WCO SAFE Framework of Standards to Secure and Facilitate Global Trade (2021)
Evidence request list. 24 controls, 24 carrying auditor artefact guidance. Generated from the compliance knowledge graph on 12 September 2026. Published by The Art of Service.
ISCM
Per WCO SAFE Framework of Standards to Secure and Facilitate Global Trade (2021): Integrated Supply Chain Management. Source-grounded summary control covering authoritative framework structure + key obligations. See manifest + log for detailed mapping.
- Authoritative source-grounded evidence for WCOSAFE-4
- see authoritative source for detailed gap analysis
P1
Per WCO SAFE Framework of Standards to Secure and Facilitate Global Trade (2021): Pillar 1 Customs-to-Customs. Source-grounded summary control covering authoritative framework structure + key obligations. See manifest + log for detailed mapping.
- Authoritative source-grounded evidence for WCOSAFE-1
- see authoritative source for detailed gap analysis
P2
Per WCO SAFE Framework of Standards to Secure and Facilitate Global Trade (2021): Pillar 2 Customs-to-Business (AEO). Source-grounded summary control covering authoritative framework structure + key obligations. See manifest + log for detailed mapping.
- Authoritative source-grounded evidence for WCOSAFE-2
- see authoritative source for detailed gap analysis
P3
Per WCO SAFE Framework of Standards to Secure and Facilitate Global Trade (2021): Pillar 3 Customs-to-Other Government Agencies. Source-grounded summary control covering authoritative framework structure + key obligations. See manifest + log for detailed mapping.
- Authoritative source-grounded evidence for WCOSAFE-3
- see authoritative source for detailed gap analysis
WCO SAFE Pillar 1: Customs to Customs
Customs administrations apply integrated customs control procedures across the international supply chain using risk management techniques and advance electronic information to identify high risk consignments while facilitating low risk trade.
- Customs operating procedures incorporating SAFE principles
- Risk management system documentation
- Advance Cargo Information data flow diagrams
- Integrated control performance metrics
- Memorandum of understanding with origin and transit customs
- Risk rules not aligned with SAFE indicators
- Advance data not used for pre-arrival selection
- No measurement of integrated control effectiveness
- Origin customs cooperation informal only
Customs administrations have legal authority to inspect cargo and conveyances at any point in the international supply chain and to require advance information to facilitate risk assessment, including authority to act on requests from other customs administrations.
- Customs law granting inspection authority
- Inspection procedure manuals
- Records of inspections conducted on behalf of foreign customs
- Bilateral or multilateral assistance agreements
- Inspection outcome reporting templates
- Authority does not extend to transhipment cargo
- Foreign requests not tracked
- No legal basis for non intrusive inspection in some zones
- Inspection results not shared back
Customs administrations deploy modern non intrusive inspection technology including X-ray, gamma ray, radiation detection, and seal verification equipment at high risk ports, airports, and land borders to enable rapid screening without disrupting flow.
- NII equipment inventory by border post
- Equipment calibration and maintenance logs
- Operator training and certification records
- Throughput statistics (containers scanned per hour)
- Image library and second review procedures
- Equipment downtime not tracked
- Operators not recertified annually
- No procedure for image library retention
- Land border posts under-equipped versus seaports
Customs establish a documented risk management system to identify potentially high risk shipments using automated profiling, intelligence integration, and selectivity criteria, with regular evaluation of rule effectiveness and false positive rates.
- Risk management framework document
- Selectivity rule library with versioning
- Hit rate and false positive analytics
- Intelligence integration procedures
- Risk committee meeting minutes
- Rules not retired when outdated
- No hit rate measurement
- Intelligence units siloed from risk teams
- Selectivity bypassed manually without log
Require advance electronic submission of cargo information from carriers, importers, exporters, and brokers prior to loading or arrival, using WCO Data Model elements, with defined timing thresholds per transport mode (e.g. 24 hours pre-loading for maritime).
- Advance cargo information regulations with timing per mode
- WCO Data Model mapping documentation
- Compliance dashboard for filing timeliness
- Penalty regime for late or inaccurate filing
- Data quality feedback loop to filers
- Air and road modes not covered
- Data elements deviate from WCO Data Model
- Late filings not penalised
- Filer education limited
Customs administrations engage in joint targeting using shared selectivity criteria, communicate targeting results between origin, transit, and destination customs, and conduct joint operations against identified high risk consignments.
- Joint targeting protocols with partner administrations
- Communication channel records (CEN, RILO, secure email)
- Joint operation after action reports
- Targeting effectiveness metrics
- Personnel exchange or liaison officer records
- Joint targeting limited to one mode
- No metrics on joint operation seizures
- RILO connectivity inconsistent
- Liaison officer positions vacant
Customs administrations maintain statistical reports on performance measures including clearance times, inspection rates, hit rates, seizures, and operator compliance, published periodically to demonstrate facilitation and security balance.
- Time Release Study reports
- Annual customs performance report
- Inspection and seizure statistics by mode and commodity
- Compliance level indicators
- Stakeholder engagement on performance results
- No Time Release Study performed in 3+ years
- Statistics not segmented by mode
- Performance not published publicly
- Stakeholder feedback not collected
Customs administrations conduct security assessments of borders, ports, airports, and inland clearance points, identify vulnerabilities, and implement remediation including infrastructure, technology, and procedural improvements.
- Border security assessment reports
- Vulnerability register with remediation plans
- Capital investment plan for border infrastructure
- Pre and post remediation effectiveness measurement
- Cross agency border security committee minutes
- Assessments rely on single agency view
- Vulnerabilities identified but not budgeted for
- Remediation effectiveness not measured
- Inland ports excluded
Customs administrations implement integrity programmes including code of conduct, anti corruption training, internal affairs investigations, rotation of high risk positions, financial disclosure, and confidential reporting channels.
