Which of the following is included in Security Training and Awareness under CTPAT?

• A. Ongoing training to recognize threats and properly respond to incidents, with periodic refreshers.
• B. Documented SOPs, clear processes, separation of duties, verification steps, and accountability.
• C. Protecting shipment data with access controls, encryption, secure networks, and regular patching.
• D. Crisis management plan to respond to emergencies.

Answer: (A)

Security Training and Awareness is about keeping personnel informed and capable to recognize threats and respond correctly, through ongoing education and periodic refreshers. This ensures employees stay vigilant, know how to report suspicious activity, and follow established response procedures as threats evolve. The other options describe, respectively, documented procedures and separation of duties, general IT data protection measures, and having a crisis plan—elements that support security but are not the training and awareness activity itself.