CTPAT Audit Readiness Checklist

Know exactly where your CTPAT program stands. Category by category.

A practical, 16-page walkthrough of the 12 Minimum Security Criteria CBP actually looks at during validation. Built by CTPAT specialists. Free.

  • Every item tied to something a validator will ask to see.
  • Notes fields to capture your evidence sources as you go.
  • A practical 48-hour benchmark to test if you're really audit-ready.
16 pages 12 CBP categories Instant download
What's inside

A checklist that matches how validators actually think.


Three simple components in every category. No jargon. No theater. Just the exact evidence CBP asks for, the notes fields to track it, and a practical test to know when you're ready.

Category-by-category review

Each of the 12 Minimum Security Criteria broken down into plain-English items. Tick the ones you can prove today. Flag the ones you can't.

Evidence and owner notes

A notes area under every category so you capture where your evidence lives and who owns it. Turn the checklist into your working audit file.

The 48-hour benchmark

A practical test to tell you if your program is truly audit-ready or just looks ready on paper. Used by CTPAT specialists in real validation prep.

The 12 CBP Minimum Security Criteria

Every category CBP validators walk through.


Built for Importers, with a clear note on where Highway Carriers, Air Carriers, and other partner types need to layer in their own role-specific criteria.

1
Security Vision and Responsibility
2
Risk Assessment
3
Business Partners
4
Cybersecurity
5
Conveyance and IT Security
6
Seal Security
7
Procedural Security
8
Agricultural Security
9
Physical Access Controls
10
Personnel Security
11
Physical Security
12
Security Training and Threat Awareness
How to use it

Three steps. One honest picture of your program.


The checklist is built to be worked, not filed. An hour with it is worth more than a week of prep the week before validation.

1

Walk through each category.

Open the checklist. Work category by category. Involve the people who actually run each area. Twelve categories. About an hour, start to finish.

2

Check what you can prove today.

Only check items you can back with current, documented, accessible evidence. Leave stale, missing, or "it's in someone's email" items unchecked.

3

Every gap is named.

Unchecked items are your audit risk, in writing. Prioritize them, assign owners, and fix them on your schedule. Not on a validator's.

The 48-hour test

"If you can produce the evidence for every checked item within 48 hours, you're audit-ready. If it would take longer, you have a real problem hiding in your process."

Who it's built for

If CTPAT is on your desk, this is for you.


Compliance officers and managers Running the program day to day and tired of re-collecting the same evidence every year.
Supply chain and trade compliance leaders Responsible for keeping trusted trade status defensible across every partner and route.
Teams preparing for first-time certification Looking for a grounded view of what CBP actually expects before you start the application.
Anyone facing a revalidation Wants to know where the program really stands, not where the spreadsheet says it stands.

Found gaps? Score your program next.

The checklist tells you where you're exposed. The CTPAT Maturity Matrix tells you how your whole program ranks, across seven program areas, in ~10 minutes.

Take the Maturity Matrix → Or talk to a CTPAT specialist
Return to top