What is the purpose of security documentation in CTPAT?

• A. To confuse auditors with complex jargon.
• B. To provide evidence of compliant policies, procedures, and controls for audits and validations.
• C. To store only historical records without purpose.
• D. To track employee salaries.

Answer: (B)

Security documentation in CTPAT provides evidence that a company has documented policies, procedures, and controls to protect the security of the supply chain. During audits and validations, reviewers rely on these documents to verify that the importer has a formal security program in place, clearly assigned responsibilities, and records showing how risks are identified, mitigated, and managed. The documentation should cover areas such as risk assessments, physical security controls, personnel security, access control, training, incident response, and corrective action processes. Having this documentation ensures consistent operations, supports training, and creates a clear trail for audits, inspections, and ongoing improvement. It is not intended to confuse auditors, store records without purpose, or track salaries.