342 Dirksen Senate Office Building
Thank you, Chairman Carper, Ranking Member Coburn, and distinguished Members of the Committee. I appreciate the opportunity to appear before you today to discuss the Department of Homeland Security’s (DHS) regulation of high-risk chemical facilities under the Chemical Facility Anti-Terrorism Standards (CFATS) and the importance of authorizing the program. Over the past two years, the CFATS program has made significant progress, advancing programmatically while simultaneously addressing internal management concerns. We are pleased to appear before you today to discuss authorizing the program and ensuring that DHS has the authority to carry out the program in a manner that will foster the security of America’s highest-risk chemical infrastructure.
As you are aware, the Department's current authority under Section 550 of the Fiscal Year 2007 Department of Homeland Security Appropriations Act, as amended, is set to expire in October 2014. DHS is eager to work with the Committee and our stakeholders both in government and the private sector to achieve passage of legislation that provides long-term authorization and appropriately matures the CFATS program. In support of this collaboration, our testimony focuses on the progress made over the last two years, our efforts to continue strengthening the program, and the need for permanent authorization in order to fully stabilize the program.
CFATS Has Made the Nation More Secure The CFATS program is an important part of our Nation’s counterterrorism efforts as we work with our industry stakeholders to keep dangerous chemicals out of the hands of those who wish to do us harm. Since the CFATS program was created, we have engaged with industry toentify and regulate high-risk chemical facilities to ensure they have security measures in place to reduce the risks associated with the possession of chemicals of interest. Interagency partners have benefited from this information as it has enhanced law enforcement cooperation with high-risk chemical facilities. CFATS has also played a significant role in reducing the number of high-risk chemical facilities that are susceptible to attack or exploitation. To date, more than 3,000 facilities have eliminated, reduced or modified their holdings of chemicals of interest. The significant reduction in the number of chemical facilities that represent the highest risk is an important success of the CFATS program and is attributable both to the design of the program as enacted by Congress and to the work of CFATS personnel and industry at thousands of chemical facilities.
The progress made in the CFATS program over the last two years has helped to put the program on a path to success; however, there is still work to be done. The Department continues to engage with stakeholders and focus on three core areas: reducing the backlog of site security plan approvals, improving the risk assessment process, and ensuring that all potentially high-risk facilities areentified and are meeting their existing regulatory obligations as required by the CFATS regulations.1 Along with long-term authorization, our continued focus on these areas will ensure our stakeholders have the stability they need to comply with their regulatory obligations. We welcome the opportunity to work with you and our stakeholders on these important issues to further improve this vital national security program.
1A copy of the CFATS regulations can be found at http://www.regulations.gov/#!documentDetail;D=DHS-2006-0073-0115.
CFATS Implementation Progress The cornerstone of the CFATS program is the development, submission, and implementation of Site Security Plans (SSPs), or Alternative Security Programs (ASPs) in lieu of SSPs, which document the security measures that high-risk chemical facilities utilize to satisfy the applicable Risk-Based Performance Standards (RBPS) under CFATS. It is important to note that these plans are not “one-size-fits-all,” but are in-depth, highly customized, and account for each facility’s unique circumstances.
In order to determine whether a facility is regulated under CFATS, the facility submits a Top-Screen to the Department’s National Protection and Programs Directorate (NPPD) Infrastructure Security Compliance Division (ISCD) within the Office of Infrastructure Protection. Since we began collecting this information in 2007, ISCD has data from more than 46,000 Top-Screens submitted by chemical facilities, providing important information about their chemical holdings. Based on the information received in the Top-Screens, ISCD makes an initial determination that certain facilities are considered high-risk and assigns each of these to a preliminary tier2 These facilities then compile and submit Security Vulnerability Assessments (SVAs), which are used by ISCD toentify which facilities present a terrorism risk that is sufficiently high to warrant the assignment of a final high-risk tier under CFATS. As of April 21, 2014, CFATS covers over 4,100 high-risk facilities nationwide; of these, over 3,250 have received final high-risk determinations and are required to develop SSPs (or ASPs) for ISCD review. The remaining facilities are awaiting final tier determinations based on their SVA submissions. The tiered population is dynamic and subject to change, depending on the chemical holdings and other conditions at facilities.
