How to Prepare for an AEO Site Audit by CBIC — Complete Preparation Guide
The AEO site audit is the moment that separates a well-prepared application from one that looks good on paper but falls apart under real scrutiny. For AEO-T2, T3, and LO applicants, it is one of the most critical stages in the certification process — and the one that most businesses underestimate until it is too late. For AEO-T2 and AEO-LO applicants, customs officials generally conduct a physical on-site verification as part of the certification process to validate security protocols and operational controls. For T3 applicants, the verification process additionally reviews supply-chain partner compliance, AEO-equivalent partner status, and operational changes since the previous T2 assessment. A failed inspection does not just delay your certification — it triggers a re-inspection scheduling cycle that can add months to your timeline. This guide gives you a complete, practical preparation framework — what CBIC inspectors actually check, how to prepare each area, what common failures look like, and how to conduct your own mock inspection before the real one arrives. First: Understand What the AEO Site Audit Is — and Is Not The AEO site audit is not a surprise raid or an adversarial investigation. It is a verification visit — CBIC inspectors come to confirm that what you declared in your application annexures is physically real and operationally true at your premises. For T2 and T3, CBIC conducts on-site verification of your physical security systems, operational controls, IT safeguards, employee access, and cargo handling procedures. The critical point: every answer you gave in Annexure B (the Security Questionnaire) will be cross-referenced against what inspectors see on the day. If your Annexure B says “CCTV cameras cover all cargo entry and exit points” — inspectors will walk to those points and check. If your Annexure B says “visitor register is maintained at reception” — inspectors will ask to see it. If your SOP says “cargo is sealed immediately after packing” — they may ask your warehouse manager to walk them through the actual procedure. The businesses that pass with minimal findings are the ones where the physical reality matches the documented position precisely. The businesses that struggle are the ones where the documentation was aspirational rather than accurate. What CBIC Inspectors Actually Assess — The Five Security Dimensions A strong security-management system covering physical, IT, Cargo, Transport Conveyance, and HR security is a core AEO requirement. CBIC inspectors assess your facility across all five dimensions: Security Dimension What Inspectors Check Key Evidence Required Physical Security Perimeter, entry/exit points, access control, restricted areas, security personnel Physical barriers, locks, security desk logs, restricted area signage CCTV and Surveillance Camera coverage of all key areas — cargo zones, entry/exit, loading/unloading Live footage demonstration, recording storage duration, maintenance records Cargo Security Cargo sealing procedures, counting records, tamper-evident packaging, inspection of inbound cargo Cargo sealing logs, counting records, discrepancy register IT Security System access controls, password policies, authorised user lists, data backup IT policy documents, access control matrix, backup verification HR Security Employee background verification, ID system, access levels by role, exit procedures Background check records, employee ID register, termination/exit checklist Transport/Conveyance Vehicle access logs, driver verification, vehicle security checks before loading Vehicle entry register, driver ID verification records, vehicle inspection checklist In addition to security, inspectors also review: Customs Compliance Records — your Shipping Bill / Bill of Entry history, duty payment records, and any SCN history Financial Records — confirming positive net worth, financial solvency, and clean tax compliance Documentation Systems — SOPs, process maps, records management, and whether procedures are actually followed Phase 1: Pre-Audit Preparation (6–8 Weeks Before) Step 1: Conduct an Internal Annexure B Walkthrough Pull out your submitted Annexure B — the Security Questionnaire — and go through it question by question. For every answer you gave, ask: Can I physically demonstrate this is true right now? Create a simple three-column tracker: Annexure B Question Your Declared Answer Current Reality “Are all cargo entry/exit points covered by CCTV?” “Yes — 4 cameras” Check: are all 4 operational? Is footage being recorded? “Is a visitor register maintained?” “Yes — at reception” Check: is it current? Is every visitor signed in? “Is cargo counted and recorded on receipt?” “Yes — cargo counting SOP in place” Check: is the SOP actually being followed? Are records maintained? Every gap between declared and actual is a potential finding. Fix gaps now — before the inspection notice arrives. Step 2: Physical Security Infrastructure Check Walk your entire facility with fresh eyes — pretending you are the CBIC inspector. Check: Perimeter: Is your perimeter physically secured? Are there any unmanned or unsecured entry points? CCTV: Are all cameras operational? Is recording active? How many days of footage is stored? Can you demonstrate playback? Restricted areas: Are restricted areas visibly demarcated with signage? Are access controls enforced — not just documented? Cargo area: Is the cargo handling area physically segregated from office and visitor areas? Loading/unloading bay: Is there a documented procedure for checking vehicles before loading/unloading? Is it being followed? Step 3: Document Accessibility Audit Keep digital and physical copies ready for verification during the customs audit. Inspectors may ask to see any document referenced in your annexures — and they expect to see it within minutes, not hours. Organise your documentation for instant retrieval: All SOPs — printed, signed, version-numbered, accessible in the relevant area (not just on a server) Visitor register — current, at reception, with no missing entries Cargo counting records — current batch records accessible Vehicle entry register — current, at the gate Employee ID register — current list of all staff with access levels Background verification records — for all current employees CCTV maintenance records — last service date, any issues resolved IT security policy — signed, current, accessible Financial statements — last 2–3 years, CA-certified, accessible Phase 2: Mock Inspection (2–3 Weeks Before) A mock inspection is the single most effective preparation tool available — and the one most businesses skip. Do not skip it. How to Conduct a Mock Inspection Assign one person









