The AEO site audit is the moment that separates a well-prepared application from one that looks good on paper but falls apart under real scrutiny. For AEO-T2, T3, and LO applicants, it is one of the most critical stages in the certification process — and the one that most businesses underestimate until it is too late.
For AEO-T2 and AEO-LO applicants, customs officials generally conduct a physical on-site verification as part of the certification process to validate security protocols and operational controls. For T3 applicants, the verification process additionally reviews supply-chain partner compliance, AEO-equivalent partner status, and operational changes since the previous T2 assessment. A failed inspection does not just delay your certification — it triggers a re-inspection scheduling cycle that can add months to your timeline.
This guide gives you a complete, practical preparation framework — what CBIC inspectors actually check, how to prepare each area, what common failures look like, and how to conduct your own mock inspection before the real one arrives.
First: Understand What the AEO Site Audit Is — and Is Not
The AEO site audit is not a surprise raid or an adversarial investigation. It is a verification visit — CBIC inspectors come to confirm that what you declared in your application annexures is physically real and operationally true at your premises.
For T2 and T3, CBIC conducts on-site verification of your physical security systems, operational controls, IT safeguards, employee access, and cargo handling procedures.
The critical point: every answer you gave in Annexure B (the Security Questionnaire) will be cross-referenced against what inspectors see on the day. If your Annexure B says “CCTV cameras cover all cargo entry and exit points” — inspectors will walk to those points and check. If your Annexure B says “visitor register is maintained at reception” — inspectors will ask to see it. If your SOP says “cargo is sealed immediately after packing” — they may ask your warehouse manager to walk them through the actual procedure.
The businesses that pass with minimal findings are the ones where the physical reality matches the documented position precisely. The businesses that struggle are the ones where the documentation was aspirational rather than accurate.
What CBIC Inspectors Actually Assess — The Five Security Dimensions
A strong security-management system covering physical, IT, Cargo, Transport Conveyance, and HR security is a core AEO requirement. CBIC inspectors assess your facility across all five dimensions:
| Security Dimension | What Inspectors Check | Key Evidence Required |
| Physical Security | Perimeter, entry/exit points, access control, restricted areas, security personnel | Physical barriers, locks, security desk logs, restricted area signage |
| CCTV and Surveillance | Camera coverage of all key areas — cargo zones, entry/exit, loading/unloading | Live footage demonstration, recording storage duration, maintenance records |
| Cargo Security | Cargo sealing procedures, counting records, tamper-evident packaging, inspection of inbound cargo | Cargo sealing logs, counting records, discrepancy register |
| IT Security | System access controls, password policies, authorised user lists, data backup | IT policy documents, access control matrix, backup verification |
| HR Security | Employee background verification, ID system, access levels by role, exit procedures | Background check records, employee ID register, termination/exit checklist |
| Transport/Conveyance | Vehicle access logs, driver verification, vehicle security checks before loading | Vehicle entry register, driver ID verification records, vehicle inspection checklist |
In addition to security, inspectors also review:
- Customs Compliance Records — your Shipping Bill / Bill of Entry history, duty payment records, and any SCN history
- Financial Records — confirming positive net worth, financial solvency, and clean tax compliance
- Documentation Systems — SOPs, process maps, records management, and whether procedures are actually followed
Phase 1: Pre-Audit Preparation (6–8 Weeks Before)
Step 1: Conduct an Internal Annexure B Walkthrough
Pull out your submitted Annexure B — the Security Questionnaire — and go through it question by question. For every answer you gave, ask: Can I physically demonstrate this is true right now?
Create a simple three-column tracker:
| Annexure B Question | Your Declared Answer | Current Reality |
| “Are all cargo entry/exit points covered by CCTV?” | “Yes — 4 cameras” | Check: are all 4 operational? Is footage being recorded? |
| “Is a visitor register maintained?” | “Yes — at reception” | Check: is it current? Is every visitor signed in? |
| “Is cargo counted and recorded on receipt?” | “Yes — cargo counting SOP in place” | Check: is the SOP actually being followed? Are records maintained? |
Every gap between declared and actual is a potential finding. Fix gaps now — before the inspection notice arrives.
Step 2: Physical Security Infrastructure Check
Walk your entire facility with fresh eyes — pretending you are the CBIC inspector. Check:
- Perimeter: Is your perimeter physically secured? Are there any unmanned or unsecured entry points?
- CCTV: Are all cameras operational? Is recording active? How many days of footage is stored? Can you demonstrate playback?
- Restricted areas: Are restricted areas visibly demarcated with signage? Are access controls enforced — not just documented?
- Cargo area: Is the cargo handling area physically segregated from office and visitor areas?
- Loading/unloading bay: Is there a documented procedure for checking vehicles before loading/unloading? Is it being followed?