Over the past year, the CFATS program has authorized, inspected, and approved hundreds of security plans. The program has also improved the pace of inspections and SSP approvals, developing new processes and distributing guidance materials. The majority of Tier 1 and Tier 2 facilities (the highest of the high risk), as well as a number of Tier 3 and Tier 4 facilities, now have an approved security plan. In September 2013, ISCD marked yet another milestone when we began conducting compliance inspections for facilities with approved SSPs. During compliance inspections, the Department verifies that the facility is implementing the measures contained in its approved SSP. The Department has developed a process whereby the timing for compliance inspections is based on a variety of factors, such as the facility’s risk tier, the facility and/or parent company’s past CFATS compliance history, date since last inspection, and the number of planned measures contained in the approved SSP.
The improvements that have been made have accelerated the pace of approvals and we are continuing toentify and explore options to enhance the program. We recognize the projected timeframe for all approvals must be reduced and we are exploring a variety of ways to increase the pace at which approvals are granted while maintaining the quality and thoroughness of the security plan approval process and the level of security required at chemical facilities. These include encouraging increased use of ASPs and supporting stakeholders’ development of new ASP templates, focusing inspections on key RBPS at lower tier facilities, working with corporations to develop authorization inspection schedules that allow for multiple inspections by one inspection team per week, and inspecting measures at a corporate level for corporations that have similar measures implemented at multiple facilities. The Department continues to engage with CFATS stakeholders on efforts to expedite security plan reviews and is committed toentifying and implementing appropriate enhancements to streamline the CFATS process. ASPs are an important option for facilities that desire flexibility in their site security plan, and we appreciate the Subcommittee’s effort to ensure this option remains available for the CFATS program moving forward.
2The Department has developed a risk-based tiering structure and assigns facilities to one of four risk-based tiers ranging from high (Tier 1) to low (Tier 4) risk. Assignment of preliminary and final tiers is based primarily on an assessment of the potential consequences of a successful attack on assets associated with chemicals of interest.
CFATS Risk Assessment As a part of our commitment to continue moving the CFATS program forward, NPPD has conducted a thorough review of our risk assessment process. In support of this review, NPPD implemented a phased approach, which included documenting all processes and procedures relating to the risk assessment methodology; conducting an internal NPPD review of the risk assessment process; and initiating an external peer review of the risk assessment methodology.
All three of these phases are now complete, with the Department receiving the CFATS Tiering Methodology Peer Review Final Report from the expert peer review panel in October 2013. Although many of the peer review panel’s recommendations pertain to areas the Department had previouslyentified for improvement, we felt it was essential to engage external stakeholders through an external peer review to ensure the fullest expertise was engaged in risk assessment improvements. As a result of continued stakeholder engagement, the Report provides valuable perspectives that will inform our efforts to enhance the CFATS risk-tiering methodology. We have analyzed the peer review recommendations and developed an implementation plan to enable us to address the recommendations in a timely and thoughtful manner. We also recognize that it is essential to continue to engage our stakeholders in implementing changes to the risk assessment process.
As recommended by the Peer Review Final Report, the Department intends to adopt appropriate changes to the tiering methodology in an integrated fashion, addressing as many issues concurrently as feasible. The implementation plan also addresses modifications to the tiering methodology stemming from efforts beyond the peer review, such as the economic and mission criticality studies being conducted on behalf of the Department by Sandia National Laboratories. Additionally, consistent with both recommendations within the Peer Review Final Report and our response to the Government Accountability Office’s report on the CFATS tiering methodology, ISCD intends to have a third-party verify and validate the revised tiering methodology. As we move forward with implementing recommendations, we are committed to ensuring these improvements are balanced with our stakeholders need for continued stability in tiering.
