Supply Chain Security Questionnaire for External Suppliers€¦ · XLS file · Web viewSupply...

21

Click here to load reader

Transcript of Supply Chain Security Questionnaire for External Suppliers€¦ · XLS file · Web viewSupply...

Page 1: Supply Chain Security Questionnaire for External Suppliers€¦ · XLS file · Web viewSupply Chain Security Questionnaire ... Supplier Audit Form Page of Yes No Yes No No Yes No

QAF-0051-C Rev DVerify revision before use.

Supplier Audit Form Page 1 of 16

QAF-0061-C Rev E

Business Partner

Address City, State, Zip Code

Country Manufacturing Site (use separate questionnaire for each site)

Business Partner -- Contact #1 NameTitle

PhoneEmail

Business Partner -- Contact #2 NameTitle

PhoneEmail

Customs-Trade Partnership Against Terrorism (C-TPAT)

If yes, SVI #

Foreign Port (s) used to import product into the U.S

Carrier Initiative Program (CIP)

Super Carrier Initiative Program (SCIP)

Business Anti-Smuggling Coalition (BASC)

Questionnaire Completed ByNameTitle

PhoneDate

Supply Chain Security Questionnaire Business Partners

Instructions: The purpose of this survey is to determine the security standards currently practiced by Sanmina-SCI's business partners. This survey is part of the Sanmina-SCI's commitment and participation with the U.S.Customs & Border Protection's sponsored Supply Chain Security programs, notably C-TPAT.

Please complete a separate questionnaire for each business site. Each questionnaire consists of nine pages, including the "company data" page below. The other pages may be accessed by using the "Continue to Next Page" button at the bottom of each page or by clicking the yellow tabs at the bottom of the screen. All questions should be answered honestly as the responses are subject to review by Sanmina-SCI and/or U.S. Customs personnel. All information will be kept confidential and shared only with U.S. Customs for official purposes.

If you entered SVI number, no further information is required past this page.

Does your company participate in any of the following partnership programs with the U.S. government? If not, do you have plans to participate? Provide brief explanation.

Hyperlink To CIP

Hyperlink to SCIP

Hyperlink to BASC

Yes No

Yes No

No

Yes No

Yes

D10
J. Michael Harthcock: Place Business Partner Legal Name of Operations
D13
J. Michael Harthcock: Business Partner's Legal HQ Address
D16
J. Michael Harthcock: Country HQ located
Y16
J. Michael Harthcock: Business Partner's site of security review
V31
J. Michael Harthcock: Please enter the C-TPAT SVI number here.
AN31
J. Michael Harthcock: Thank you for completing this page. Your organization's information submitted will be secured on Sanmina-SCI C-TPAT Connex
Page 2: Supply Chain Security Questionnaire for External Suppliers€¦ · XLS file · Web viewSupply Chain Security Questionnaire ... Supplier Audit Form Page of Yes No Yes No No Yes No

QAF-0061-C Rev D Page 2 of 16

Supply Chain Security Questionnaire Business Partners

Partner: Date:

Section 1 - Container Security Comments / Description

1

2

3

4

5

6

7

Is policy audited?

Is policy enforced?

Is there a written policy to ensure containers are stored in a secure place to prevent unauthorized access and/or manipulation?

Do you have documented procedures to report and neutralize unauthorized entry into containers and container storage areas?

Do you have documented procedures to verify the physical integrity of the container structure prior to stuffing?

Is U.S. Customs' seven-point inspection of container integrity (I.e. front wall, left side, right side, floor, ceiling/roof, inside/outside doors, outside/under-carriage) conducted prior to stuffing the container?

Do you have documented procedures to properly seal and maintain the integrity of shipping containers at the point of stuffing?

Do container seals meet or exceed the current PAS ISO 17712 standards for high security seals?

Do you have documented procedures to recognize compromised seals and report them to the appropriate government authority (e.g., customs authorities)?

YesNo

YesNo No

Yes

NoYes

YesNo

YesNo

YesNo

YesNo

YesNo

YesNo

YesNo

YesNo

YesNo

YesNo

YesNo

YesNo

YesNo

YesNo

YesNo

YesNo

YesNo

Page 3: Supply Chain Security Questionnaire for External Suppliers€¦ · XLS file · Web viewSupply Chain Security Questionnaire ... Supplier Audit Form Page of Yes No Yes No No Yes No

QAF-0061-C Rev D Page 3 of 16

Supply Chain Security Questionnaire Business Partners

Partner: Date:

Section 2 - Physical Security Comments / Description

1

2

3

4

5

6

7

8

9

10

11

Is policy audited?

Is policy enforced?

Are all buildings and facilities constructed of materials to prevent unauthorized access?

Is there a perimeter fencing of sufficient Height to impede intrusion around cargo handling and storage facilities?