Step 3: Document Accessibility Audit
Keep digital and physical copies ready for verification during the customs audit. Inspectors may ask to see any document referenced in your annexures — and they expect to see it within minutes, not hours. Organise your documentation for instant retrieval:
- All SOPs — printed, signed, version-numbered, accessible in the relevant area (not just on a server)
- Visitor register — current, at reception, with no missing entries
- Cargo counting records — current batch records accessible
- Vehicle entry register — current, at the gate
- Employee ID register — current list of all staff with access levels
- Background verification records — for all current employees
- CCTV maintenance records — last service date, any issues resolved
- IT security policy — signed, current, accessible
- Financial statements — last 2–3 years, CA-certified, accessible
Phase 2: Mock Inspection (2–3 Weeks Before)
A mock inspection is the single most effective preparation tool available — and the one most businesses skip. Do not skip it.
How to Conduct a Mock Inspection
Assign one person to play the role of CBIC inspector — ideally someone who was not involved in writing your annexures, so they see your facility with fresh eyes. Give them your Annexure B responses and ask them to verify each point physically.
Walk through these areas in sequence:
Area 1: Main Entry and Reception
- Is there a clear visitor registration process? Demonstrate it — ask the mock inspector to arrive as a visitor and see what happens
- Is ID verification done before entry? Is there a record?
- Is the visitor register current — no blank days, no incomplete entries?
- Are security personnel briefed on their role and what to do with unannounced visitors?
Area 2: Cargo Handling and Warehouse
- Walk through an actual cargo receipt process — is the SOP being followed step by step?
- Are cargo counting records current and accessible?
- Is inbound cargo inspected for tampering before acceptance?
- Is packaging sealed immediately after packing — not later?
- Is there a discrepancy register? Has it been used and signed when needed?
- Are cargo areas physically segregated from office and public areas?
Area 3: Loading and Unloading Bay
- Is there a vehicle entry register at the gate? Is it current?
- Are drivers required to show ID before entry? Is this actually happening?
- Are vehicles checked for security before loading? Is there a procedure? Is it followed?
- Are seals used for loaded vehicles? Are seal numbers recorded?
Area 4: CCTV Control Room / Monitoring Setup
- Turn on the monitor and show all camera feeds — are all cameras live?
- Demonstrate playback of footage from 3 days ago — can you retrieve it within 2 minutes?
- How many days of footage are stored? Does this match what you declared in Annexure B?
- Are there any blind spots — areas not covered by any camera?
Area 5: IT / Server Room
- Is access to the server room restricted? Who has keys/access?
- Is there a documented list of authorised system users?
- Can you demonstrate that password policies are in place?
- When was the last data backup? Can you show the backup log?
Area 6: HR / People
- Are employee ID cards being worn? Is this consistent — not just on audit day?
- Are background verification records available for all current employees?
- Is there a documented procedure for access revocation when an employee leaves?
- Are staff who handle cargo briefed on security responsibilities?
Document every gap found during the mock inspection. Fix each one before the real audit. A gap found during mock inspection costs you nothing. A gap found by CBIC inspectors costs you an adverse finding and potentially a re-inspection.
Phase 3: Staff Briefing (1 Week Before)
CBIC inspectors do not only verify physical infrastructure — they also speak to your staff. Security guards, warehouse supervisors, accounts team members, and receptionists may all be asked questions. An uninformed or flustered response from a staff member creates doubt — even when your documentation is perfect.
Who to Brief and What to Tell Them
| Staff Role | Key Points to Brief |
| Security Guard / Reception | Visitor registration procedure, ID verification requirement, what to do if an unannounced visitor arrives, who to call if unsure |
| Warehouse Supervisor | Cargo counting and recording procedure, cargo sealing procedure, discrepancy reporting process, restricted area rules |
| Gate / Vehicle Manager | Vehicle entry register procedure, driver ID verification, vehicle pre-loading check procedure |
| IT Administrator | Access control policy, user list, backup procedure, server room access restriction |
| HR Manager | Background verification process, employee ID system, exit/access revocation procedure |
| Accounts / Finance | Location of financial statements, duty payment records, compliance record documents |
Key message for all staff: Answer questions honestly and directly. Do not guess or over-explain. If you do not know the answer, say “I will check with [name]” and refer the inspector to the appropriate person. Inspectors are experienced — evasive or inconsistent answers attract more scrutiny, not less.
