Port and International Supply Chain Security

The SAFE Port Act side of Title 6 is broader than guards, gates, and waterfront patrols. It links seaport exercises, cargo screening, radiation detection, truck-driver vetting, container strategy, trusted-shipper programs like C-TPAT, and international cargo scanning into one security architecture. Read together, 6 U.S.C. §§ 912-913, 921-926, 941-945, 961-973, and 981-985 explain how DHS tries to protect the port not only as a place, but as a node inside a global container system. For the customs and import procedures that complement port security, see customs import procedures and Customs and Border Protection. For security of land-based freight, see surface freight transportation security.

Current Law (2026)

Key Numbers

• U.S. container import volume: approximately 50+ million TEUs (twenty-foot equivalent units) enter U.S. ports annually; the Port of Los Angeles/Long Beach complex alone handles approximately 11 million TEUs/year, making it the largest container gateway in the Western Hemisphere
• Physical inspection rate: CBP physically inspects approximately 3-4% of the ~11 million maritime containers entering the U.S. each year; the remaining 96-97% are cleared based on risk scoring from the Automated Targeting System, data analysis, and trusted-shipper status
• C-TPAT scale: approximately 11,000+ certified members as of 2025 — importers, customs brokers, carriers, freight forwarders, and foreign manufacturers — who collectively account for approximately 50% of U.S. import value; C-TPAT members receive fewer examinations and priority treatment at ports
• 100% scanning mandate: the SAFE Port Act required 100% scanning of U.S.-bound containers at foreign ports by 2012; as of 2026, that goal has never been achieved; CBP currently scans approximately 3-5% of containers at foreign ports through the Container Security Initiative; Congress has repeatedly waived the deadline
• Economic dependence: approximately 90% of U.S. goods imports by volume arrive by sea; industry estimates suggest a 10-day closure of the 10 largest U.S. container ports would cost approximately $1.3 billion/day in economic disruption
• Chinese crane concentration: ship-to-shore cranes made by ZPMC (a Chinese state-owned manufacturer) handle approximately 80% of U.S. container port crane capacity — flagged by DHS and DOD in 2023-2024 as a cybersecurity and national security concern

What Connects These Statutes

They are built around containers and trade flow. The law assumes that a security failure can originate overseas, in a container manifest, in a trucking access point, or in a foreign port long before cargo reaches a U.S. terminal.

They combine hard security with facilitation. The federal government wants cargo screened and risk-ranked, but it also wants secure cargo to move faster. That is the core bargain behind C-TPAT and related supply-chain programs.

They extend beyond domestic ports. Several provisions explicitly operate upstream in foreign ports or international cargo systems, reflecting the idea that waiting until a container arrives in the United States is too late.

Major Components

Port exercises and facility preparedness

6 U.S.C. §§ 912-913 covers the Port Security Exercise Program and facility-exercise requirements. These sections are about operational readiness: high-risk facilities must run exercises, DHS must capture lessons learned, and port plans must be tested against terrorism, disaster, and emergency scenarios.

Port operations and cargo inspection tools

6 U.S.C. §§ 921-926 addresses domestic radiation detection and imaging, random searches of containers, threat screening for port truck drivers, and maritime-domain-awareness support. This cluster matters because it shows Congress trying to secure the port's operational chokepoints, not just its perimeter.

International supply-chain strategy

6 U.S.C. §§ 941-945 requires a strategic plan for international supply-chain security, post-incident trade-resumption planning, use of the Automated Targeting System, container-security standards, and the Container Security Initiative. The common theme is that cargo security and trade continuity have to be managed together.

C-TPAT trusted-shipper framework

6 U.S.C. §§ 961-973 codifies C-TPAT, the voluntary government-private sector program that gives security benefits and trade-facilitation benefits to participants meeting higher standards. The statute addresses eligibility, minimum requirements, validation, tier structure, noncompliance consequences, revalidation, management, staffing, and appropriations. C-TPAT is one of the clearest examples of federal security policy operating through incentives and partnership rather than only mandates.

