Which of the following is included in Information Technology Security under CTPAT?

• A. Ongoing security training and awareness.
• B. Crisis management plan.
• C. Measures to ensure cargo integrity.
• D. Protecting shipment data with access controls, encryption, secure networks, and regular patching.

Answer: (D)

The main idea is safeguarding the data and the IT systems that handle shipment information within CTPAT. The option describing protecting shipment data with access controls, encryption, secure networks, and regular patching directly shows concrete IT security measures. Access controls limit who can view or modify data, encryption protects data both at rest and in transit, secure networks shield data flows and systems from intrusion, and regular patching keeps software up to date to close vulnerabilities. Together, these controls address the confidentiality, integrity, and availability of shipment information, which is what Information Technology Security in CTPAT focuses on.

The other choices relate to security in broader or different areas. Ongoing security training and awareness is important for personnel security and establishing security culture. A crisis management plan concerns incident response and business continuity rather than IT-specific protections. Measures to ensure cargo integrity pertain to physical security and tamper-prevention of the actual goods, not the information systems and data.