What are some areas included in the security evaluation for CTPAT?

• A. Human resources, information technology, import logistics, receiving, global sourcing, and facility management.
• B. Marketing strategy, financial controls, and customer service.
• C. Legal compliance, environmental health and safety, and payroll.
• D. Sales, distribution, and invoicing procedures.

Answer: (A)

CTPAT’s security evaluation looks at how a company protects people, goods, and information across the supply chain, including the systems and procedures that deter and detect security risks. The areas listed in this option—human resources (screening and training personnel), information technology (data security and access controls), import logistics (secure handling and documentation of shipments), receiving (secure intake procedures), global sourcing (vetting suppliers and managing supplier risk), and facility management (perimeter and physical security of the site)—cover the key elements that directly affect security across the supply chain.

The other groupings focus on general business functions rather than security controls. Marketing strategy, financial controls, and customer service are about business performance and operations rather than implementing and validating security measures. Legal compliance, environmental health and safety, and payroll touch compliance and worker safety but aren’t central security evaluation areas for CTPAT. Sales, distribution, and invoicing procedures likewise relate to transactions and logistics from a business perspective, not specifically to security controls.

So the areas listed in the first option align with the types of security practices CTPAT evaluates.