What is the purpose of a Security Risk Assessment (SRA) in CTPAT?

• A. To identify and analyze security threats, vulnerabilities, and impact across the supply chain and guide risk-mitigation actions.
• B. To approve all suppliers for the program.
• C. To certify cargo is safe to travel in aircraft.
• D. To replace the need for validation and CAPA processes.

Answer: (A)

The Security Risk Assessment in CTPAT is about identifying security threats, vulnerabilities, and their potential impact across the supply chain and then using that understanding to guide risk-mitigation actions. It’s a proactive, risk-based process that helps you prioritize where to invest resources, determine which security controls to strengthen, and shape an action plan to improve overall security. This assessment informs how you allocate attention and measures to protect people, facilities, information, and shipments, making the program more resilient to potential threats. It isn’t about approving suppliers, certifying cargo for air travel, or replacing validation and CAPA activities; rather, it provides the risk insight that guides those other compliance steps and continuous security improvements.