CFATS – A Public-Private Success Story in Security
Posted on Wed, May 04, 2011
By Nigel Waterton, Director of Business Development
In 2007, The Department of Homeland Security (DHS) created the Chemical Facility Anti-Terrorism Standards (CFATS) program. It required chemical facilities to prepare Security Vulnerability Assessments and Develop and implement Site Security Plans that should include measures to satisfy risk-based performance standards.
Now nearly 4 years later Timothy Scott, Chief Security Officer for the Dow Chemical Company recently testified in front of congress that “CFATS is by far the most robust, comprehensive and demanding chemical security regulatory program to date. It takes a well-designed risk-based approach, sets a high bar through performance-based standards, and holds high risk facilities accountable for meeting those standards.”
Heady stuff from one of the world largest chemical companies, Timothy goes onto mention that” these tough regulations are yielding measurable results to manage or in some cases eliminate security risks.”
It has recently been a discussion among some in the industry as well as receiving attention in Washington in the form of new legislation set to go from the House Subcommittee of DHS on Cyber Security, Infrastructure Protection and Security Technologies to Full Committee in the bill H.R. 901 – The Chemical Facility Anti-Terrorism Security Authorization Act of 2011.
Question #1: Has this example of government regulation and oversight not only improved the security of the nation’s chemical facilities but also created a valuable contribution to the business performance of those companies?
Question #2: Should companies engage, as a matter of course, to complete risk and vulnerability assessments as a way to improve their business performance or do we have to wait for GRC regulations for every facet of the modern business paradigm?
I look forward to learning how those in the industry will respond and hope to shed new ideas on this issue…