C-TPAT · Importers· U.S. Customs & Border Protection
You hold the certification.
CBP does not evaluate your warehouse in isolation. It evaluates whether you can prove, with documentation, that every partner between the factory floor and the port of entry meets the Minimum Security Criteria, not just the partners you own.
Who CBP actually certifies here
The importer of record is the entity C-TPAT certifies. Every other trade entity type on this site, the carrier, the broker, the manufacturer, the warehouse, earns its own membership by proving the same minimum security criteria from its own seat in your chain.
How the 5-step risk assessment applies
The five-step risk assessment is written for exactly this seat: map the whole cargo journey, including every partner you do not control directly, rate the threat at each stop, hold each partner against the twelve criteria, write a corrective action plan for every gap, and document the whole process so it survives a validation a year from now, not just the week you built it.
The Minimum Security Criteria that carry the most weight for importers
Business Partner Requirements
You are accountable for your suppliers, carriers, consolidators and brokers meeting the criteria, not just your own four walls.
Risk Assessment
A documented, risk-based assessment of your international supply chain, refreshed when the chain changes, not filed once and forgotten.
Cybersecurity
The systems that move your trade data, from the purchase order to the entry filing, protected against unauthorized access.
Conveyance and Instruments of International Traffic Security
Inspection and seal verification built into your receiving process, even when the trailer belonged to someone else the whole way.
Procedural Security
Documented procedures for order, receipt and reconciliation of cargo, so a discrepancy gets caught at the dock, not at the border.
Personnel Security
Background screening appropriate to the access each employee has to cargo information and the supply chain itself.
Source: U.S. CBP, C-TPAT Minimum Security Criteria (cbp.gov)
Questions specific to importers
Who is actually eligible for C-TPAT as an importer?
A U.S. importer of record, the entity that files the customs entry, is who CBP certifies under C-TPAT. If you source goods but a broker or a related company files the entry on your behalf, CBP certifies the entity named on the entry, and the Minimum Security Criteria still runs through every supplier and carrier in that chain.
Does my own warehouse security get assessed, or only my suppliers?
Both. The twelve Minimum Security Criteria apply to your own facilities and personnel, and the Business Partner Requirements pillar holds you accountable for verifying your suppliers, carriers and brokers meet the same bar. A validator asks for evidence of both halves.
What happens if one supplier in my chain will not participate?
That is a documented risk, not a reason to skip the assessment. CBP expects you to identify high-risk partners and show what you did about it. A supplier who refuses a security assessment is itself a finding the five-step risk assessment is built to surface and track.
Also on C-TPAT
8 suppliers · 14-day trial
Start your 14-day trial: run your 8 highest-risk suppliers through the full C-TPAT 5-step risk assessment. No contract, no card.
30 years · 44,000 organizations · 500,000 assessments · 100% success on C-TPAT, PIP and AEO validations.