An applicant seeking to participate in C–TPAT shall—

1. (1) demonstrate a history of moving cargo in the international supply chain;

2. (2) conduct an assessment of its supply chain based upon security criteria established by the Secretary, acting through the Commissioner, including—

   1. (A) business partner requirements;
   2. (B) container security;
   3. (C) physical security and access controls;
   4. (D) personnel security;
   5. (E) procedural security;
   6. (F) security training and threat awareness; and
   7. (G) information technology security;
3. (3) implement and maintain security measures and supply chain security practices meeting security criteria established by the Commissioner; and
4. (4) meet all other requirements established by the Commissioner, in consultation with the Commercial Operations Advisory Committee.

(Pub. L. 109–347, title II, § 213, Oct. 13, 2006, 120 Stat. 1909.)