Are all doors, windows, fences, and gates (both internal and external) equipped with adequate locking devices?

Does management/security personnel control the issuance of all locks and keys?

Is adequate lighting available throughout the interior and exterior of your facilities, including parking areas?

Is a video surveillance system in place on the interior of your facilities?

Is a video surveillance system in place on the exterior of your facilities?

Are your facilities equipped with an alarm system and/or patrolled by a security officer to prevent unauthorized access to cargo handling and storage?

Are international, domestic, high-value, and dangerous goods segregated within your warehouse by a caged or otherwise secured?

Are internal/external communications systems in place to contact internal security personnel or local law enforcement?

Is parking for private vehicles separate from shipping, receiving, loading, and cargo areas?

YesNo

NoYes

YesNo

YesNo

YesNo

YesNo

YesNo

YesNo

YesNo

YesNo

YesNo

YesNo

YesNo

YesNo

YesNo

YesNo

YesNo

YesNo

YesNo

YesNo

YesNo

YesNo

YesNo

YesNo

YesNo

YesNo

NoYes

YesNo

YesNo

YesNo

YesNo

YesNo

YesNo

YesNo

Page 4: Supply Chain Security Questionnaire for External Suppliers€¦ · XLS file · Web viewSupply Chain Security Questionnaire ... Supplier Audit Form Page of Yes No Yes No No Yes No

QAF-0061-C Rev D Page 4 of 16

Supply Chain Security Questionnaire Business Partners

Partner: Date:

Section 3 - Access Controls Comments / Description

1

2

3

4

5

Is policy audited?

Is policy enforced?

Does your facility have access controls for the positive identification of all employees, visitors, and vendors?

Are employees required to wear photo identification badges?

Are visitors, including vendors, required to provide photo identification, to be escorted, and to visibly display temporary identification?

Do you have documented procedures for identifying and removing unauthorized or unidentified persons?

Are arriving packages and mail screened periodically before dissemination?

YesNo

YesNo No

Yes

NoYes

YesNo

YesNo

YesNo

YesNo

YesNo

YesNo

YesNo

YesNo

YesNo

YesNo

YesNo

Page 5: Supply Chain Security Questionnaire for External Suppliers€¦ · XLS file · Web viewSupply Chain Security Questionnaire ... Supplier Audit Form Page of Yes No Yes No No Yes No

QAF-0061-C Rev D Page 5 of 16

Supply Chain Security Questionnaire Business Partners

Page 6: Supply Chain Security Questionnaire for External Suppliers€¦ · XLS file · Web viewSupply Chain Security Questionnaire ... Supplier Audit Form Page of Yes No Yes No No Yes No

QAF-0061-C Rev D Page 6 of 16

Supply Chain Security Questionnaire Business Partners

Partner: Date:

Section 4 - Procedural Security

1

2

3

4

Is policy audited?

Is policy enforced?

Do you have documented procedures to ensure that information used to clear cargo is legible accurate, and complete?

Do you have procedures to protect against the introduction of erroneous information on cargo documents?

Are procedures in place for tracking the timely movement of incoming and outgoing goods?

Is all outgoing/finished product properly marked, weighed, counted, and verified against manifest documents, delivery orders, and purchase orders?

YesNo

YesNo No

Yes

NoYes

YesNo

YesNo

YesNo

YesNo

YesNo

YesNo

YesNo

YesNo

Page 7: Supply Chain Security Questionnaire for External Suppliers€¦ · XLS file · Web viewSupply Chain Security Questionnaire ... Supplier Audit Form Page of Yes No Yes No No Yes No

QAF-0061-C Rev D Page 7 of 16

Supply Chain Security Questionnaire Business Partners

Comments / Description

Page 8: Supply Chain Security Questionnaire for External Suppliers€¦ · XLS file · Web viewSupply Chain Security Questionnaire ... Supplier Audit Form Page of Yes No Yes No No Yes No

QAF-0061-C Rev D Page 8 of 16

Supply Chain Security Questionnaire Business Partners

Partner: Date:

Section 5 - Personnel Security Comments / Description

1

2

3

4 N/A N/A

5

6 Do prospective employees take a drug test?

7 Do you interview prospective employees?

8 Do you maintain current personnel files on employees?

9

10

Is policy audited?

Is policy enforced?

Do prospective employees complete an application when applying for positions?

Do you conduct employment screening of prospective employees?

Do you verify applications submitted by prospective employees for work history?

Are you permitted by your government to conduct background checks on prospective employees?

If yes, do you conduct background checks of prospective employees?

Do you maintain a current permanent employee list (foreign and domestic), which includes the name, date of birth, national identification number or social security number, and position held?

Do you have a written code of conduct or policy that addresses security violations?

