CPSS study plan

Define supply chain security governance terms and distinguish them from adjacent concepts such as logistics quality or general corporate compliance

Map the roles of a security steering committee, a supply chain security officer, and business unit owners into a one-page responsibility matrix

Explain how enterprise risk appetite is translated into supply chain security objectives and acceptance criteria

Classify ten sample risks using a likelihood-by-impact matrix and justify each placement in writing

Build a threat taxonomy covering physical, personnel, cyber, and third-party vectors relevant to cargo and facilities

Assess facility and shipment vulnerabilities using a structured method such as a criticality and exposure scoring model

Trace how a single threat actor could chain weaknesses across a supplier, a carrier, and a distribution site

Select treatment options for each identified risk and record residual risk after controls

Evaluate perimeter, access control, lighting, and intrusion detection designs against a stated protection objective

Design a layered physical protection scheme for a warehouse receiving dock and justify each control layer

Interpret common industry security guidance for facilities without quoting any single standard verbatim

Draft inspection checkpoints an auditor could use to verify physical controls on site

Apply cargo integrity controls including seals, chain of custody, and tamper evidence to a multi-leg route

Compare transport modes and carrier selection criteria against security requirements

Design a handoff protocol for a transshipment point with documented custody transfer

Identify where cargo theft and diversion risks concentrate and select proportionate countermeasures

Map information flows between shippers, carriers, brokers, and customs systems and identify exposure points

Specify access control, encryption, and logging requirements for a shipment tracking platform

Construct an insider threat program covering pre-employment screening, behavioral indicators, and reporting channels

Evaluate supplier security due diligence tiers and define contractual security clauses for each tier

Compare the structure and intent of major customs and trade security programs and authorized trader schemes

Determine documentation and record-keeping obligations for a cross-border shipment scenario

Identify compliance failure points in classification, valuation, and origin reporting that also carry security implications

Draft an internal compliance calendar linking regulatory deadlines to accountable owners

Write incident classification criteria that separate security incidents from operational disruptions

Build a response playbook for a cargo theft or facility breach including notification and evidence preservation

Conduct a business impact analysis for a critical distribution function and derive recovery objectives

Test a continuity plan against a plausible disruption scenario and record gaps

Design an audit program with scope, sampling approach, evidence standards, and finding severity levels

Select performance metrics that measure security outcomes rather than activity volume

Perform a mock audit of one process and write findings in a defensible format

Revisit the weakest domains from earlier weeks and close the highest-priority knowledge gaps