Showing posts with label NTSB. Show all posts
Showing posts with label NTSB. Show all posts

Tuesday, September 30, 2025

NTSB Publishes Preliminary Report on Reeseville, WI Train Derailment

Today the National Transportation Safety Board (NTSB) published a preliminary report on the August 15th, 2025, derailment of a key-train (94 hazmat cars). Twenty-four cars were derailed and two were punctured, leaking crude oil. No fires, injuries, or non-railroad damages were reported.

The PHMSA HAZMAT Incident Database report on this incident reports that five of the 23 railcars leaked; two from punctures and three from manways, due to bolts being less than tool tight:

GBRX 706564 - derailed upright with the B-end buried in mud. The tank shell was punctured close to the top and middle of the tank car, on the right side, B-end. Resulting release was estimated at 750 gallons. GBRX 706556 - derailed upright & underneath another tank car. The tank head was punctured close to the Brake handle on the B-end. Resulting release was estimated at 750 gallons.

GBRX 706217 - derailed on its right side, with the top of the tank car at roughly 3:00. The release occurred from the manway, where 3 of 8 manway bolts were less than tool tight. Resulting release was estimated at 5 gallons.

GBRX 706163 - derailed on its right side, with the top of the tank car at roughly 3:00. The release occurred from the manway, where 4 of 8 manway bolts were less than tool tight. Resulting release was estimated at 5 gallons.

GBRX 706067 derailed on its right side, with the top of the tank car at roughly 3:00. The release occurred from the manway, where 1 of 8 manway bolts were less than tool tight. Resulting release was estimated at 0.016 gallons.

Note: This incident had not been reported to PHMSA when I did my post “Transportation Chemical Incidents – Week of 8-9-25” on September 12th, 2025.

Thursday, August 31, 2023

Review - NTSB Publishes 2 ANPRM’s for Transportation Investigations

Today the National Transportation Safety Board (NTSB) published two advanced notices of proposed rulemaking (ANPRM) in the Federal Register (88 FR 60164-60165 and 88 FR 60166-60167) for “Authority of NTSB in Railroad, Pipeline, and Hazardous Materials Investigations”. The two rulemakings would provide definitions for key terms used in existing NTSB regulations at 49 CFR 831.40(a) that were not defined in US Code at (49 USC 1131):

• ‘Substantial property damage’, and

• ‘Significant injury to the environment’

Public Comments

The NTSB is soliciting comments on both rulemakings. Comments may be submitted via the Federal eRulemaking Portal (www.Regulations.gov) using the docket numbers listed below:

• Railroad rulemaking - NTSB-2023-0007, and

• Pipeline rulemaking - NTSB-2023-0008

Comments on both should be submitted by October 30th, 2023.

 

For more information on both rulemakings, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/ntsb-publishes-2-anprms-for-transportation - subscription required.

Friday, May 21, 2021

NTSB Publishes UAS Accident NPRM

 Today the National Transportation Safety Board (NTSB) published a notice of proposed rulemaking (NPRM) in the Federal Register (86 FR 27550-27551) for “Amendment to the Definition of Unmanned Aircraft Accident”. The rulemaking would remove the weight-based requirement and replacing it with an airworthiness certificate or airworthiness approval requirement. This action is being undertaken to reflect the evolving nature of UAS usage and regulation.

Current Definition

The current definition of the term ‘unmanned aircraft accident’ is found at 49 CFR 830.2. It includes in that definition a requirement that the occurrence defining the accident includes either of the two following characteristics:

• Any person suffers death or serious injury; or

• The aircraft has a maximum gross takeoff weight of 300 pounds or greater and sustains substantial damage.

Proposed Change

In this rulemaking, the NTSB is proposing to replace the second characteristic with the phrase: ““holds an airworthiness certificate or approval”. The Preamble to the NPRM notes that:

“While this definition ensured that the NTSB expended resources on UAS events involving the most significant risk to public safety, the advent of higher capability UAS applications—such as commercial drone delivery flights operating in a higher risk environment (e.g., populated areas, beyond line-of-sight operations, etc.)—has prompted the agency to propose an updated definition of “unmanned aircraft accident.”

