chemical facility anti-terrorism standards

Quick Links
RBPS
DHS
COI

Reference Library
Ameristar Brochure
Security Integrators
Qualified Installers

Contact Ameristar
866-467-2773

Are you affected by CFATS?

On April 9, 2007, the U.S. Department of Homeland Security (DHS) issued the Chemical Facility Anti-Terrorism Standards (CFATS), which became effective on June 8, 2007. Since that time, industry has been working to understand the full scope of the regulation’s requirements and what steps will likely need to be taken for CFATS compliance.

Under the CFATS umbrella, DHS established eighteen “Risk-Based Performance Standards” (RBPSs) that regulated facilities must address, as applicable. With performance standards (as opposed to prescriptive measures), each regulated facility has the flexibility to implement security measures that are the most appropriate for that particular site, subject to DHS review and approval. To help the regulated community better understand the intent (and expectations) for each RBPS at varying tiers (i.e. Tier 1 – Tier 4), DHS issued a RPBS Guidance Document in May 2009. That same month, DHS notified approximately 140 facilities that they were receiving a final Tier 1 designation. These facilities were required to submit a Site Security Plan (SSP) to DHS on or before September 15, 2009.

On June 29, 2009, DHS notified a second batch of facilities that they were receiving a final Tier 2 designation, and that they must submit a SSP to DHS on or before October 29, 2009. DHS then notified a third group of facilities that they were receiving a final Tier 3 designation in late July 2009; their SSPs were due in November of that year. Some Tier 4 facilities began receiving final tier designations in October 2009, with their SSPs due to DHS by February 2010. To date, some 1,500 facilities across all four tiers are still awaiting final tier notification.

Ameristar Can Help With CFATS Compliance

Click here to Download Ameristar's Risk-Based Performance Solutions Brochure

From the inception of CFATS more than 3 years ago, Ameristar has closely followed the development of the regulation. We have assembled a team of security experts to serve as a resource not only to security integrators, but also to the manufacturers of the sensors and systems that the security integration community will use to implement appropriate risk-based security solutions. Perhaps more significantly, Ameristar has served, and continues to serve, as a resource to chemical and petrochemical company security directors.

Although only a small handful of SSPs have received some level of approval (i.e., issuance of a Letter of Authorization or, possibly, a Letter of Approval), Ameristar has already begun working with security directors to conceptualize security enhancements for RBPS 1 (Restrict Area Perimeter), RBPS 2 (Secure Site Assets), RBPS 3 (Screen and Control Access), and RBPS 4 (Deter, Detect, and Delay). Ameristar understands that each regulated facility faces unique security challenges, and the successful execution of CFATS requires a multi-disciplinary team that appreciates the nuanced application of the regulation.

CFATS requires all covered facilities to address the eighteen established RBPSs, as applicable. RBPSs 1-6 focus predominately on physical security. Whether the need is for enhanced fence-line security or enhanced security for Theft/Diversion Chemicals of Interest (COIs) contained in “transportation packaging,” Ameristar has a solution for any risk-tier:

RBPS 1 – Restrict Area Perimeter: Addresses the need to provide for a controlled perimeter surrounding the facility. This involves both securing and monitoring the area perimeter.
RBPS 2 – Secure Site Assets: Addresses security at and around restricted areas or potentially critical targets within the facility. Like RBPS 1, this requires screening and monitoring – but at the asset level rather than facility-wide.
RBPS 3 – Screen and Control Access: Addresses the identification, screening, and inspection of individuals and vehicles entering and/or exiting the facility.
RBPS 4 – Deter, Detect, and Delay: Addresses deterrence, detection, and delay of would-be adversaries, so that the facility creates sufficient time between the detection of an attack and the point at which the attack succeeds.
RBPS 5 – Shipping, Receipt, and Storage: Addresses the shipping, receipt, and storage of COI, including restricting access to COIs to only authorized individuals.
RBPS 6 – Theft or Diversion: Addresses the theft or diversion of COI. Like RBPS 5, this requires restricting access to COIs to only authorized individuals.