What are the core components referred to as the Minimum Security Criteria (MSCs) in CTPAT?

What are the core components referred to as the Minimum Security Criteria (MSCs) in CTPAT?

• A. A checklist for vendor qualification
• B. A code of conduct for employees
• C. A set of required security controls across physical security, procedural security, personnel security, information security, and security-related operations
• D. A compliance training module

Answer: (C)

The Minimum Security Criteria are the baseline set of security controls that must be in place for a company to participate in CTPAT. They cover five areas: physical security, procedural security, personnel security, information security, and security-related operations. This framing matches the option that explicitly describes a set of required security controls across those domains, which is exactly what MSCs represent. It isn’t just a vendor qualification checklist, a code of conduct, or a training module—the other options describe narrower tools or programs, whereas MSCs establish the comprehensive security standards CBP uses for risk assessment and validation.

The Minimum Security Criteria are the baseline set of security controls that must be in place for a company to participate in CTPAT. They cover five areas: physical security, procedural security, personnel security, information security, and security-related operations. This framing matches the option that explicitly describes a set of required security controls across those domains, which is exactly what MSCs represent. It isn’t just a vendor qualification checklist, a code of conduct, or a training module—the other options describe narrower tools or programs, whereas MSCs establish the comprehensive security standards CBP uses for risk assessment and validation.