This change will “will treat a UAS with airworthiness certification or airworthiness approval in the same manner as a manned aircraft with airworthiness certification or airworthiness approval, thereby enabling the NTSB to immediately investigate, influence corrective actions, and propose safety recommendations.”

Public Comments

The NTSB is soliciting public comments on this proposed rulemaking. Comments may be submitted via the Federal eRulemaking Portal (www.Regulations.gov; Docket # NTSB-2021-0004). Comments should be submitted by July 20th, 2021.

Tuesday, January 13, 2015

NTSB Meeting on Pipeline Safety

The National Transportation Safety Board (NTSB) published a meeting notice in today’s Federal Register (80 FR 1671-1672) for a meeting in Washington, DC on January 27th, 2015. The public meeting will address the results of a recent safety study on the topic of Integrity Management of Gas Transmission Pipelines in High Consequence Areas.


The meeting will also be web cast; access will be available via the NTSB web site.

Tuesday, July 15, 2014

NTSB Meeting to Release Vinyl Chloride Rail Accident Report

The National Transportation Safety Board published a meeting notice in today’s Federal Register (79 FR 41311-41312) concerning a meeting to be held in Washington, DC on July 29th, 2014 to discuss the report of their investigation into the rail accident in Paulsboro, New Jersey on November 30, 2012 that resulted in a catastrophic release of vinyl chloride.


The meeting will be open to the public and will be web cast.

Tuesday, May 6, 2014

PHMSA Publishes ‘Lessons Learned’ from Enbridge Spill

Today the DOT’s Pipeline and Hazardous Material Safety Administration (PHMSA) published a notice in the Federal Register (79 FR 25990-25994) identifying lessons learned from the Enbridge pipeline spill near Marshall, Michigan on July 25th, 2010. The lessons are based upon the results of the National Transportation Safety Board (NTSB) investigation of the incident published last July.

The NTSB report identifies the probable cause of the spill as being “corrosion fatigue cracks that grew and coalesced from crack and corrosion defects under disbonded polyethylene tape coating, producing a substantial crude oil release that went undetected by the control center for over 17 hours”. Three Enbridge failures were identified as contributing to the extent of the spill:

• Deficient integrity management procedures, which allowed well-documented crack defects in corroded areas to propagate until the pipeline failed.
• Inadequate training of control center personnel, which allowed the rupture to remain undetected for 17 hours and through two startups of the pipeline.
• Insufficient public awareness and education, which allowed the release to continue for nearly 14 hours after the first notification of an odor to local emergency response agencies.

The PHMSA notice identifies specific actions that other pipeline operators should take based upon these lessons. They include:

• Reviewing their own IM programs for similar deficiencies and to take corrective action;
• Training their control room staff as teams to recognize and respond to emergencies or unexpected conditions;
• Evaluate their leak detection capabilities to ensure adequate leak detection coverage during transient operations;
• Assessing the performance of their leak detection systems following a product release to identify and implement improvements as appropriate;
• Reviewing the effectiveness of their public awareness programs;
• Reviewing whether local emergency response teams are adequately prepared to identify and respond to early indications of ruptures; and
• Reviewing NTSB recommendations following accident investigations.


It seems to me that all facilities that handle hazardous materials could do well to follow these recommendations.

Saturday, April 12, 2014

NTSB Announces Inquiry into Crude Oil and Ethanol Shipping

The National Transportation Safety Board published a meeting notice in Monday’s Federal Register (79 FR 20922-20933; available on line today) concerning a public forum to be conducted about the rail transportation of crude oil and ethanol. The public meeting will be held on April 22nd thru 23rd in Washington, DC.

The NTSB members will be acting as a board of inquiry and there will be a number of invited panels of technical experts from the Federal Road Administration (FRA), the Pipeline and Hazardous Material Safety Administration (PHMSA), railroad owner/operators, emergency responders and industry groups. A listing of the panels and their members can be found on the Forum agenda web page and the panel member biographies can be found here.

