Cargo Security

Cargo Security - Why?

Routines for Access to Cargo Units

• Lack of adequate procedures for access to cargo units.
• Unauthorized access to cargo units.

Ensuring the Integrity of Cargo Units

• Tampering with cargo units.
• Use of hidden places in cargo units for smuggling purposes.
• Incomplete control of the cargo units.

In case of Intrusion and/or Tampering with Cargo Units

• No proper action if unauthorized access or tampering has been discovered.

Cargo Security - Solution

Routines for Access to Cargo Units

• Implement procedures governing access to shipping areas, loading docks and cargo areas

Ensuring the Integrity of Cargo Units

• Cargo units are placed in a secure area (e.g. a fenced area, an area with video surveillance or monitored by security personnel) or other measures are taken to assure the integrity of the cargo unit
• Regular reconciliation between register and seals (ISO/PAS 17712 compliant) held.
• Seven Point Inspection process

In case of Intrusion and/or Tampering with Cargo Units

• Procedures for recording, investigating and taking remedial action when unauthorised access or tampering has been discovered.

Information Security

Information Security – Protection of Computer Systems

• Unauthorised access and/or intrusion to the economic operator's computer systems and or programs
• Deliberate destruction or loss of relevant information

Information Security – Documentation Security

• Misuse of the economic operator's information system to endanger the supply chain.
• Deliberate destruction or loss of relevant information

Information Security – Solution

IT security Policy, Procedures & Standards - ISO 27001 certification

• Information Security Assessment by Information security officer

Procedures for granting Access/ withdrawal rights to Authorized Persons;

• Password protection on all PC Stations and possibly on important programmes
• Limit access to  data, server rooms on need to know basis to authorised persons;
• Perform tests intrusion (unauthorized access) at regular intervals and record

Using encryption software where appropriate;

• Firewalls;
• Anti-virus protection;

Implement procedures for dealing with Security Threat incidents.

Data Security

Requirements for Back-up, Record Keeping /Archiving

• Inability to readily undertake an audit due to the loss of information or bad archiving.
• Lack of back-up routines
• Lack of satisfactory procedures for the archiving of the applicant’s records and information.
• Deliberate destruction or loss of relevant information

Back-up, Record Keeping /Archiving - Solution

IT security - ISO 27001 certification

Procedures for back-up, recovery and data protection against loss;

• Backups should be done daily, on either incremental or full basis.
• Full backups should be done at least once a week.
• Min. of three latest backups should be available at all times.
• Backups are preferably done remotely through an electronically secure method on a storage facility located at least 300 meters away. 
• Encryption key should also be backed up and stored away from the storage facility.

Contingency plans to cover systems disruption/failure

Provision of Data Classification scheme