What must companies do if deficiencies are uncovered during the CTPAT risk assessment?

• A. File a complaint with customs.
• B. Implement corrective actions.
• C. Ignore minor issues.
• D. Delay actions until a future review.

Answer: (B)

When a CTPAT risk assessment reveals deficiencies, the required response is to implement corrective actions to address those weaknesses and strengthen the security of the supply chain. This reflects CTPAT’s emphasis on ongoing risk management and continuous improvement: once gaps are identified, they must be remedied with concrete actions, updated procedures, additional controls, training, and evidence of changes. The goal is to reduce risk and bring security measures up to the program’s standards, sometimes followed by verification or revalidation by CBP.

Filing a complaint with customs isn’t the process for internal remediation of assessment gaps. Ignoring issues or delaying actions would leave vulnerabilities unaddressed and could jeopardize eligibility in the program.