Phase 4: Day of Inspection — What to Expect
Before Inspectors Arrive
- Ensure all document folders are organised and accessible — by category, not scattered
- CCTV system is operational and able to demonstrate live feeds and playback
- All registers are current as of today — no catching up on visitor or vehicle entries
- All SOPs are physically present in their designated locations — not just on a server
- Notify all key staff that the inspection is happening today
- Designate one senior person as the primary point of contact for the inspection team — someone who knows the facility, the documentation, and the annexures well
During the Inspection
- Greet inspectors professionally and cooperatively
- Accompany inspectors throughout — do not leave them unescorted
- Answer questions directly and honestly — do not over-elaborate or provide unsolicited information
- When asked for a document, retrieve it promptly — do not rummage or search for extended periods
- If an inspector identifies a minor issue, acknowledge it professionally and offer to explain corrective action — do not become defensive
- Keep a note of every question asked and every document requested — this forms your reference if a finding is later disputed
After the Inspection
- If inspectors raise queries or flag deficiencies, respond completely and promptly — partial responses lead to repeat queries
- If a re-inspection is required for specific areas, address identified gaps immediately and document corrective action before the follow-up visit
- If the inspection is satisfactory, monitor your CBIC AEO portal dashboard for the next steps toward certificate issuance
Common AEO Site Audit Failures — And How to Prevent Them
| Common Failure | Why It Happens | Prevention |
| CCTV camera not recording or covering declared areas | Camera installed but system not maintained; wrong coverage assumed | Test every camera 2 weeks before inspection — live feed and playback both |
| Visitor register has blank days or missing entries | Register started for the application but not maintained consistently | Visitor register must be a daily operational habit — not started for audits |
| SOP says one procedure but staff does another | SOPs written for compliance but not actually communicated to operations staff | Train all relevant staff on SOPs; verify actual practice matches documented procedure |
| Cargo counting records not current or missing | Records maintained periodically, not per-consignment | Every cargo receipt must have a counting record — build this into operations, not compliance |
| Background verification records missing for some employees | Process was set up but not applied to all hires — especially older employees | Complete background verification for all current employees before inspection — not just new hires |
| Staff cannot answer basic security procedure questions | Security briefing not done or done only at management level | Brief all relevant operational staff — security guard, warehouse supervisor, gate manager — specifically |
| Documents cannot be retrieved quickly during inspection | Documents exist but are scattered across folders, servers, and departments | Prepare a single organised audit folder with all annexure-referenced documents indexed and accessible |
AEO T3 Inspection — Additional Requirements
For AEO-T3 applicants, the site inspection has an additional dimension: business partner compliance verification. T3 requires that your key logistics and customs partners hold AEO-LO or equivalent certification. Inspectors may specifically review:
- Annexure F — Business Partner Compliance documentation
- Evidence that your customs broker holds AEO-LO status
- Evidence that your freight forwarder or 3PL holds AEO-LO status
- Any international partner AEO-equivalent documentation
- Your internal process for vetting and monitoring partner AEO status
For T3 applicants whose T2 status has been held for more than 2 years without major operational changes, the physical verification may be limited to Annexure F review and specific change areas — a full T2-level facility inspection may not be repeated. However, this depends on the inspecting officer’s assessment and should not be assumed.
Post-Inspection: Responding to Findings
If CBIC inspectors raise findings or deficiencies post-inspection, your response strategy determines how quickly you move to certification:
- Minor findings — a written response with evidence of corrective action is typically sufficient. Respond within the timeframe specified by the inspecting officer
- Major findings — may require a follow-up visit to verify corrective action. Address the root cause — not just the symptom — and document what was fixed, when, and by whom
- Pattern findings — if multiple related gaps are found (e.g., several registers not current), inspectors may view this as a systemic issue with your compliance discipline. Address all related gaps comprehensively, not just the ones specifically flagged
If all checks are satisfactory, the AEO certificate is granted. The gap between “satisfactory” and “satisfactory with minor observations” versus “requires re-inspection” is almost always determined by the quality of your pre-audit preparation.
The Mock Inspection Checklist — Quick Reference
Before your CBIC site audit, verify each of the following:
- All Annexure B answers verified against physical reality — no gaps
- All CCTV cameras operational — live feed and playback demonstrated
- Visitor register current — no blank days, all entries complete
- Vehicle entry register current and at gate
- Cargo counting records current — per consignment
- All SOPs physically present in relevant areas — printed, signed, current
- Background verification records available for all current employees
- Employee ID register current — includes all staff
- IT access control list current — all authorised users documented
- Data backup records accessible and current
- Financial statements organised and accessible
- All key staff briefed — security, warehouse, gate, IT, HR, accounts
- One senior person designated as primary audit contact
- Audit folder prepared — all documents indexed and retrievable within 2 minutes
- For T3: Annexure F documents and partner AEO certificates verified and accessible
The Bottom Line
The AEO site audit is not a test of your documentation. It is a test of whether your operations are actually as secure and compliant as your documentation says they are. Businesses that pass on the first visit are the ones where there is no gap between the two.
The preparation framework in this guide — internal walkthrough, physical security check, document accessibility audit, mock inspection, and staff briefing — is the same framework our consultants use with clients before every AEO-T2, T3, and LO site visit. It works because it addresses the real failure points, not just the obvious ones.
Start your preparation 6–8 weeks before your expected inspection window. Do not wait for the inspection notice — by then, you have days, not weeks. And conduct a proper mock inspection — it is the single highest-value preparation activity available to you.
Need Help Preparing for Your AEO Site Audit?
We provide complete AEO site audit preparation support — including mock inspections, Annexure B gap analysis, SOP preparation, staff briefing, and on-site support during the actual CBIC audit:
- Annexure B cross-verification against your physical facility
- Physical security gap analysis and remediation guidance
- Complete mock inspection against CBIC’s T2/T3/LO checklist
- SOP preparation and review — ensuring operational reality matches documentation
- Staff briefing sessions for all key operational teams
- Document organisation and audit folder preparation
- Post-inspection finding response support
