An applicant seeking to participate in C–TPAT shall—
(2) conduct an assessment of its supply chain based upon security criteria established by the Secretary, acting through the Commissioner, including—
(3)
implement and maintain security measures and supply chain security practices meeting security criteria established by the Commissioner; and
(4)
meet all other requirements established by the Commissioner, in consultation with the Commercial Operations Advisory Committee.