YesNo

YesNo No

Yes

NoYes

YesNo

YesNoYesNo

Yes

No

YesNo

YesNo

YesNo

YesNo

YesNo

YesNo

YesNo

Yes

No

Yes

No

YesNo

Yes

No

Yes

No

YesNo

Yes

No

YesNo

YesNo

YesNo

Yes

No

YesNo

Yes

No

Page 9: Supply Chain Security Questionnaire for External Suppliers€¦ · XLS file · Web viewSupply Chain Security Questionnaire ... Supplier Audit Form Page of Yes No Yes No No Yes No

QAF-0061-C Rev D Page 9 of 16

Section 5 - Personnel Security Comments / DescriptionIs policy audited?

Is policy enforced?

11

12

13

14

Are personnel security policies and procedures documented, controlled, communicated to applicable employees and periodically archived and updated by company management?

Do you conduct periodic reviews of current employees work performance and other related issues?

Do you have management responsible for oversight of personnel?

Do you have an employee termination procedure that includes recovering keys, identification badges, and other access devices?

Yes

No

YesNo

Yes

No

Yes

Yes

Yes

No

No

No

Yes

Yes

Yes

YesNo

No

No

No

Yes

Yes

No

No

Page 10: Supply Chain Security Questionnaire for External Suppliers€¦ · XLS file · Web viewSupply Chain Security Questionnaire ... Supplier Audit Form Page of Yes No Yes No No Yes No

QAF-0061-C Rev D Page 10 of 16

Supply Chain Security Questionnaire Business Partners

Partner: Date:

Section 6 - Information Technology Security Comments / Description

1

2 Do you assign passwords to your computer users?

3

4 Does your computer system have firewalls?

5

6

Is policy audited?

Is policy enforced?

Do your computer systems require individually assigned accounts to acquire access?

Do you have a system to identify improper access to tampering with, or altering data?

Do you have procedures to prevent unauthorized use of documents and forms?

Are system violators subject to appropriate disciplinary actions?

YesNo

YesNo No

Yes

NoYes

YesNo

YesNo

YesNo

YesNo

YesNo

YesNo

YesNo

YesNo

YesNo

YesNo

YesNo

YesNo

YesNo

YesNo

Page 11: Supply Chain Security Questionnaire for External Suppliers€¦ · XLS file · Web viewSupply Chain Security Questionnaire ... Supplier Audit Form Page of Yes No Yes No No Yes No

QAF-0061-C Rev D Page 11 of 16

Supply Chain Security Questionnaire Business Partners

Page 12: Supply Chain Security Questionnaire for External Suppliers€¦ · XLS file · Web viewSupply Chain Security Questionnaire ... Supplier Audit Form Page of Yes No Yes No No Yes No

QAF-0061-C Rev D Page 12 of 16

Supply Chain Security Questionnaire Business Partners

Partner: Date:

Section 7 - Supply Chain Security Training

1 Is a security awareness program in place?

2

3

4

Is policy audited?

Is policy enforced?

Do programs offer incentives for active employee participation in security controls?

Do you have security training in recognition of document fraud and computer security controls?

Do you have a reward/integrity hotline for the reporting of illegal/suspicious activity by employees?

YesNo

YesNo No

Yes

NoYes

YesNo

YesNo

YesNo

YesNo

YesNo

YesNo

YesNo

YesNo

Page 13: Supply Chain Security Questionnaire for External Suppliers€¦ · XLS file · Web viewSupply Chain Security Questionnaire ... Supplier Audit Form Page of Yes No Yes No No Yes No

QAF-0061-C Rev D Page 13 of 16

Supply Chain Security Questionnaire Business Partners

Comments / Description

Page 14: Supply Chain Security Questionnaire for External Suppliers€¦ · XLS file · Web viewSupply Chain Security Questionnaire ... Supplier Audit Form Page of Yes No Yes No No Yes No

QAF-0061-C Rev D Page 14 of 16

Supply Chain Security QuestionnaireBusiness Partners

Partner: Date:

Section 8 - Additional Security Controls Comments / Description

1

2

Is policy audited?

Is policy enforced?

Do you have written standards for selection of freight forwarders and carriers?

Do you have written standards for selection of consolidators and third party warehouses?

YesNo

YesNo No

Yes

NoYes Yes

NoYesNo

Page 15: Supply Chain Security Questionnaire for External Suppliers€¦ · XLS file · Web viewSupply Chain Security Questionnaire ... Supplier Audit Form Page of Yes No Yes No No Yes No

QAF-0061-C Rev D Page 15 of 16

3

Please describe any additional security controls that are utilized by your company that have not been identified in this questinnaire.

Page 16: Supply Chain Security Questionnaire for External Suppliers€¦ · XLS file · Web viewSupply Chain Security Questionnaire ... Supplier Audit Form Page of Yes No Yes No No Yes No

QAF-0061-C Rev D Page 16 of 16

Supply Chain Security QuestionnaireBusiness Partners