Areas to be addressed during the two-day meeting include:

• A review of crude oil and ethanol railroad accidents
• Tank Car Design, Construction, and Crashworthiness
• Rail Operations and Approaches to Risk Management
• Emergency Response to Tank Car Releases of Crude Oil and
Ethanol
• Federal Oversight and Industry Initiatives Related to Crude Oil and Ethanol Transportation by Rail


The NTSB is soliciting public input on the topics being considered. Written comments may be emailed to the NTSB at railsafetyforum@ntsb.gov. There are no provisions for the public to provide oral presentations at the forum. The forum will be web cast and the web cast will be available for three months after the meeting.

Monday, January 27, 2014

TSB and NTSB Make Crude Train Recommendations

Early last week the Canadian Transportation Safety Board (TSB) and the US National Transportation Safety Board (NTSB) made a coordinated series of recommendations based upon the preliminary investigation results from the Lac-Mégantic crude oil train wreck and initial investigation results from the Casselton, ND crude unit train wreck.

The NTSB recommendations to the Federal Railroad Administration (FRA) and the Pipeline and Hazardous Material Safety Administration (PHMSA) go significantly beyond the political calls for replacing the older DOT 111 railcars that have apparently contributed so greatly to the catastrophic destruction seen in these recent derailments and fires.

The twin recommendation documents published on the January 21st outline what is currently known about the two accidents and additional related rail incidents that occurred with trains transporting ethanol. In addition they provide supporting details for the six recommendations that will be discussed below.

NOTE: It is interesting that the NTSB has expanded this discussion to include the bulk shipment of ethanol in unit trains. Given that there are more car loads of ethanol being shipped than crude oil, and given that they are using the same types of cars over the same tracks, it might be interesting for someone to look into why there has been a rash of crude oil train wrecks, but not similar rash of ethanol unit train wrecks. Could it be related to the fact that crude oil is not a ‘clean fuel’ and may thus be preferentially targeted by environmental extremists?

Route Planning

Two of the six recommendations (R-14-1 and R-14-4) are virtually identical in that they recommend that the two agencies work together to:

“Expand hazardous materials route planning and selection requirements for railroads under Title 49 Code of Federal Regulations 172.820 [Link Added] to include key trains transporting flammable liquids as defined by the Association of American Railroads Circular No. OT-55-N and, where technically feasible, require rerouting to avoid transportation of such hazardous materials through populated and other sensitive areas.”

The current route planning and selection requirements are limited to bulk rail shipments of explosives, toxic inhalation hazard (TIH) chemicals, and radioactive materials {§172.820(a)}. There has been no indication that the complicated rules for route evaluation (requiring evaluation of 26 separate and un-weighted factors Appendix D to Part 172) has done anything to reduce the number of shipments of the covered chemicals through major metropolitan areas which was arguably the intent of the regulators.

The current §172.820 regulations do not require the re-routing of the covered material ‘to avoid transportation of such hazardous materials through populated and other sensitive areas’. It requires a vaguer standard of:

“Using this process, the carrier must at least annually review and select the practicable route posing the least overall safety and security risk.” {§172.820(e)}

Enforcement of these route selection decisions is more than a little vague. There is no requirement to submit the analysis documents to either the FRA or PHMSA (or TSA for security issues) for approval. They must be made available to inspectors from DOT or DHS. Finally the DOT may only require a change in route selection in concert with the TSA and only after the Surface Transportation Board determines that the alternative route is “economically practicable” {§172.820(j)}. Because of the lack of a measurable standard for the “most secure practicable route available”, it is unlikely that any such order would stand up in court.

