ISCD Updates 6 FAQ Responses – 7-13-20

Today the CISA Infrastructure Security Compliance Division (ISCD) updated the responses to five frequently asked questions on the Chemical Facility Anti-Terrorism Standards (CFATS) Knowledge Center. This is part of an on-going effort at ISCD to make FAQ editorial changes designed to: reflect changes in program management (CISA branding), to change URL’s to page links (see the similar 6-22-20 blog post) and to make the responses more helpful; rather than reflecting changes in ISCD policy.

The five FAQ responses updated today were:

FAQ #1657 Does the Cybersecurity and Infrastructure Security Agency (CISA) have a list of specific security measures that are required at Chemical Facility Anti-Terrorism Standards (CFATS)-covered high-risk facilities?

FAQ #1658 What is an Alternative Security Program (ASP)?

FAQ #1659 What are “planned” measures and why would a facility include them in the Site Security Plan (SSP)?

FAQ #1660 Can a facility’s tiering level ever change? How and why?

FAQ #1741 I have some security measures in my Expedited Approval Program (EAP) Site Security Plan (SSP) that do not meet the specific requirements in the measures outlined in the DHS Guidance for the Expedited Approval Program. Do I have material deviations? What do I do?

FAQ #1742 What criteria does the Cybersecurity and Infrastructure Security Agency (CISA) use to determine if a Site Security Plan (SSP) submitted through the Expedited Approval Program (EAP) is facially deficient?