Audit Services
Audits are all about accountability. When faced with a changing regulatory landscape, the need for timely, high-quality audits is critical. ComSec offers independent audit services that leverage our extensive industry knowledge and experience to provide you with a quality assessment of your internal policies, processes and procedures.
CCSF Quarterly and Annual Audits
ComSec has developed an audit program that applies specifically to the Certified Cargo Screening Program.
All Certified Cargo Screening Facilities or CCSFs are required to conduct both quarterly and annual audits to ensure regulatory compliance with TSA security and screening operations.
A quarterly screening report consists of a questionnaire and outlined interviews with screening personnel that can be easily documented. The interactive PDF format allows electronic filing that is accessible at the click of a button for TSA review. The annual audit was developed as an external review with the full scope of audit procedures to meet the entire annual reporting requirements and assist in helping you identify areas of improvement and implement corrective processes as necessary.
Although every audit is unique, our auditors are trained to apply the elements of best practices to your individual requirements.
–
Planning - defining the scope and objective of the audit.
–
Fieldwork – is the section of the audit that determines if the controls are operating properly and in the manner described.
–
Audit Reporting – contains our written analysis and offers conclusions and recommendations. The final certified report is provided to you in written and electronic format.
Chain of Custody Methods
ComSec offers process auditing for Chain of Custody methods. Observation and evaluation can be instrumental in making sure the accepted and approved methods for Chain of Custody are properly applied and maintained to ensure acceptance at the air carriers.
CCSF Procedures
Policies and procedures are an integral part of every compliant operation. A full operational procedures manual for your CCSF should be written and audited on a recurring basis.
ComSec can offer assistance in the initial development of a procedures manual and the auditing essential to maintaining it properly. As important as the actual fieldwork audit, the review of the written policies is key to determining if your operation is following the guidelines by which you are regulated. Written procedures constantly need attention and updated modifications can make a big difference in the time you invest to train new personnel and meeting the continued and recurrent training requirements of the CCSP.
Facility Security
A security audit of your facility is a way to identify potential vulnerabilities within your organization. Conducting regular security audits offers a method to ensure the integrity of your operation as changes or modifications are made within the company.
These audits provide personnel with a plan to safeguard against potential dangers and develop a response plan to identify how your organization will respond to potential threats or disruptions.
ComSec will provide a systematic, measurable assessment of your organizations security performance and recommend solutions to correct security deficiencies to protect your operation.
Export Management and Compliance Program (EMCP)
ComSec can help you fulfill the requirements for external audits of your existing EMCP. We have developed audit questions and forms that address areas of obligation as specified by BIS requirements. Every company has different requirements set within their compliance structure for internal and external audits. We can provide help to guide you through your internal audits, or be retained to perform a complete external audit with follow up reports.
External audits typically involve some, or all, of the following areas:
• Verify resources and maintenance of export systems
• Verify administrative structure
• Interviews with responsible officials
• Review of written procedures
• Verify implementation of operational programs that follow written procedures
• Identify vulnerabilities in written procedures and recommend corrective action
• Review export compliance screening methods
• Document ongoing training programs
• Review export transactions
• Review of record keeping practices
• License condition reviews and follow-up to ensure compliance
