Which activity supports ongoing security improvement in CTPAT?

Which activity supports ongoing security improvement in CTPAT?

• A. Reducing audits
• B. Updating the Security Risk Assessment (SRA)
• C. Ignoring performance metrics
• D. Suspending CAPA

Answer: (B)

Ongoing security improvement rests on keeping a live, risk-based view of threats and controls. Updating the Security Risk Assessment ensures the program stays aligned with current risks by capturing new intelligence, changes in operations or facilities, and new partners. This refreshed assessment helps re-prioritize protections and allocate resources where they’re most needed, creating a continuous loop: identify risk, implement or adjust controls, assess results, and update the risk picture accordingly. Reducing audits reduces the opportunity to find gaps and learn from past performance, undermining improvement. Ignoring performance metrics removes the data you rely on to know whether controls are effective. Suspending CAPA stops corrective and preventive actions, halting real progress in addressing issues. By keeping the Security Risk Assessment current, you enable targeted improvements and a measurable path forward in the security program.

Ongoing security improvement rests on keeping a live, risk-based view of threats and controls. Updating the Security Risk Assessment ensures the program stays aligned with current risks by capturing new intelligence, changes in operations or facilities, and new partners. This refreshed assessment helps re-prioritize protections and allocate resources where they’re most needed, creating a continuous loop: identify risk, implement or adjust controls, assess results, and update the risk picture accordingly.

Reducing audits reduces the opportunity to find gaps and learn from past performance, undermining improvement. Ignoring performance metrics removes the data you rely on to know whether controls are effective. Suspending CAPA stops corrective and preventive actions, halting real progress in addressing issues.

By keeping the Security Risk Assessment current, you enable targeted improvements and a measurable path forward in the security program.