In CTPAT, what does procedural security focus on?

• A. Incident response planning
• B. Documented security policies, standard operating procedures, incident response, and internal controls for handling shipments
• C. Access control lists only
• D. Financial accounting procedures

Answer: (B)

Procedural security in CTPAT focuses on the documented rules and steps organizations use to protect and process shipments. It covers written security policies, standard operating procedures, incident response plans, and internal controls for handling shipments. Having these elements documented ensures consistent, auditable actions across the supply chain and clear accountability when something goes wrong. Incident response planning provides a clear plan to detect, respond, and recover from security events, while internal controls enforce proper duties, approvals, and verification throughout the shipment process, and SOPs lay out the exact steps to follow. The other options are narrower or unrelated: access control lists address who can enter spaces but not the full shipment-handling process, and financial accounting procedures relate to money and records rather than securing the movement of goods.