Crosswalk
CTPAT (2020)
Where the corpus maps to CTPAT (2020): Customs-Trade Partnership Against Terrorism Minimum Security Criteria.
Canonical citation
- Standard ID
- CTPAT MSC
- Current version
- 2020
- Publication date
- 2020
- Topic
- Customs-Trade Partnership Against Terrorism Minimum Security Criteria
- Upstream check location
- https://
www.cbp.gov/ border-security/ ports-entry/ cargo-security/ ctpat-customs-trade-partnership-against-terrorism/ apply/ security-criteria (opens in a new tab) - Last verified (UTC)
- 2026-07-09
Mapped control areas, 7
Control areas from the reverse crosswalk
From the Reverse Framework Control Crosswalk Matrix, which answers: given a control identifier or family, which documents address it.
Coverage, 6 domains
Coverage by domain
From the GRC Library Compliance Alignment Matrix; the main crosswalk table's document counts land here.
Governance, 2 documents
- Records Retention and Destruction StandardDocumentation and record-keeping
- Data Retention ScheduleDocumentation and record-keeping
Risk, 1 document
- Third-Party and Supply Chain Risk StandardBusiness partner requirements
Compliance, 6 documents
- UK AEO-S IT and Cybersecurity RequirementsIT security requirements
- Logistics Sector GRC Requirements AnnexProgramme governance
- US CTPAT IT and Cybersecurity Compliance Controls RegisterIT security requirements
- US CTPAT Minimum Security Criteria Controls RegisterProgramme governance, Physical access controls, Business partner requirements
- Canada PIP IT and Cybersecurity Compliance Controls RegisterIT security requirements
- Trade Compliance Programme Gap Assessment TemplateProgramme governance, Risk assessment
Security, 32 documents
- Information Security PolicyIT security policy
- Identity and Access Management PolicyIT access controls
- Encryption and Key Management PolicyIT security controls
- Logging and Monitoring StandardIT security monitoring
- Privileged Access Management StandardIT access controls
- Authentication and Password Management StandardIT access controls
- Security Incident Response ProcedureIT security incidents
- Vulnerability Management ProcedureIT security controls
- Cryptographic Key Lifecycle Management FrameworkIT security controls
- Cryptographic Key Operations ProcedureIT security controls
- Key Escrow and Recovery ProcedureIT security controls
- Post-Quantum Cryptography Readiness RoadmapIT security controls
- Access Control ProcedureIT access controls
- Identity Management ProcedureIT access controls
- IT Onboarding and Offboarding ProcedureIT access controls
- Zero Trust Architecture FrameworkIT access controls
- Bring Your Own Device (BYOD) PolicyIT security controls
- Network Communications Security PolicyIT security controls
- Endpoint Hardening StandardIT security controls
- Email Security StandardIT security controls
- SaaS Security Posture Management StandardIT security controls
- Remote Working Security StandardIT security controls
- Incident Escalation MatrixIT security incidents
- Security Ticket Reporting SchemeIT security incidents
- Security Operations Centre Operating Model StandardIT security monitoring
- Penetration Testing and Red Team StandardIT security controls
- Threat Modelling StandardIT security controls
- Security Disciplinary Process ProcedurePersonnel security
- Personnel Security Screening StandardPersonnel security
- Security Awareness and Training StandardSecurity training and threat awareness
- Insider Risk Programme FrameworkIT security monitoring
- Acceptance Into Service PolicyIT security controls
Operations, 11 documents
- Production Security RequirementsIT security controls
- Network Security and Segmentation StandardIT security controls
- Cloud Security Configuration BaselineIT security controls
- Physical Security of IT Infrastructure StandardPhysical access controls
- Certificate Authority Management StandardIT security controls
- Change Management and Configuration Control ProcedureIT security controls
- Endpoint Management and Device Compliance ProcedureIT security controls
- Security Monitoring and Alert Management ProcedureIT security monitoring
- Threat Intelligence and SIEM Operations ProcedureIT security monitoring
- Patch Management ProcedureIT security controls
- Release Management ProcedureIT security controls
Supply chain, 13 documents
- Supplier and Cloud Governance FrameworkBusiness partner requirements, Cargo security
- Supplier Security and Privacy Assurance StandardBusiness partner requirements
- Supplier Resilience Monitoring StandardBusiness partner requirements, ongoing monitoring
- Supplier Due Diligence ProcedureBusiness partner vetting
- Supplier Onboarding Security Review ProcedureBusiness partner vetting
- Supplier Ongoing Monitoring ProcedureBusiness partner requirements
- Supplier Audit ProcedureBusiness partner requirements
- Supplier Exit and Data Return ProcedureBusiness partner requirements, change of approved service providers
- Fourth-Party and Nth-Party Risk ProcedureBusiness partner requirements
- Supplier Risk Register TemplateBusiness partner requirements
- Supplier Offboarding Evidence TemplateBusiness partner requirements
- Supplier Security QuestionnaireBusiness partner vetting, security questionnaire
- Trade and Supply-Chain Continuity Controls AnnexBusiness partner requirements, Cargo security
Corpus citations, 3
Documents naming it in their framework alignment
Generated from each document's framework alignment list in the taxonomy, through the committed alias map.
Note
What this mapping is
From the GRC Library Compliance Alignment Matrix: citations are indicative, not exhaustive (the representative-citation convention), and no entry constitutes a certification, attestation, or legal opinion.
From the Reverse Framework Control Crosswalk Matrix: coverage is partial, and external control identifiers and clause numbers are referenced for navigation only; the library does not reproduce third-party control text.
From the Cross-Framework Alignment Matrix: the alignment is not an official mapping, certification claim, legal opinion, or reproduction of third-party framework content.
The standards, laws, frameworks, and programmes in the canonical citations register, mapped here or not, are listed with their current editions on the Standards & frameworks page, generated from that register.