Physical Security
Cargo handling and storage facilities in domestic and foreign locations must have physical barriers and deterrents that
guard against unauthorized access.
Importers should incorporate the following C-TPAT physical security criteria throughout their supply chains as applicable.
Fencing
Perimeter fencing should enclose the areas around cargo handling and storage facilities. Interior fencing within a cargo
handling structure should be used to segregate domestic, international, high value, and hazardous cargo. All fencing must
be regularly inspected for integrity and damage.
Gates and Gate Houses
Gates through which vehicles and/or personnel enter or exit must be manned and/or monitored. The number of gates
should be kept to the minimum necessary for proper access and safety.
Parking
Private passenger vehicles should be prohibited from parking in or adjacent to cargo handling and storage areas.
Building Structure
Buildings must be constructed of materials that resist unlawful entry. The integrity of structures must be maintained by
periodic inspection and repair.
Locking Devices and Key Controls
All external and internal windows, gates and fences must be secured with locking devices. Management or security
personnel must control the issuance of all locks and keys.
Lighting
Adequate lighting must be provided inside and outside the facility including the following areas: entrances and exits, cargo
handling and storage areas, fence lines and parking areas.
Alarms Systems & Video Surveillance Cameras
Alarm systems and video surveillance cameras should be utilized to monitor premises and prevent unauthorized access to
cargo handling and storage areas.
Information Technology Security -- Password Protection
Automated systems must use individually assigned accounts that require a periodic change of password. IT security
policies, procedures and standards must be in place and provided to employees in the form of training.
Accountability
A system must be in place to identify the abuse of IT including improper access, tampering or the altering of business
data. All system violators must be subject to appropriate disciplinary actions for abuse.