- Customs code of conduct signed by all staff
- Anti corruption training completion records
- Internal affairs case statistics
- Job rotation policy for high risk posts
- Confidential reporting channel statistics and investigations
- Code not refreshed
- Rotation policy not enforced
- Reporting channels not anonymous
- Internal affairs underfunded
Customs administrations conduct outbound security inspections of high risk cargo at the request of the importing country, with documented procedures, equipment, and reporting back to the requesting administration.
- Outbound inspection procedures
- Log of requests received from foreign customs and outcomes
- Inspection result reporting templates
- Equipment availability at outbound ports
- Service level for response to requests
- No formal procedure
- Requests handled ad hoc
- Outcomes not shared back
- Service level not measured
WCO SAFE Pillar 2: Customs to Business (AEO)
Establish national AEO programme open to all supply chain actors meeting defined customs compliance, financial solvency, records management, and security criteria, with benefits proportionate to compliance and security investments.
- Published AEO regulation
- Application and validation procedures
- Benefits catalogue
- Programme statistics (applications, certifications, by operator type)
- Industry consultation records during programme design
- Benefits not visible to operators
- SME participation low
- Validation backlog
- Programme criteria not aligned with SAFE
Operate a documented authorisation process including application receipt, desk review, on site validation, decision, certificate issuance, periodic re-validation, and suspension or revocation procedures, with defined timeframes.
- End to end process map
- Application processing KPI report
- Validator training and certification records
- Validation checklists
- Re-validation cycle calendar
- Validation timeframes exceeded
- Validators not trained consistently
- No published service standards
- Re-validation slippage
Negotiate and implement mutual recognition arrangements with other customs administrations to extend AEO benefits across borders, including joint validation criteria comparison, benefits offered, data exchange, and dispute resolution.
- List of signed MRAs
- MRA action plans for each partner
- Joint validation reports
- Data exchange specifications
- MRA review meeting minutes
- MRAs signed but not implemented
- Benefits not delivered to operators
- Data exchange not automated
- Disputes not resolved formally
WCO SAFE Pillar 3: Customs to Other Government Agencies
Customs cooperate with other government agencies including border security, immigration, health, agriculture, transport, and law enforcement through coordinated border management, single window, joint risk management, and shared intelligence.
- Inter agency MOUs
- Single window implementation roadmap and status
- Joint risk profiles with health and agriculture agencies
- Shared intelligence protocols
- Coordinated inspection statistics
- Single window partial, not all agencies onboard
- Joint risk profiling absent
- Intelligence sharing informal
- Duplicated inspections continue
Implement a single window environment allowing traders to submit standardised information once to a single entry point fulfilling regulatory requirements across customs, sanitary, phytosanitary, and other border agencies, with results communicated back through the same channel.
- Single window architecture documentation
- Participating agency list and integration status
- Data harmonisation mapping to WCO Data Model
- User adoption metrics
- Single window governance committee charter
- Critical agencies not connected
- Data harmonisation incomplete
- Manual workarounds persist
- No measurement of trader time savings
Develop joint risk profiles, share intelligence, and conduct coordinated inspections with other regulatory agencies to address risks spanning customs and other domains (e.g. counterfeit medicines, illicit wildlife, dual use goods).
- Joint risk profile documents
- Intelligence sharing agreements
- Coordinated inspection results
- Cross agency analyst exchange records
- Joint operation reports
- Profiles outdated
- Sharing one directional only
- No joint training
- Operational coordination weak at field level
WCO SAFE Pillar 4: Customs to Other Stakeholders
Customs engage with non government stakeholders including industry associations, academia, and consumers through consultation, public private partnerships, transparency initiatives, and joint capacity building to improve facilitation and security.
- Stakeholder consultation calendar
- Consultative committee charters and minutes
- Public consultation responses on draft regulations
- Customs website transparency content
- Industry feedback survey results
- Consultations symbolic without impact
- SME voices under-represented
- Website information outdated
- No feedback to consultation respondents
Maintain accessible and current information for traders including tariff schedules, procedures, contact points, decisions, advance rulings, and ports of clearance, published through customs website and other channels in commonly understood languages.
- Customs website content inventory and update log
- Advance ruling register (anonymised)
- Multilingual content coverage report
- Helpdesk contact response time
- Information accuracy audit
- Tariff updates lagging
- Advance rulings not publicly available
- English-only content limits SME access
- Helpdesk response slow
WCO SAFE: Implementation and Capacity Building
Customs administrations invest in capacity building for SAFE implementation including training, equipment, IT systems, and institutional reform, supported as needed by WCO capacity building programmes and donor cooperation.
- Capacity building strategy document
- Training plan with SAFE-aligned curricula
- WCO Mercator programme engagement records
- Donor coordination committee minutes
- Capacity self assessment results
- Strategy not funded
- Training one off without follow up
- Donor projects duplicative
- Capacity gains not retained after project end
Customs administrations monitor SAFE implementation progress through self assessment, peer review, and WCO monitoring tools, with regular reporting to senior management and the WCO, identifying gaps and remediation actions.
- SAFE self assessment results
- Peer review participation records
- Annual SAFE implementation status report
- Gap remediation roadmap
- WCO Council reporting submissions
- Self assessment dated
- Peer review not requested
- No remediation roadmap for identified gaps
- Senior management not engaged in monitoring
Assembled from the framework’s own control set, so this list is regenerated rather than written and stays current as the graph does.