Spill Response Plans

There are nearly twin recommendations (R-14-2 and R-14-5) to the two agencies dealing with spill response plans. The primary responsibility for these plans is given to PHMSA:

“Revise the spill response planning thresholds contained in Title 49 Code of Federal Regulations Part 130 [Link Added] to require comprehensive response plans to effectively provide for the carriers’ ability to respond to worst-case discharges resulting from accidents involving unit trains or blocks of tank cars transporting oil and petroleum products. (R-14-5)”

Section 130.31 sets for the current requirements for spill response plans. While there are a number of administrative requirements, the key action item is found at §130.31(b)(4):

“Identifies, and ensures by contract or other means the availability of, private personnel (including address and phone number), and the equipment necessary to remove, to the maximum extent practicable, a worst case discharge (including a discharge resulting from fire or explosion) and to mitigate or prevent a substantial threat of such a discharge;”

The concern of the NTSB being addressed by the recommendation to revise the planning thresholds is that the current language in §130.31(a)(2) limits the requirements for the spill response plan to just a spill from a single packaging. The accident record in the last year surely indicates that more than a single railcar (the packaging in this instance) will be involved in the spill and subsequent fire.

The NTSB is concerned that the current language allows for inadequate funding support for the spill response in the types of accidents with crude oil and ethanol unit trains that we have been seeing. The adequate spill response for a single car spill may be totally inadequate for a a multiple rail car discharge.

The FRA counterpart to this recommendation addresses the need to audit the plans to “ensure that adequate provisions are in place to respond to and remove a worst-case discharge to the maximum extent practicable and to mitigate or prevent a substantial threat of a worst-case discharge. (R-14-2)” Since there are no provisions in Part 130 requiring the submission of spill response plans or the approval of emergency response plans, there is currently no good method of determining if the plans currently in place (even given their single packaging scope) are adequate to the task at hand.

One other significant shortcoming in the current spill response plan requirements is that there is no requirement in the plan in how to deal with fires and explosions subsequent to a spill. The only real response requirement is listed in §130.31(b)(3) which describes authority to “implement removal actions”. It might be worthwhile considering the addition of fire suppression planning for unit trains carrying flammables.

Crude Hazard Classification

The last two recommendations address the issue of proper classification of crude oil hazards. Again PHMSA is given the task of establishing the requirement and standards while FRA is given the responsibility for auditing the performance of rail shippers.

The Hazardous Material Regulations (HMR) already require a shipper to properly classify and describe hazardous materials {§173.22(a)(1)} and §173.120 provides the definition of flammable liquids (Class 3) and §173.121 provides the testing criteria for the assignment of packing groups within that class.

While PHMSA is continuing its testing of samples of the Bakken Crude to determine if any additional testing requirements might apply, the NTSB discussion of the classification of the crude in the Casselton incident (pg 11 of the PHMSA recommendation letter) indicates that the initial shippers to the rail transloading facility had properly classified the material as Packing Group II while the shipping papers for the train cars incorrectly identified it as the less hazardous Packing Group III.

It is not clear how the NTSB intends for the FRA to audit the proper classification of crude oil shipments. The only real way to conduct such audits would be to pull samples from random railcars and send them to an outside lab for testing. Currently the only authority for opening hazmat packages in transit is found in §109.5, but it only allow for opening of  a packaging component “that is not immediately adjacent to the hazardous materials contained in the package”. In other words samples may not be taken.

The one exception to this is that when a DOT agent “agent has an objectively reasonable and articulable belief that the packages may pose an imminent hazard” {§190.7} the packaging may be transported to a facility for testing. This is clearly not intended to be used for audit purposes.

Safety and Security Plans

While not included in the formal numbered recommendations made by the NTSB, there is a lengthy discussion (pgs 10-11) in the documents relating to the requirements for the preparation of transportation safety and security plans for Class 3 materials classified in Packing Group I or II {§172.800(6)}. The NTSB concludes that discussion by recommending “that the FRA audit shippers and rail carriers of crude oil to ensure they are using appropriate hazardous materials shipping classifications, have developed transportation safety and security plans, and have made adequate provision for safety and security” (pg 11).

