Which of the following best describes how the BPQ is used in CTPAT?

• A. It is used to assign a shipping schedule
• B. It is used to determine credit terms with suppliers
• C. It collects security information to assess risk and determine eligibility for validation
• D. It replaces the need for any facility security measures

Answer: (C)

BPQ is a security information collection tool used in CTPAT to gather details about a business partner’s security practices. The information gathered—covering physical security controls, access procedures, security policies, personnel screening, container handling, IT security, and related safeguards—is analyzed to assess the partner’s risk level and determine whether they meet the program’s standards and are eligible for validation. This isn’t about setting shipping schedules or negotiating supplier credit terms, and it doesn’t replace actual security measures. Instead, the BPQ supports the risk-based validation process by providing the data CBP uses to decide if a partner can be validated and what improvements, if any, are needed before validation.