; 19 U.S.C. 4316 ); (2) determine operational feasibility and, where appropriate, provide best practices for meeting such new or updated security criteria to CTPAT program participants specific to their entity type; (3) conduct a phased implementation of such proposed new or updated security criteria