Chemical Facility Safety and Security Improvement: A Shared Responsibility Since the inception of the CFATS program, the Department has worked to ensure that potentially regulated facilities are aware of their reporting obligation under the CFATS regulations and that they comply with these existing regulations. Following the explosion in West, Texas, in April 2013, DHS has taken a number of steps to reinvigorate this effort, including supporting the implementation of Executive Order (EO) 13650, Improving Chemical Facility Safety and Security. Under EO 13650, Federal agencies established a working group co-chaired by DHS, the Department of Labor, and the Environmental Protection Agency, with participation from the Department of Justice, Department of Transportation, and U.S. Department of Agriculture, to explore options for improving chemical facility safety and security to reduce the likelihood of incidents occurring in the future. The members of the Working Group have worked closely together over the past year to analyze and develop recommendations on improving information collection, more effectively sharing information between agencies, improving operational and federal coordination efforts, and improving the effectiveness of existing regulations and policies governing chemicals and chemical facilities. These coordinated efforts will help ensure that the Federal government most effectively uses the collective resources available for managing chemical risk.
Promoting Compliance The activities taking place in support of EO 13650 complement many of the individual efforts being undertaken within the Department, and other Federal departments and agencies, following the tragic events in West, Texas. Since the April 2013 explosion, DHS has engaged with numerous members of industry and all have agreed that we must work together to prevent future incidents. Industry has offered to share information about the CFATS regulatory requirements with other members of industry that may not currently be aware of CFATS and do their part to promote safety and security at chemical facilities. The Department appreciates this support and looks forward to working with industry and our government partners to carry out these activities. In pursuit of this shared responsibility, the Department has undertaken significant outreach efforts throughout the years, to inform potentially high-risk chemical facilities of their obligations under CFATS. These outreach efforts have been a major contributor to the submission of over 46,000 Top-Screens from potentially high-risk chemical facilities to date.
As the tragic incident in West, Texas, demonstrated, not all facilities with threshold quantities of CFATS chemicals of interest have met their obligation to submit Top-Screens. DHS is committed to pursuing all reasonable measures toentify potential high-risk chemical facilities that are not among those that have already complied with initial Top-Screen submission requirements, and we will continue to work to get those facilities into compliance. When appropriate, the Department can utilize available enforcement mechanisms to bring non-compliant facilities into compliance. Both increased outreach and, where appropriate, the use of compliance enforcement mechanisms are part of the Department’s overall strategy to reduce the likelihood of potentially high-risk chemical facilities intentionally or unintentionally evadingentification under the CFATS program.
State and Local Partnerships The Department’s strategy forentifying potentially non-compliant facilities also includes enhanced coordination with Federal, State, and local partners. One such activity has focused on reinvigorating efforts with the EPA and other Federal partners with regulatory authority over the chemical industry to compare lists of regulated facilities toentify facilities which may have complied with another regulatory program and are potentially regulated under CFATS but have yet to comply with CFATS. Initial results from these efforts have been promising, with the Department seeing a substantial increase in the monthly rate of new Top-Screen submissions since August 2013.
The Department is also undertaking similar efforts with States and localities. Since April 2013, ISCD has reached out to officials in all 50 States, including State Homeland Security Advisors (HSAs) and the Governors Homeland Security Advisory Council, about CFATS requirements. These efforts are in addition to continuing to provide State HSAs and their designees with access to information on CFATS-regulated facilities in their jurisdictions via CFATS Share, a Web-based information-sharing portal that provides access to key information on CFATS facility information to certain Federal, State, and local agencies on an as needed basis.
Outreach to Non-Compliant Facilities The Department is expanding outreach efforts toentify potentially non-compliant facilities and has developed an Outreach and Engagement Strategy and Implementation Plan to raise awareness of CFATS DHS will continue to operate its CFATS Tip Line and will follow up on any information of potentially non-compliant facilities.
All of the aforementioned efforts are being undertaken in addition to the larger-scale efforts being coordinated under EO 13650. Of particular relevance is the effort being led by DHS under Section 5 of the EO, which addresses Enhanced Information Collection and Sharing. This section requires the development of recommendations on possible changes to improve and