The current requirements for the security plan are more than a little vague and provide no measure to determine the adequacy of those plans. Section 172.802(a) provides a rather generic description of the components that will be included in the security plans; including:

• Personnel security (surety);
• Unauthorized access;
• Enroute security;

Since there are no real descriptions of what these components will include (for example there is no requirement for vetting personnel against a terrorist screening list or even a criminal background check) there is no way that such plans could be determined to be inadequate from a actionable regulatory point of view. Without being able to compel a shipper or railroad to achieve some measurable level of security, there is no practical need for an audit of such plans.

Now, if the NTSB had recommended that the provisions of Subpart B of the TSA Rail Transportation Security Regulations pertaining to rail security sensitive materials (again explosives, TIH chemicals, and radioactive materials similar to those requiring route planning) were made to apply to unit trains of crude oil or ethanol, then there would be some actual security planning and execution efforts to audit.

Moving Forward


The NTSB does not have any regulatory authority to compel the FRA or PHMSA to comply with their recommendations. Neither agency has a real good track record for timely adoption of NTSB recommendations. That combined with the industry’s almost legendary resistance to change and a well understood proclivity to use the courts to resist changes ensure that none of the recommendations will move forward quickly, if at all.

Friday, September 6, 2013

PHMSA Rail Hazmat Safety ANPRM

Today the Pipeline and Hazardous Material Safety Administration (PHMSA) published the advance notice of proposed regulations that I discussed earlier in today’s Federal Register (78 FR 54849-54861). The proposed rule is a response to eight petitions from the regulated community and four recommendations from the Nation Transportation Safety Board (NTSB) for changes to requirements for the rail shipment of hazardous materials.

The petitions addressed include:

P-1507 – Eastman Chemical suggests revising §174.50 to provide FRA greater discretion in authorizing car movement;
P-1519 – CGA suggests revising §173.314 Note 5 to clearly indicate that the liquid portion of the gas must not completely fill the tank prior to reaching the pressure setting of the regulating valves or the safety relief valve, whichever is lower;
P-1547 – Carroll Welding Supply suggests revising the regulations by revising ton tank repair, maintenance, and marking regulations for consistency with existing regulations for DOT 3-series cylinders since ton tanks share more in common with these cylinders than tank cars;
P-1548 – The ACC is suggests that PHMSA incorporate Special Permit DOT SP-13219 into the HMR;
P-1577 – The AAR suggests new standards for DOT Specification 111 tank cars for PG I and PG II materials based on findings and recommendations created by AAR's Tank Car Committee;
P-1587 - The Village of Barrington, Illinois and The Regional Answer to Canadian National suggest that PHMSA adopt NTSB Recommendation R-07-04, R-12-5, R-12-6, R-12-7, and R-12-8;
P-1595 – The ACC, API, and CI suggest that PHMSA institute a separate rulemaking to specifically address new tank car construction standards for ethanol and crude oil in PG I and II; and
P-1612 – The ACC, API, CI, and RFA suggest that PHMSA act expeditiously by issuing a direct final rule to implement the changes P-1577 and the T87.6 Task Force Summary Report for ethanol and crude oil.


Public comments keyed to the petition number are being solicited by PHMSA. Comments may be submitted via the Federal eRulemaking Portal (www.Regulations.gov; Docket # PHMSA-2012-0082). Comments must be submitted by November 5th, 2013.

Thursday, July 18, 2013

PHMSA Submits Rail Petition ANPRM to OMB

On Tuesday the Pipeline and Hazardous Material Safety Administration submitted an advance notice of proposed rulemaking (ANPRM) to the Office of Management and Budget (OBM) that would enhance safety and revise and clarify the HMR applicable to the transportation of hazardous materials by rail. This rulemaking is being initiated in response to petitions for rulemaking submitted by the regulated community and NTSB recommendations that are associated with the petitions.

