In CTPAT, which outcome best describes 'separation of duties' within Procedural Security?

• A. It reduces the need for audits.
• B. It prevents a single individual from performing all critical steps, reducing the risk of fraud.
• C. It speeds up shipments by simplifying processes.
• D. It ensures only IT personnel can access data.

Answer: (B)

Separating duties means no single person handles all steps of a critical process. In Procedural Security for CTPAT, tasks like initiating a shipment, approving it, and recording the action are performed by different people, with independent checks in place. This creates a built-in check-and-balance system: it’s harder for fraud or errors to go unnoticed because a single individual cannot both execute and conceal the entire process. It also improves accountability and traceability, since actions are spread across roles and can be reviewed separately. This concept isn’t about reducing audits, speeding shipments, or limiting access to IT staff; it’s about distributing responsibilities to prevent fraud and errors through cross-checks.