What should be done when there are changes to business partners in a CTPAT program?

What should be done when there are changes to business partners in a CTPAT program?

• A. Ignore unless required by law
• B. Update BPQ and notify CBP of significant changes that impact security
• C. Publicly announce changes
• D. Re-sign all contracts with partners

Answer: (B)

When a business partner changes, the security picture of your supply chain can shift. In CTPAT, you keep a current view of each partner’s security standing by updating the Business Partner Questionnaire (BPQ) whenever changes occur that could affect security. If there are significant changes—like adding or removing a partner, a change in facility location, ownership, or in how a partner manages security controls—you must update the BPQ and notify U.S. Customs and Border Protection so they can reassess risk and adjust your program status if needed. This keeps CBP informed and helps preserve the integrity of the validated security profile. Public announcements aren’t part of the process, and ignoring changes can leave CBP with outdated risk information. Re-signing all contracts isn’t a general CBP requirement for reporting changes, since the reporting step focuses on updating the BPQ and notifying CBP about security-impacting changes. The key practice is timely BPQ updates plus notification to CBP whenever those changes could affect security.

When a business partner changes, the security picture of your supply chain can shift. In CTPAT, you keep a current view of each partner’s security standing by updating the Business Partner Questionnaire (BPQ) whenever changes occur that could affect security. If there are significant changes—like adding or removing a partner, a change in facility location, ownership, or in how a partner manages security controls—you must update the BPQ and notify U.S. Customs and Border Protection so they can reassess risk and adjust your program status if needed. This keeps CBP informed and helps preserve the integrity of the validated security profile.

Public announcements aren’t part of the process, and ignoring changes can leave CBP with outdated risk information. Re-signing all contracts isn’t a general CBP requirement for reporting changes, since the reporting step focuses on updating the BPQ and notifying CBP about security-impacting changes. The key practice is timely BPQ updates plus notification to CBP whenever those changes could affect security.