within required intervals.
• Termination or transfer procedures revoke access promptly
  Check whether badges, keys, system access, and site privileges are removed when employment status changes.

Cargo, Inventory, and Transport Security

• Cargo is stored in secure areas with controlled access
  Verify that high-value or sensitive cargo is protected from unauthorized access during storage and staging.
• Inbound and outbound shipments are reconciled against documentation
  Check that counts, seals, and shipment documents are reviewed for discrepancies.
• Trailer, container, or seal integrity checks are performed when applicable
  Confirm that seals and transport equipment are inspected for signs of tampering before loading and after receipt.

Findings and Corrective Actions

• List all deficiencies or non-conformances identified
  Capture each issue observed during the self-assessment, including location and affected control.
• Corrective actions and target completion dates are assigned
  Record the action owner, due date, and remediation plan for each finding.
• Inspector signature
  Signature of the person completing the self-assessment.