6 USC 971 - CTPAT program management

(a) In general 
The Secretary, acting through the Commissioner, shall establish sufficient internal quality controls and record management to support the management systems of CTPAT. In managing the program, the Secretary shall ensure that the program includes:
(1) Strategic plan 
A 5-year plan to identify outcome-based goals and performance measures of the program.
(2) Annual plan 
An annual plan for each fiscal year designed to match available resources to the projected workload.
(3) Standardized work program 
A standardized work program to be used by agency personnel to carry out the certifications, validations, and revalidations of participants. The Secretary shall keep records and monitor staff hours associated with the completion of each such review.
(b) Documentation of reviews 
The Secretary, acting through the Commissioner, shall maintain a record management system to document determinations on the reviews of each CTPAT participant, including certifications, validations, and revalidations.
(c) Confidential information safeguards 
In consultation with the Commercial Operations Advisory Committee, the Secretary, acting through the Commissioner, shall develop and implement procedures to ensure the protection of confidential data collected, stored, or shared with government agencies or as part of the application, certification, validation, and revalidation processes.
(d) Resource management staffing plan 
The Secretary, acting through the Commissioner, shall
(1) develop a staffing plan to recruit and train staff (including a formalized training program) to meet the objectives identified in the strategic plan of the CTPAT program; and
(2) provide cross-training in postincident trade resumption for personnel who administer the CTPAT program.
(e) Report to Congress 
In connection with the Presidents annual budget submission for the Department, the Secretary shall report to the appropriate congressional committees on the progress made by the Commissioner to certify, validate, and revalidate CTPAT participants. Such report shall be due on the same date that the Presidents budget is submitted to the Congress.