ISCD Updates 7 FAQ Responses – 11-24-20

Yesterday the CISA Infrastructure Security Compliance Division (ISCD) updated the responses to seven frequently asked questions (FAQs) on the Chemical Facility Anti-Terrorism Standards (CFATS) Knowledge Center web page. The changes were non-substantive editorial revisions.

The following FAQ responses were revised:

FAQ #1653 If a facility is in a location where another entity provides certain security measures (e.g., industrial park, co-located facility, office park, etc.), can the facility include these security measures as part of its Security Vulnerability Assessment (SVA)/Site Security Plan (SSP)?

FAQ #1724 How do National Terrorism Advisory System (NTAS) Alerts and Bulletins affect a CFATS facility’s RBPS 13 compliance responsibilities?

FAQ #1769 My facility must perform background checks in accordance with the Risk-Based Performance Standard (RBPS) 12 Personnel Surety on affected individuals. Who is an affected individual?

FAQ #1770 How will the Cybersecurity and Infrastructure Security Agency (CISA) protect the data it collects? Can Chemical-terrorism Vulnerability Information (CVI) be released under the Freedom of Information Act (FOIA)?

FAQ #1782 Are there any facilities statutorily excluded from the Chemical Facility Anti-Terrorism Standards (CFATS) regulation?

FAQ #1785 How does the Cybersecurity and Infrastructure Security Agency (CISA) notify a facility of its tiering?

FAQ #1793 When does a covered facility under the Chemical Facility Anti-Terrorism Standards (CFATS) program need to submit a revised or updated Top-Screen?

NOTE: The links provided for the FAQs in this post were copied from the CFATS Knowledge Center but may not work when followed from your machine. This is an artifact of that web site. If the links do not take you to the referenced FAQ you will have to use the ‘Advanced Search’ function on the page to link to the FAQ or download the ‘All FAQs’ document at the bottom of the ‘Advanced Search’ page.

The following changes were made in the referenced responses:

#1653 Editorial change in answer – Replaced “;” with “,” between “located facility” and “office park”,

#1724 Editorial change in answer – Replaced “;” with “,” between “public safety” and “and recommended” in first paragraph,

#1769 Editorial change in question and answer – Removed “-“ between “(RBPS)” and “12”,

#1770 Editorial changes in answer – Removed unnecessary “ after “CFR § 27.400(d)"” and added space in “6 CFR §§ 27.300and 27.400(j)”,

#1782 Editorial change in question – Moved “(CFATS)” from behind “regulations” to behind “Standards”,

#1785 Editorial change in answer – Removed extra “.” After “(CFATS) regulation” in first paragraph,

#1793 Editorial change in answer – Added “,” after “every two years” in paragraph 2.