{"id":1375,"date":"2015-06-25T17:26:42","date_gmt":"2015-06-25T17:26:42","guid":{"rendered":"http:\/\/proqc.com\/blog\/?p=1375"},"modified":"2024-11-14T11:35:11","modified_gmt":"2024-11-14T11:35:11","slug":"on-site-whats-a-c-tpat-security-audit","status":"publish","type":"post","link":"https:\/\/proqc.com\/blog\/on-site-whats-a-c-tpat-security-audit\/","title":{"rendered":"On-Site: What&#8217;s a C-TPAT Security Audit?"},"content":{"rendered":"<p>I&#8217;ve recently returned from a visit to our offices in China where I was able to attend a C-TPAT audit with our Supplier Development Manager, Jean Champlain.<\/p>\n<p>A C-TPAT audit isn&#8217;t quite as common as a general QMS or ISO 9001 evaluation, but the information generated has significant value when you understand the scope.<\/p>\n<p><em>&#8220;C\u2010TPAT (Customs-Trade Partnership Against Terrorism) seeks to safeguard the world&#8217;s vibrant trade industry from terrorists, maintaining the economic health of the U.S. and its neighbors. The partnership develops and adopts measures that add security but do not have a chilling effect on trade, a difficult balancing act.&#8221;<\/em><\/p>\n<p>When we go on-site for a security audit, here&#8217;s the agenda:<!--more--><\/p>\n<ul>\n<li>Opening Meeting<\/li>\n<li>Initial Factory Tour<\/li>\n<li>General Information\n<ul>\n<li>Size of the factory, number of employees, hours of operations, shift details, etc.<\/li>\n<\/ul>\n<\/li>\n<li>Business Partner Requirements\n<ul>\n<li>Status as C-TPAT member, contracted carriers, etc.<\/li>\n<\/ul>\n<\/li>\n<li>Container \/ Trailer Requirements\n<ul>\n<li>Procedures to verify physical integrity, storage, seals, etc.<\/li>\n<\/ul>\n<\/li>\n<li>Personnel Security\n<ul>\n<li>Pre-employment verification, criminal background checks, identification, etc.<\/li>\n<\/ul>\n<\/li>\n<li>Procedural Security\n<ul>\n<li>Procedures, accuracy, delivery, etc.<\/li>\n<\/ul>\n<\/li>\n<li>Physical Security\n<ul>\n<li>Schedule, protective barriers, building construction, inspections, logs, alarms, etc.<\/li>\n<\/ul>\n<\/li>\n<li>Information Technology Security\n<ul>\n<li>Automated systems, passwords, policies, training, etc.<\/li>\n<\/ul>\n<\/li>\n<li>Security Training &amp; Threat Awareness\n<ul>\n<li>Programs, frequency, confidentiality, etc.<\/li>\n<\/ul>\n<\/li>\n<li>Closing Meeting (Review)<\/li>\n<\/ul>\n<p>The factory is notified in advance and requested to have all written procedures and examples of supporting documentation readily available for each question. We ask that individual questions be assigned to various departments\/individuals within the company. \u00a0All elements are evaluated based on what is done for the client&#8217;s parts\/products regardless of what is done for other customers. \u00a0The score for each question is assessed according to the following:<\/p>\n<ul>\n<li>Have the processes requiring control been identified and established?<\/li>\n<li>How is the quality system documented, and are the processes appropriately described in the procedures?<\/li>\n<li>Have the procedures been implemented and maintained as documented?<\/li>\n<li>Are the procedures effective in providing the required results?<\/li>\n<\/ul>\n<h3><strong>Scoring includes:<\/strong><\/h3>\n<p><em><strong>Complies with requirements<\/strong>: <\/em>Has objective evidence to support the question, and has a written procedure (when required).<\/p>\n<p><em><strong>Improvement needed:<\/strong> <\/em>Has objective evidence but procedure needs improvement, or maybe no written procedure or lacking objective evidence to support the question.<\/p>\n<p><em><strong>Non-conformance<\/strong>:<\/em> No objective evidence to support the question (regardless of procedure) or lacking some objective evidence and no written procedure.<\/p>\n<p>The score is based on the percent of questions that conform to requirements, the percent that need improvement, and the percent that have a major non-conformance.<\/p>\n<p>The factory I visited with Champlain was quite organized, and our auditor carefully went through everything and completed a detailed checklist that relates to each item. \u00a0Several representatives from the factory presented evidence and answered questions throughout the day. \u00a0During the closing meeting, we reviewed the findings and discussed a few points for corrective action.