November 20, 2022 was the anniversary of Chemical Facility Anti-Terrorism Standards (CFATS) regulations. And although it is not as well known as OSHA’s PSM and EPA’s RMP standards, it is a standard that many PSM/RMP practitioners deal with, so I thought it would be fitting to look at the CFATS numbers…
- Over the course of the last 15 years, more than 40,000 facilities have reported their chemical holdings to CISA under the CFATS program.
- Just over 3,000 facilities are considered “high risk” (though that number fluctuates regularly as facilities change their chemical holdings and modify their business practices)
- the Cybersecurity and Infrastructure Security Agency (CISA) have conducted more than 14,000 inspections at high-risk sites
- CISA has performed more than 10,000 compliance assistance visits
- >95% of current high-risk sites have approved security plans in place
- 75% of high-risk chemical facilities implement new security measures to reach CISA’s standards, and those improvements are not inconsequential—on average, facilities increase their security measures by 57% between their initial security plans and the plans that are ultimately approved by CISA