Authorised Economic Operator (AEO) Programmes: every control, and what you already have

42 controls 206 frameworks share controls with it International (97+ countries) verified against its source document

Every control below is one this framework asks for. The right hand column counts how many other frameworks in our corpus carry the same control, which is the difference between doing this work once and doing it again for the next standard.

There is no implementation kit for this framework yet. The control list and the overlap above are free and complete.

What you already have

Frameworks whose controls overlap this one, most first. If you run any of them, the count is roughly what you have already evidenced.

If you run	Shared controls
NIST Cybersecurity Framework 2.0	16	measure it →
NIST SP 800-53 Rev 5	14	measure it →
SOC 2	12	measure it →
ISO 27001:2022	11	measure it →
ISO 27002:2022	11	measure it →
FedRAMP High	9	measure it →
FedRAMP Moderate	9	measure it →
NIST SP 800-53 Rev 5 LOW	9	measure it →
NIST SP 800-53 Rev 5 MODERATE	9	measure it →
NIST SP 800-53 Revision 5.1 HIGH	9	measure it →
Singapore Government Instruction Manual on ICT&SS Management (IM8)	8	measure it →
Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.1	7	measure it →

Every control

Code	Control	Also in
`AEO-10`	Education, Training and Awareness	19
`AEO-12`	Crisis Management and Incident Recovery	19
`AEO-13`	Measurement, Analyses and Improvement	16
`AEO-2`	Demonstrated Compliance with Customs Requirements	78
`AEO-3`	Satisfactory System for Management of Commercial Records	4
`AEO-4`	Financial Viability	75
`AEO-5`	Premises Security	31
`AEO-6`	Cargo Security	17
`AEO-7`	Trading Partner Security	17
`AEO-8`	Personnel Security	16
`AEO-9`	Information Exchange, Access and Confidentiality	6
`P1-S1`	Advance Electronic Information	80
`P1-S2`	Risk-Management Systems	56
`P1-S3`	Outbound Security Inspections	1
`P1-S4`	Targeting and Communication	26
`P2-S1`	Partnership	58
`P2-S2`	Security	2
`P2-S3`	Authorization	41
`P2-S4`	Technology	0
`P2-S5`	Communication	6
`P2-S6`	Facilitation	1
`P3-S1`	Mutual Cooperation	0
`P3-S2`	Harmonization of data filing requirements	0
`P3-S3`	Cooperative Arrangements/Procedures	32
`SAFE-AEO-D`	Consultation, Co-operation and Communication	5
`SAFE-AEO-H`	Conveyance Security	2
`SAFE-P1-S1`	Integrated Supply Chain Management	0
`SAFE-P1-S10`	Employee Integrity	0
`SAFE-P1-S2`	Cargo Inspection Authority	0
`SAFE-P1-S3`	Modern Technology in Inspection Equipment	0
`SAFE-P1-S5`	Selectivity, profiling and targeting	0
`SAFE-P1-S8`	Performance Measures	0
`SAFE-P1-S9`	Security Assessments	0
`SAFE-P3-S10`	Harmonization of cross-border control measures	0
`SAFE-P3-S11`	Establishment of Mutual Cooperation among international bodies	0
`SAFE-P3-S12`	Development of cooperative arrangements or protocols with international bodies	0
`SAFE-P3-S3`	Alignment of security programmes	0
`SAFE-P3-S4`	Harmonization of national control measures	0
`SAFE-P3-S5`	Development of continuity and resumptions measures	0
`SAFE-P3-S7`	Mutual Cooperation between governments	0
`SAFE-P3-S8`	Development of Cooperative Arrangements or Protocols across borders	0
`SAFE-P3-S9`	Harmonization of security programmes across governments	0

Tell me when Authorised Economic Operator (AEO) Programmes files something new

One email when a public company newly discloses something this framework governs, naming the company and what our corpus says it puts in scope. Nothing else, and one click to stop.

What an auditor will ask you to produce

The artefacts named on the failure modes this framework speaks to.

Customer agreement clauses
Processing instructions log
Use restriction policy
Audit trail
QA checklist
Reviewer signoff
Pre-employment screening records
CUI protection on personnel transfer/termination
Screening for sensitive roles
Onboarding/offboarding access controls

How programmes fail on this

Failure modes named by this framework and others. Each opens the full record.

No audit trail named by 6 frameworks
No screening named by 5 frameworks
Recovery untested named by 5 frameworks
No risk assessment named by 4 frameworks
Plan never exercised named by 3 frameworks
Benefits not tracked named by 3 frameworks

What this page is

A control-level reference for Authorised Economic Operator (AEO) Programmes, drawn from our framework corpus. Control codes and titles are references to the standard, not reproductions of it. The overlap counts and the auditor artefacts are our own work and are the part you will not find elsewhere.

Measure this against what you already run · All frameworks · Today's edition