<\/p>\n<h3><strong>Improvement plans include:<\/strong><\/h3>\n<ul>\n<li>A detailed description of the action plan<\/li>\n<li>Name of person responsible for improvement activity<\/li>\n<li>Date when the improvement will be completed<\/li>\n<\/ul>\n<p>In the end, C-TPAT reviews all aspects of the manufacturer&#8217;s security management system and provides invaluable feedback that is used in sourcing decisions. <a href=\"https:\/\/proqc.com\/contact-us\/\" target=\"_blank\" rel=\"noopener noreferrer\">Ask us <\/a>for an example report, or let us know if you have questions or want to schedule an audit!<\/p>\n","protected":false},"excerpt":{"rendered":"<p>I&#8217;ve recently returned from a visit to our offices in China where I was able to attend a [&hellip;]<\/p>\n","protected":false},"author":4,"featured_media":3826,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[290],"tags":[62,14,17,178,26],"class_list":["post-1375","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-factory-audit","tag-audit","tag-manufacturing","tag-quality","tag-security","tag-sourcing"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.3 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>What is a C-TPAT Security Audit? - Pro QC Blog<\/title>\n<meta name=\"description\" content=\"A C-TPAT audit isn&#039;t as common as a general QMS or ISO 9001 audit, but the information generated has significant value when you want to focus on security risk\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/proqc.com\/blog\/on-site-whats-a-c-tpat-security-audit\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"What is a C-TPAT Security Audit? - Pro QC Blog\" \/>\n<meta property=\"og:description\" content=\"A C-TPAT audit isn&#039;t as common as a general QMS or ISO 9001 audit, but the information generated has significant value when you want to focus on security risk\" \/>\n<meta property=\"og:url\" content=\"https:\/\/proqc.com\/blog\/on-site-whats-a-c-tpat-security-audit\/\" \/>\n<meta property=\"og:site_name\" content=\"Quality Blog | News on Quality Assurance &amp; Control | Pro QC\" \/>\n<meta property=\"article:published_time\" content=\"2015-06-25T17:26:42+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-11-14T11:35:11+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/proqc.com\/blog\/wp-content\/uploads\/2023\/06\/audit-min.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"480\" \/>\n\t<meta property=\"og:image:height\" content=\"480\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/webp\" \/>\n<meta name=\"author\" content=\"jennifer\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"jennifer\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/proqc.com\\\/blog\\\/on-site-whats-a-c-tpat-security-audit\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/proqc.com\\\/blog\\\/on-site-whats-a-c-tpat-security-audit\\\/\"},\"author\":{\"name\":\"jennifer\",\"@id\":\"https:\\\/\\\/proqc.com\\\/blog\\\/#\\\/schema\\\/person\\\/031754d39d861d38ee251d8605b3cb7f\"},\"headline\":\"On-Site: What&#8217;s a C-TPAT Security Audit?\",\"datePublished\":\"2015-06-25T17:26:42+00:00\",\"dateModified\":\"2024-11-14T11:35:11+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/proqc.com\\\/blog\\\/on-site-whats-a-c-tpat-security-audit\\\/\"},\"wordCount\":535,\"commentCount\":0,\"image\":{\"@id\":\"https:\\\/\\\/proqc.com\\\/blog\\\/on-site-whats-a-c-tpat-security-audit\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/proqc.com\\\/blog\\\/wp-content\\\/uploads\\\/2023\\\/06\\\/audit-min.webp\",\"keywords\":[\"audit\",\"manufacturing\",\"quality\",\"security\",\"sourcing\"],\"articleSection\":[\"Factory Audits\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/proqc.com\\\/blog\\\/on-site-whats-a-c-tpat-security-audit\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/proqc.com\\\/blog\\\/on-site-whats-a-c-tpat-security-audit\\\/\",\"url\":\"https:\\\/\\\/proqc.com\\\/blog\\\/on-site-whats-a-c-tpat-security-audit\\\/\",\"name\":\"What is a C-TPAT Security Audit? - Pro QC