EN 1090 vs C-TPAT
EN 1090
European standard for structural steel/aluminium execution and CE marking
C-TPAT
Voluntary U.S. program for supply chain security partnership
Quick Verdict
EN 1090 mandates CE marking for EU structural steel/aluminium via FPC certification, ensuring execution quality. C-TPAT voluntarily secures U.S. supply chains against terrorism for faster trade. Fabricators need EN 1090 for market access; traders adopt C-TPAT for efficiency.
EN 1090
EN 1090 Execution of steel and aluminium structures
Key Features
- Mandates CE marking via certified Factory Production Control
- Risk-based Execution Classes (EXC1-4) scaling requirements
- Requires welding quality per ISO 3834 standards
- Ensures full material and process traceability
- Demands notified body initial audits and surveillance
C-TPAT
Customs-Trade Partnership Against Terrorism (C-TPAT)
Key Features
- Voluntary CBP partnership securing supply chains
- Role-specific Minimum Security Criteria (MSC)
- Risk-based validations and tiered benefits
- Business partner vetting and monitoring
- Mutual Recognition Agreements for global trade
Detailed Analysis
A comprehensive look at the specific requirements, scope, and impact of each standard.
EN 1090 Details
What It Is
EN 1090 is a harmonized European standard family for execution of steel (EN 1090-2) and aluminium (EN 1090-3) structures, with EN 1090-1 defining conformity assessment. It enables CE marking under CPR for load-bearing components in construction works. Primary purpose: ensure controlled fabrication, assembly and performance declaration via risk-based approach using Execution Classes (EXC1-4).
Key Components
- **Factory Production Control (FPC)documented system for traceability, inspection, welding.
- Welding management aligned to ISO 3834.
- Consequence/Service/Production categories matrix for EXC assignment.
- Notified Body certification of FPC with ongoing surveillance.
Why Organizations Use It
Mandatory for EU market access; reduces liability, rework via disciplined processes. Builds trust, enables high-risk projects (EXC3/4), competitive edge in tenders.
Implementation Overview
Phased: gap analysis, FPC build, personnel qualification, NB audits. Applies to fabricators EU-wide; 6-12 months typical, certified by notified bodies like TÜV SÜD.
C-TPAT Details
What It Is
C-TPAT (Customs-Trade Partnership Against Terrorism) is a voluntary public-private partnership framework administered by U.S. Customs and Border Protection (CBP). Its primary purpose is to secure international supply chains against terrorism and crime while facilitating legitimate trade through risk-based security measures.
Key Components
- 12 Minimum Security Criteria (MSC) domains: risk assessment, business partners, cybersecurity, conveyance/seal security, physical access, personnel security, procedural security, agricultural security, training, and more.
- Role-specific tailoring for importers, exporters, carriers, brokers, etc.
- 2021 Best Practices Framework for exceeding MSCs with verifiable practices.
- Compliance via security profile, validations, and continuous improvement.
Why Organizations Use It
- Trade facilitation: reduced inspections, FAST lanes, priority processing.
- Risk mitigation: enhanced supply chain resilience.
- Competitive edge: trusted trader status, mutual recognition agreements.
- No legal mandate but strategic for high-volume importers/exporters.
Implementation Overview
- Phased: gap analysis, remediation, profile submission, CBP validation.
- Cross-functional teams; 6-12 months typical.
- Applies globally to trade entities; validations required for full benefits.
Key Differences
| Aspect | EN 1090 | C-TPAT |
|---|---|---|
| Scope | Execution and conformity of structural steel/aluminium | International supply chain security against terrorism |
| Industry | Construction, steel/aluminium fabrication (EU/EEA) | Trade, logistics, importers/exporters (U.S.-focused) |
| Nature | Harmonized EU standard, mandatory CE marking | Voluntary U.S. CBP partnership program |
| Testing | FPC certification, notified body audits/surveillance | Risk-based CBP validations, internal self-assessments |
| Penalties | Market exclusion, legal liability without CE mark | Benefit suspension, no direct legal penalties |
Scope
Industry
Nature
Testing
Penalties
Frequently Asked Questions
Common questions about EN 1090 and C-TPAT
EN 1090 FAQ
C-TPAT FAQ
You Might also be Interested in These Articles...

Beyond Reactive: Transforming Compliance into Real-Time Threat Prevention
Discover how modern compliance monitoring tools leverage continuous, real-time oversight and automated alerts to shift organizations from reactive problem-solving to proactive threat detection and prevention, safeguarding against emerging risks before they escalate.

CMMC Cost Calculator: Realistic Budgets for Levels 1-3, C3PAO Fees, and ROI for Small DIB Suppliers
Calculate realistic CMMC costs for Levels 1-3: self-assessments, C3PAO fees, tooling, remediation & ROI. Interactive tool for small DIB suppliers. Get benchmark

Using CIS Controls v8.1 as a ‘Compliance On-Ramp’: Map One Security Program to NIST CSF, ISO 27001, PCI DSS, and NIS2
Use CIS Controls v8.1 as your compliance on-ramp. Map one security program to NIST CSF, ISO 27001, PCI DSS, and NIS2 without duplicating work via practical mapp
Run Maturity Assessments with GRADUM
Transform your compliance journey with our AI-powered assessment platform
Assess your organization's maturity across multiple standards and regulations including ISO 27001, DORA, NIS2, NIST, GDPR, and hundreds more. Get actionable insights and track your progress with collaborative, AI-powered evaluations.
Explore More Comparisons
See how EN 1090 and C-TPAT compare against other standards