According to the Abstract for this rulemaking in the Unified Agenda this rulemaking would:

• Identify elements of non-conformity that do not require a movement approval from the Federal Railroad Administration (FRA);
• Correct an unsafe condition associated with pressure relief valves (PRV) on rail cars transporting carbon dioxide, refrigerated liquid;
• Revise outdated regulations applicable to the repair and maintenance of DOT Specification 110, DOT Specification 106, and ICC 27 tank car tanks (ton tanks);
• Except ruptured discs from removal if the inspection itself damages, changes, or alters the intended operation of the device; and
• Enhance the standards for DOT Specification 111 tank cars used to transport Packing Group I and II hazardous materials.

Since this ANPRM is in response to industry petitions, the political pressure that might delay OMB consideration of this rulemaking is probably not present, so we may see approval of this ANPRM within a month or so.


In light of the recent crude oil train derailment, fires and explosion, it will be interesting to see exactly what changes are being considered for the standards for DOT Specification 111 tank cars.

Sunday, June 30, 2013

NTSB Investigative Hearing Announced – 7-10-13

The National Transportation Safety Board published a hearing notice in Friday’s Federal Register (78 FR 39017-39018) concerning an investigative hearing that will be held in Washington, DC on July 10th, 2013. The hearing will be looking into the Conrail derailment outside of Paulsboro, NJ on November 30th, 2012, and the subsequent release of 180,000 lbs of vinyl chloride.

According to the notice, the hearing will discuss:

• Conrail bridge operations;
• Conrail procedures;
• Incident command actions and emergency response decisions in the first day;
• Hazardous materials emergency response operations;
• Roles of the response teams;
• Evacuations and communications;
• Incident response protocols;
• Hazmat training;
• Oversight of Paulsboro emergency preparedness;
• Roles of local, state and Federal agencies in emergency hazmat response; and
• Interaction between state and Federal agencies in establishing a unified command.

The NTSB intends to use this hearing to:

• Gather additional factual information regarding the actions of the first responders in Paulsboro;
• To explore the hierarchy of New Jersey State and local emergency management;
• Training, regulations and standards applicable to emergency response personnel; and
• To examine the oversight of the Paulsboro emergency operations

The hearing will be open to the public and the NTSB will web cast the hearing on its web site.

NOTE: It will be interesting to see if the issue of dispersion modeling that I discussed here after that accident is raised.

Tuesday, May 21, 2013

NTSB Announces Single-Truck Accident Meeting


Today the National Transportation Safety Board announced in the Federal Register (78 FR 29781) that they would be holding a meeting in Washington, DC on June 4th to look at the results of a Safety Study on the Characteristics of Single-Unit Truck Accidents Resulting in Injuries and Death.

We have been seeing a large number of news reports about single-truck accidents, many of which involve hazardous materials. A reduction in the number of such accidents would be of immeasurable benefit to shippers, transporters and the general public.

The meeting is open to the public and the NTSB will web cast the meeting (I am so glad to see more and more federal agencies learn the value of webcasting; NPPD PLEASE take note). The link will be available on the www.NTSB.gov website.

Friday, February 15, 2013

NTSB Announces PTC Public Meeting


Today the National Transportation Safety Board (NTSB) published a notice in the Federal Register (78 FR 11236-11237) to announce their holding of a public forum in Washington, D.C. on February 27th, 2013. The forum will look at the implementation of the positive train control (PTC) program by the Federal Railroad Administration (FRA).

The Agenda

The forum will include three panel discussions. The currently un-named panel members will include “representatives from railroads, government, industry suppliers, labor unions, and the research community”. The three panels will address:

• Positive Train Control Systems as Envisioned vs. Implemented
• Current Status of Positive Train Control (PTC) Regulatory Implementation
• Current Status of Positive Train Control (PTC) Technical Implementation

Public Participation

The public is invited to attend the forum and the NTSB will be web casting the event. The NTSB will maintain an archived copy of the web cast for three months following the forum. The Forum web page notes that there will be more information on the web page in the near future.