Blog\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/proqc.com\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/proqc.com\\\/blog\\\/on-site-whats-a-c-tpat-security-audit\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/proqc.com\\\/blog\\\/on-site-whats-a-c-tpat-security-audit\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/proqc.com\\\/blog\\\/wp-content\\\/uploads\\\/2023\\\/06\\\/audit-min.webp\",\"datePublished\":\"2015-06-25T17:26:42+00:00\",\"dateModified\":\"2024-11-14T11:35:11+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/proqc.com\\\/blog\\\/#\\\/schema\\\/person\\\/031754d39d861d38ee251d8605b3cb7f\"},\"description\":\"A C-TPAT audit isn't as common as a general QMS or ISO 9001 audit, but the information generated has significant value when you want to focus on security risk\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/proqc.com\\\/blog\\\/on-site-whats-a-c-tpat-security-audit\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/proqc.com\\\/blog\\\/on-site-whats-a-c-tpat-security-audit\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/proqc.com\\\/blog\\\/on-site-whats-a-c-tpat-security-audit\\\/#primaryimage\",\"url\":\"https:\\\/\\\/proqc.com\\\/blog\\\/wp-content\\\/uploads\\\/2023\\\/06\\\/audit-min.webp\",\"contentUrl\":\"https:\\\/\\\/proqc.com\\\/blog\\\/wp-content\\\/uploads\\\/2023\\\/06\\\/audit-min.webp\",\"width\":480,\"height\":480},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/proqc.com\\\/blog\\\/on-site-whats-a-c-tpat-security-audit\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/proqc.com\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"On-Site: What&#8217;s a C-TPAT Security Audit?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/proqc.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/proqc.com\\\/blog\\\/\",\"name\":\"Pro QC\",\"description\":\"Follow the Pro QC blog to find articles, news, case studies, and videos on quality assurance, quality control, supplier audits, supply chain, and manufacturing.\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/proqc.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/proqc.com\\\/blog\\\/#\\\/schema\\\/person\\\/031754d39d861d38ee251d8605b3cb7f\",\"name\":\"jennifer\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/a4a0ae554a0b3c6081c4bc6672dc4e65951bf441f2e45f3afd1fe1b91fd73cde?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/a4a0ae554a0b3c6081c4bc6672dc4e65951bf441f2e45f3afd1fe1b91fd73cde?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/a4a0ae554a0b3c6081c4bc6672dc4e65951bf441f2e45f3afd1fe1b91fd73cde?s=96&d=mm&r=g\",\"caption\":\"jennifer\"},\"url\":\"https:\\\/\\\/proqc.com\\\/blog\\\/author\\\/jennifer\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"What is a C-TPAT Security Audit? - Pro QC Blog","description":"A C-TPAT audit isn't as common as a general QMS or ISO 9001 audit, but the information generated has significant value when you want to focus on security risk","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/proqc.com\/blog\/on-site-whats-a-c-tpat-security-audit\/","og_locale":"en_US","og_type":"article","og_title":"What is a C-TPAT Security Audit? - Pro QC Blog","og_description":"A C-TPAT audit isn't as common as a general QMS or ISO 9001 audit, but the information generated has significant value when you want to focus on security risk","og_url":"https:\/\/proqc.com\/blog\/on-site-whats-a-c-tpat-security-audit\/","og_site_name":"Quality Blog | News on Quality Assurance &amp; Control | Pro QC","article_published_time":"2015-06-25T17:26:42+00:00","article_modified_time":"2024-11-14T11:35:11+00:00","og_image":[{"width":480,"height":480,"url":"https:\/\/proqc.com\/blog\/wp-content\/uploads\/2023\/06\/audit-min.webp","type":"image\/webp"}],"author":"jennifer","twitter_card":"summary_large_image","twitter_misc":{"Written by":"jennifer","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/proqc.com\/blog\/on-site-whats-a-c-tpat-security-audit\/#article","isPartOf":{"@id":"https:\/\/proqc.com\/blog\/on-site-whats-a-c-tpat-security-audit\/"},"author":{"name":"jennifer","@id":"https:\/\/proqc.com\/blog\/#\/schema\/person\/031754d39d861d38ee251d8605b3cb7f"},"headline":"On-Site: What&#8217;s a C-TPAT Security