Scanning and miscellaneous supply-chain controls

6 U.S.C. §§ 981-985 covers integrated scanning pilots, cargo-container screening and scanning, inspection technology and training, and information sharing about supply-chain security cooperation. These sections reflect congressional interest in both the technical and diplomatic sides of container security.

Administration, liaison, and maritime-security R&D

6 U.S.C. §§ 1001-1003 supplies the small administration subchapter of the SAFE Port Act. These sections cover a State Department liaison office designation, a Homeland Security Science and Technology Advisory Committee, and research, development, test, and evaluation efforts for maritime and cargo security. They matter because they show Congress treating port and supply-chain security as not only an operational and inspection problem, but also a diplomatic, advisory, and technology-development problem.

How It Works

The framework concentrates on risk-sorted targeting rather than physical inspection of every container — a practical necessity when nearly 50,000 cargo containers enter U.S. ports daily. The Automated Targeting System and Container Security Initiative under §§ 941-945 represent the advance-screening layer, with cargo security concerns ideally identified before containers reach U.S. shores. C-TPAT under §§ 961-973 is the incentive layer: trusted shippers who meet DHS security standards and submit to validation receive expedited entry and trade-facilitation benefits, creating private-sector motivation for supply chain security investment rather than relying purely on mandates. Post-incident trade resumption planning under §§ 941-945 reflects Congress's recognition that a port shutdown following a security incident is itself an economic damage — in some scenarios exceeding the direct costs of the incident — and that keeping trade flowing after an event requires pre-existing plans rather than improvisation. Foreign cooperation is embedded throughout: the Container Security Initiative stations DHS personnel at foreign ports to screen high-risk cargo before it is loaded for U.S. destinations, making supply chain security a diplomatic and bilateral function as well as a domestic inspection program.

How It Affects You

State Variations

• the statutory framework is federal, but port authorities and local agencies vary widely in governance structure, resources, and operational capacity
• large container ports feel these requirements differently than smaller niche or bulk ports
• local infrastructure, labor arrangements, trucking patterns, and on-dock rail capacity can all shape how the federal framework works on the ground

Recent Developments

Chinese crane cybersecurity emerged as a concrete port-infrastructure security concern in 2023-2024. Ship-to-shore cranes manufactured by ZPMC (Zhenhua Port Machinery Company, a Chinese state-owned enterprise) handle approximately 80% of U.S. container port crane capacity. DHS and the Pentagon flagged the cranes' embedded software and communications equipment as potential intelligence-collection or sabotage vectors — capable of remotely monitoring cargo manifests, vessel movements, and port operations. The 2024 NDAA directed DHS and CBP to assess the risk and develop mitigation plans; some ports began physically isolating ZPMC crane control systems from broader port network infrastructure. Replacing the cranes with non-Chinese alternatives is a multi-year and multi-billion-dollar undertaking — this is the most concrete port-infrastructure cybersecurity issue on the active policy agenda.

The 100% foreign scanning mandate remains permanently unachieved. The SAFE Port Act's 2012 deadline for scanning all U.S.-bound containers at foreign ports has been waived every year since 2012. The practical barriers are formidable: the global container system handles approximately 800 million TEU-moves per year; equipping thousands of foreign terminals with radiation and imaging scanners, training operators, and managing the data flow is technically and diplomatically complex. CBP currently scans roughly 3-5% of U.S.-bound containers at foreign ports through the Container Security Initiative (which operates at 60+ foreign ports). The 2025 tariff escalation has added a complication: higher tariffs create incentives for origin misdeclaration (misclassifying goods to avoid duties), which is a CBP fraud problem that intersects with the security scanning system.

C-TPAT's 2024 pilot expanded to third-party logistics providers (3PLs). Prior to the pilot, 3PLs — which manage enormous import volumes without being classified as importers or carriers — couldn't formally join C-TPAT. This left a gap: a C-TPAT-certified importer using a non-certified 3PL was only partially covered by the trusted-supply-chain framework. The pilot is testing how 3PL security standards can be validated and what C-TPAT benefits 3PLs should receive. For the hundreds of large 3PLs that handle consolidated cargo for multiple importers, formal C-TPAT certification would significantly change their compliance obligations and competitive positioning.