Friday, May 11, 2012

Incompatible Hoses


One of my blog posts that frequently gets picked up in web searches dealt with an accidental anhydrous ammonia leak in July of 2009 at Tanner Industries in Swansea, SC. So it was with a great deal of interest that I read this morning that the National Transportation Safety Board (NTSB) had determined the cause of the catastrophic hose failure that was the point of release in this fatal accident; the use of a hose that was incompatible with the anhydrous ammonia that was being offloaded.

It seems that someone (apparently from the trucking company, but that hasn’t been conclusively established) switched hoses between two trucks in a company yard. The hose that ended up on the truck at Tanner Industries that fateful day was clearly marked as being a hose to be used for transferring liquid petroleum gas (LPG). Internal components of that hose would be expected to react with anhydrous ammonia in such a way as to weaken the structural integrity of the hose.

NTSB Recommendations


The NTSB has issued a formal recommendation that the Federal Motor Carrier Safety Administration (FMCSA) and the Pipeline and Hazardous Material Safety Administration (PHMSA) should jointly issue a safety advisory concerning the necessity for checking hoses to ensure that they are compatible with the material being transferred to or from transportation tanks.

A separate recommendation letter also recommends that PHMSA:

• Require carriers and transfer facilities verify the chemical compatibility of hoses;

• Amend 49 CFR 173.315(n)(2) to require the use of passive emergency shutdown systems;

• Publish a formal interpretation of the when a transfer hose assembly is ‘in service’; and

• Clarify the testing and recordkeeping requirements of 49 CFR 180.407 for annual hose leak testing.

Long time readers might remember that I recommended the use of passive emergency shutdown systems in my original post on this accident. No great insight on my part, both the NTSB and the Chemical Safety Board had made this recommendation before.

Security Implications


As with most safety incidents, the root cause of this incident can point out security vulnerabilities in our chemical transportation systems. While the switching of hoses in this particular incident was not traced to terrorism, a terrorist could use this technique for attacking a high-risk chemical facility. Switching hoses as was done in this case could be done at any number of rest-stops, tank wash stations, or anywhere else where trucks are parked unattended. While it would be hard to predict when the hose would fail (NTSB estimates this hose may have been used as many as 12 times before the accident), this would be an effective form of attack where a terrorist wanted to attack multiple facilities over a wide area and reduce the chances of getting caught.

Another variation on this ‘hose attack’ theme would be to add relatively small amounts of an incompatible chemical to the inside of the hose. The material would then be flushed into the storage tank during the unloading process creating a chemical reaction hazard within the tank. This would be most effective if a chemical initiator were added to a self-reactive chemical storage tank.

Both of these types of attacks would be relatively easy to pull off because the hose storage racks on most tank trucks are not secured; many are not even covered.

Risk assessments by shippers, carriers, and chemical receivers should look at this issue and take appropriate safety/security measures to eliminate this as a readily available attack mode.

Tuesday, August 16, 2011

NTSB Meeting – San Bruno Pipeline Fire


The National Transportation Safety Board (NTSB) announced in today’s Federal Register (76 FR 50759) that it would be holding a meeting on August 30, 2011 to review its report on the September 9, 2010 natural gas pipeline rupture and fire in San Bruno, CA. The meeting in Washington, DC will be open to the public and may be viewed on-line on the NTSB web site.

This incident is the poster child for pipeline safety that is driving provisions for many of the pipeline safety bills that are currently pending in Congress. Specific topics that might be expected to come up in this meeting include:

• Control system issues;
• Pipeline integrity management;
• Pipeline right-of-way management;
• Emergency response planning;
• Emergency response notification;
• Pipeline pressure management; and
• The use of automatic shut-off controls.

The first issue may be of significant interest to multiple communities that read this blog. Joe Weiss continues to identify this incident as a control system cyber incident that could have ICS security implications. Neither Joe nor anyone else I have read or talked to has even hinted that they thought that this was a result of a deliberate attack on a control system. Instead many people have expressed concerns that control system shortcomings identified in this incident could be exploited in a possible attack on pipelines. The expected call for the expanded use of automated shutoff valves would extend the range of the possible cyber-attacks on pipelines.
 
/* Use this with templates/template-twocol.html */