Audit?","datePublished":"2015-06-25T17:26:42+00:00","dateModified":"2024-11-14T11:35:11+00:00","mainEntityOfPage":{"@id":"https:\/\/proqc.com\/blog\/on-site-whats-a-c-tpat-security-audit\/"},"wordCount":535,"commentCount":0,"image":{"@id":"https:\/\/proqc.com\/blog\/on-site-whats-a-c-tpat-security-audit\/#primaryimage"},"thumbnailUrl":"https:\/\/proqc.com\/blog\/wp-content\/uploads\/2023\/06\/audit-min.webp","keywords":["audit","manufacturing","quality","security","sourcing"],"articleSection":["Factory Audits"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/proqc.com\/blog\/on-site-whats-a-c-tpat-security-audit\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/proqc.com\/blog\/on-site-whats-a-c-tpat-security-audit\/","url":"https:\/\/proqc.com\/blog\/on-site-whats-a-c-tpat-security-audit\/","name":"What is a C-TPAT Security Audit? - Pro QC Blog","isPartOf":{"@id":"https:\/\/proqc.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/proqc.com\/blog\/on-site-whats-a-c-tpat-security-audit\/#primaryimage"},"image":{"@id":"https:\/\/proqc.com\/blog\/on-site-whats-a-c-tpat-security-audit\/#primaryimage"},"thumbnailUrl":"https:\/\/proqc.com\/blog\/wp-content\/uploads\/2023\/06\/audit-min.webp","datePublished":"2015-06-25T17:26:42+00:00","dateModified":"2024-11-14T11:35:11+00:00","author":{"@id":"https:\/\/proqc.com\/blog\/#\/schema\/person\/031754d39d861d38ee251d8605b3cb7f"},"description":"A C-TPAT audit isn't as common as a general QMS or ISO 9001 audit, but the information generated has significant value when you want to focus on security risk","breadcrumb":{"@id":"https:\/\/proqc.com\/blog\/on-site-whats-a-c-tpat-security-audit\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/proqc.com\/blog\/on-site-whats-a-c-tpat-security-audit\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/proqc.com\/blog\/on-site-whats-a-c-tpat-security-audit\/#primaryimage","url":"https:\/\/proqc.com\/blog\/wp-content\/uploads\/2023\/06\/audit-min.webp","contentUrl":"https:\/\/proqc.com\/blog\/wp-content\/uploads\/2023\/06\/audit-min.webp","width":480,"height":480},{"@type":"BreadcrumbList","@id":"https:\/\/proqc.com\/blog\/on-site-whats-a-c-tpat-security-audit\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/proqc.com\/blog\/"},{"@type":"ListItem","position":2,"name":"On-Site: What&#8217;s a C-TPAT Security Audit?"}]},{"@type":"WebSite","@id":"https:\/\/proqc.com\/blog\/#website","url":"https:\/\/proqc.com\/blog\/","name":"Pro QC","description":"Follow the Pro QC blog to find articles, news, case studies, and videos on quality assurance, quality control, supplier audits, supply chain, and manufacturing.","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/proqc.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/proqc.com\/blog\/#\/schema\/person\/031754d39d861d38ee251d8605b3cb7f","name":"jennifer","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/a4a0ae554a0b3c6081c4bc6672dc4e65951bf441f2e45f3afd1fe1b91fd73cde?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/a4a0ae554a0b3c6081c4bc6672dc4e65951bf441f2e45f3afd1fe1b91fd73cde?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/a4a0ae554a0b3c6081c4bc6672dc4e65951bf441f2e45f3afd1fe1b91fd73cde?s=96&d=mm&r=g","caption":"jennifer"},"url":"https:\/\/proqc.com\/blog\/author\/jennifer\/"}]}},"_links":{"self":[{"href":"https:\/\/proqc.com\/blog\/wp-json\/wp\/v2\/posts\/1375","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/proqc.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/proqc.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/proqc.com\/blog\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/proqc.com\/blog\/wp-json\/wp\/v2\/comments?post=1375"}],"version-history":[{"count":6,"href":"https:\/\/proqc.com\/blog\/wp-json\/wp\/v2\/posts\/1375\/revisions"}],"predecessor-version":[{"id":4607,"href":"https:\/\/proqc.com\/blog\/wp-json\/wp\/v2\/posts\/1375\/revisions\/4607"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/proqc.com\/blog\/wp-json\/wp\/v2\/media\/3826"}],"wp:attachment":[{"href":"https:\/\/proqc.com\/blog\/wp-json\/wp\/v2\/media?parent=1375"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/proqc.com\/blog\/wp-json\/wp\/v2\/categories?post=1375"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/proqc.com\/blog\/wp-json\/wp\/v2\/tags?post=1375"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}