As I mentioned, there were two CFATS sessions at the big industrial security conference in Dallas. The second session was called “CFATS – Beyond the SSP” and took a look at SSP and post SSP issues for chemical facilities. The speakers mainly focused on implementing the SSP and getting through the authorization inspection.
Attorney Evan Wolff of the firm Hunton & Williams spoke about some of the legal considerations involved in CFATS. He reminded everyone in the room that his advice and thoughts should not be construed as legal counsel. One of his first pieces of advice for each chemical facility is to have a corporate policy in place for physical and cyber security. That policy needs to clearly define leadership and management roles so that everyone knows who is responsible for each part of the policy and so that there are no gaps.
Since there are many other regulations affecting plants and facilities Wolff reminded the presentation attendees to review the impact of all of the other regulations and standards including OSHA, NFPA and any state or local regulations. It is important to make sure that your facility remains compliant in all areas even when making changes and adjustments for CFATS mandates. He encourages the development of compliance mechanism, so that procedures are in place for each standard or regulation.
Another thing Wolff recommends is for each chemical facility to develop a consistent way to manage chemicals and inventories. This is very important because it provides documentation and is essential for keeping in compliance over the long run. Standardized and documented procedures will make any subsequent DHS inspections that much easier to pass.
For your DHS inspection Wolff recommends the following:
• Remember that DHS has broad inspection authority under the law and can come into your facility with limited notice. That means you can’t let your guard down. You have to have your procedures in place and ready to past muster at all times.
• Prior to the inspection, review all CFATS documents and conduct a dress rehearsal. Be ready not to just talk about your procedures, but to show how those processes work on a day-to-day basis.
• During the inspection keep notes as you go along with the inspector. These will be very useful and allow you to quickly go back and make any necessary changes or adjustments.
• Don’t speculate during the inspection. If you don’t know the answer just say “I don’t know.” Speculating can get you in trouble. Being up front about what you know and don’t know is the only way to go.
• Request copies of all materials generated during the inspection process. Ask for copies of any photos or videos that have been taken.
• Consider sending a follow up letter to DHS after the inspection. Reiterate your understanding of the inspection result and request any clarification in writing.
It is some good, sound advice from someone who has been through the process with a number of clients. It’s important to tap into the CFATS knowledge base that is out there and get quality advice from experienced professionals who know CFATS and have an understanding of it.
Ryan Loughin, Director of Petrochemical & Energy Solutions
Advanced Integration division of ADT
RyanLoughin is Director of Petrochemical & Energy Solutions for the Advanced Integration division of ADT-http://www.adtbusiness.com/petrochem. He provides security education to CFATS and MTSA-affected companies and is amember of the National Petrochemical and Refiners Association (NPRA), Society of Chemical Manufacturers and Associates (SOCMA), Energy Security Council (ESC) and American Society for Industrial Security (ASIS). Loughin has also completed multiple levels of CVI Authorized User training (Chemical- Terrorism Vulnerability Information) which was authored by the U.S. Department of Homeland Security.
The original article is found at chemicalprocessing.com and submitted on Wednesday 11-03-2010.