Members of the Customs Trade Partnership Against Terrorism (CTPAT) Program are required to maintain their primary business address within the Business Details section of the CTPAT Portal, along with any additional company locations that may be relevant to their operations.
So, what happens when your company opens a new facility?
Members must update this address and location information as necessary and verify when completing the required annual Security Profile review. When new facilities are added, the member must ensure the location complies with the program’s Minimum-Security Criteria (MSC), as the facility may be selected for a CTPAT validation.
Outlined below are the key steps to follow when adding or updating facility information.
1. Determine Whether the New Facility Should Be Added to Your Existing Account
Begin by determining whether the new location should be included under your current CTPAT account. Consider the following factors, as applicable to your operation:
- Has the primary address changed or do existing addresses in the portal need to be updated?
- Will the facility fall under your organization’s CTPAT certification?
- Does the facility handle or store international cargo?
- Does the facility receive or ship cargo to the United States?
- Have any current operations relocated to a new facility, including headquarters or administrative offices?
Evaluating these questions will help determine whether the location should be incorporated into your current CTPAT profile.
2. Contact Your Supply Chain Security Specialist (SCSS)
After determining the appropriate course of action, it is recommended that you notify your Supply Chain Security Specialist (SCSS) of your plans. Confirm that they agree with your decision and proposed next steps.
Additionally, verify whether your SCSS requires any supporting information or documentation related to the new facility.
3. Ensure the CTPAT Minimum-Security Criteria (MSC) Has Been Implemented
Any newly added facility must adhere to the same security standards applied throughout your organization.
Ensure that the location maintains:
- Established security procedures and operational processes
- Appropriate physical security controls
- Compliance with your company’s internal security policies and CTPAT’s MSC requirements
Employees at the new facility should also receive CTPAT security awareness training.
Implementing these measures before the facility begins handling international cargo will help ensure continued program compliance.
4. Update Your Risk Assessment
Each new facility may introduce additional vulnerabilities within your supply chain. Your company should update its risk assessment to reflect the new location.
This process should include:
- Updating internal procedures and operational processes
- Identifying potential risks and vulnerabilities
- Developing a Corrective Action Plan (CAP) if necessary
5. Update Your Security Profile in the CTPAT Portal
Once the facility becomes operational, update your Security Profile in the CTPAT Portal to reflect the new location.
Updates may include:
- Adding the facility’s address and operational details
- Revising security procedures, if applicable
- Uploading any relevant supporting documentation
Final Considerations
Adding a new facility requires careful integration into your organization’s existing security program. By updating your Risk Assessment, Security Profile, and internal procedures, you help ensure that the new location supports continued compliance with CTPAT standards.
Maintaining accurate documentation and consistent security practices across all facilities will help preserve your organization’s CTPAT certification and program benefits.
