Which documentation should be maintained for CBP audits?

Which documentation should be maintained for CBP audits?

• A. Environmental permits and maintenance logs only.
• B. Payroll records and tax filings.
• C. Marketing materials and public relations plans.
• D. Security policies, training records, incident reports, BPQ updates, validation letters, and corrective action documentation.

Answer: (D)

CBP audits look for evidence that a company has an active, well-documented security program and keeps improving it. The strongest answer includes security policies and procedures to show governance, training records to prove staff understanding and compliance, incident reports that reflect how security events are detected and handled, BPQ updates to demonstrate ongoing risk assessment and program updates, validation letters indicating reviewed and approved security measures, and corrective action documentation showing how any deficiencies are tracked, assigned, and closed with results. Together, these items provide a clear picture of the program’s effectiveness and readiness for audit. Other documents like environmental permits, payroll/tax records, or marketing materials don’t address the specific security controls and monitoring CBP audits evaluate, so they aren’t the primary documentation for CBP audits.

CBP audits look for evidence that a company has an active, well-documented security program and keeps improving it. The strongest answer includes security policies and procedures to show governance, training records to prove staff understanding and compliance, incident reports that reflect how security events are detected and handled, BPQ updates to demonstrate ongoing risk assessment and program updates, validation letters indicating reviewed and approved security measures, and corrective action documentation showing how any deficiencies are tracked, assigned, and closed with results. Together, these items provide a clear picture of the program’s effectiveness and readiness for audit. Other documents like environmental permits, payroll/tax records, or marketing materials don’t address the specific security controls and monitoring CBP audits evaluate, so they aren’t the primary documentation for CBP audits.