Final, January 13, 2010General Merchandise and ApparelSupply Chain Security RequirementsSupplier Responsibilities and ExpectationsIntroductionTo meet evolving global security needs, Walmart embraces voluntary governmental and industry supply chain security (SCS) programs. We will continue to improve upon our ability to recognize, mitigate and manage threats at all points of vulnerability within the global supply chain. Walmart expects business partners to devote the necessary attention to security matters during all stages of manufacturing and transportation.It is Walmart’s objective that all eligible business partners participate in our risk based Supply Chain Security program. Business partners not eligible for C-TPAT, or other Authorized Economic Operator (AEO) programs, are required to meet the security standards as stated in the Walmart Direct Import Supplier Agreement and each individual purchase order. Business partners who do not comply with the security standards may be subject to the cancellation of their Purchase Orders and/or the Supplier Agreement with Walmart Stores, Inc.The Global Sourcing Asset Protection and Security (GSAPS) team manages Walmart’s Supply Chain Security program globally. All sourcing facilities supplying Walmart markets, where Walmart is the importer of record, are required to undergo a third-party supply chain security audit or security self-assessment based on the level of supply chain risk in the country where the factory is located. Factories may have different requirements based on the country risk rating. The country risk levels are assigned by a third-party risk consultancy and are based on the level of risk to the supply chain in that country. The risk ratings are updated every 6-months and should be monitored for updates via the Supply Chain Security site in Retail Link at Retail Link > Site Map > Global Supply Chain Security.The procedures outlined below indicate the requirements necessary for a factory to achieve compliance with Walmart’s Supply Chain Security Program.DefinitionsNew factory – A facility that has never produced goods for any Walmart retail market ORa facility with an assigned Walmart ID number that moved from the address listed in Retail Link to another address.Existing factory – A facility that has produced goods for a Walmart retail market.Factory Audit RequirementsFinal, January 13, 2010Prequalification for New General Merchandise and Apparel FactoriesA new factory, regardless of the global location, the Walmart retail market, or country risk rating, is required to pass an onsite supply chain security audit conducted by one of Walmart’s appointed auditfirms prior to being activated in Retail Link.Existing Active and Inactive General Merchandise and Apparel Factories • A factory in a High Risk and Medium Risk countries are required to pass an onsite supply chain security audit conducted by a 3rd party audit firm appointed by Walmart prior to receiving a P.O.A factory in a Low Risk country must submit a completed self assessment prior to receiving a P.O.•Country risks ratings are provided on the Global Supply Chain Security site on Retail Link and are updated every 6 months.•An Active factory with unshipped POs for Walmart U.S. must have passed a security audit. For other Walmart retail markets the security audit will be implemented in stages throughout 2011.Once a Walmart retail market joins the Supply Chain Security program, all factories supplying merchandise to the retail market, as a direct import, will be required to pass a supply chain security audit before receiving a purchase order. Walmart markets globally will roll out the supply chain security program to their supply chain during 2011. The dates for each market’s roll out will be published separately.• A factory currently “Inactive” in Retail Link must pass a supply chain security audit performed bya Walmart approved 3rd Party audit company prior to being activated.Security Audit RenewalsAs of August 1, 2010, each factory must renew their security audit, as outlined below, based on the risk level of the country where the factory is located and the score achieved on the audit: •High Risk countries: 12 months•Medium Risk countries Score 88 or above (with no critical action items)– 24 monthsScore between 71 and 87 (with no critical action items) – 12months•Low Risk countries: 24 monthsNote:All critical action items noted in audits of factories in high or medium risk countries must be corrected and the documented corrective action returned to Walmart GSAPS team within 60 days. Corrective Action PlansAfter completion of the audit, the audit firm will assist the factory by documenting a Corrective Action Plan (CAP). If there are any critical action items (i.e. red flags) outstanding, the factory must correct the deficiencies and submit a completed CAP to the GSAPS team at gsscs@ within 60 days of the completion of the audit. The CAP must demonstrate the corrections, via photographic and written documentation, If the factory does not complete the CAP and submit it to Walmart within the 60 day requirement, the factory is required to undergo and pass another audit or be subject to inactivation.Final, January 13, 2010The Critical Action Items are:1. The facility has an employee security policy that includes hiring procedures, proper badgeidentification, reporting of lost badges and facility access controls.2. The facility utilizes a process to verify employment application information, including verifying anapplicant’s current address, personal references, and national ID card or birth certificate.3. Security personnel use closed circuit television (CCTV) or other surveillance methods to perform24/7 monitoring of fences, walls, and all facility entrance gates, and CCTV records are kept for a minimum of 45 days.4. The facility shipping area and shipping dock access are restricted to only authorized employees.5. Gate security guards conduct an outbound truck inspection to verify documentation,container/trailer numbers, and seal number verification with shipping documentation.6. A 7-point inspection is conducted prior to container or trailer stuffing.7. A high security seal (ISO/PAS 17712) is placed on the container/trailer immediately after stuffingis completed.8. Facility supervisors or security guards are present at time of production, assembly and finalpacking to prevent tampering.9. The transportation company’s contract states that drivers are required to report any incidents ofattempted cargo theft, load tampering or other security violations.10. The facility has a written IT policy that requires passwords on individual computers to be changedregularly, regular data back up and secure placement of servers.Third Party Audit FirmsIntertek (ITS), Bureau Veritas (BV) and Omega Compliance, Ltd (Omega) are approved by Walmart to perform Supply Chain Security audits.Walmart will accept an existing ITS GSV audit performed on behalf of another retailer. The audit’s renewal date will be calculated from the day the report was issued. The audit will only be accepted by Walmart if the passing score is 71 or above.The audit fees for individual Supply Chain Security Audits are contained in the document “Supply Chain Security Audit Fees” on the Retail Link Global Supply Chain Security site: Retail Link>Site Map>. Global Supply Chain Security.GSAPS SupportGSAPS provides FREE on-site or phone consultation and training upon request to factories that need assistance to improve their security management. GSAPS will monitor the program and remind factories to undergo renewal audits prior to expiration of an existing audit or self assessment.Information pertaining to the Walmart Supply Chain Security Program is available at the following Retail Link site path: Retail Link > Site Map > Global Supply Chain Security.Please contact gsscs@ with questions or inquiries about this program.Walmart takes supply chain security seriously and expects our partners throughout the supply chain to do the same. We appreciate your support in complying with the requirements of this document and look forward to continue business with you.。