What is the purpose of encryption in IT security within CTPAT?

• A. To speed up data processing
• B. To protect sensitive data about shipments and partners from unauthorized access
• C. To replace the need for access controls
• D. To eliminate the need for password policies

Answer: (A)

Encryption protects data confidentiality. In IT security for CTPAT, sensitive information like shipment details, partner contacts, and related documents must remain readable only by authorized users. Encryption converts plain data into ciphertext so that, even if data is intercepted in transit or stolen from storage, it cannot be understood without the proper decryption key. This helps prevent sensitive information from leaking and supports compliance with data privacy requirements in the supply chain. Encryption works alongside access controls and password policies rather than replacing them; it adds a protective layer for data at rest and in transit. Poor key management can undermine its effectiveness, so strong keys and proper handling are essential. The other options describe outcomes that encryption is not designed to provide, such as speeding up processing, removing the need for access controls, or eliminating password policies.