Protecting and Securing Chemical Facilities from Terrorist Attacks Act of 2018

To reauthorize the Chemical Facility Anti-Terrorism Standards Program of the Department of Homeland Security. 1. Short title; table of contents (a) Short title This Act may be cited as the Protecting and Securing Chemical Facilities from Terrorist Attacks Act of 2018 (b) Table of contents The table of contents for this Act is as follows: Sec. 1. Short title; table of contents. Sec. 2. Definitions. Sec. 3. Expedited approval program. Sec. 4. CFATS Recognition Program. Sec. 5. Frequency of audits and inspections. Sec. 6. Personnel surety program. Sec. 7. Security risk assessment approach and corresponding tiering methodology. Sec. 8. Annual performance reporting. Sec. 9. Specific products and mixtures containing chemicals of interest. Sec. 10. CFATS regulations. Sec. 11. Explosive materials. Sec. 12. Changes to Appendix A to part 27 of title 6, Code of Federal Regulations. Sec. 13. Assessment, report, briefing, and updated retrospective estimate on costs. Sec. 14. Effective date. Sec. 15. Termination. Sec. 16. Technical and conforming amendment. 2. Definitions Section 2101(8) of the Homeland Security Act of 2002 ( 6 U.S.C. 621(8) section 2102(c)(4)(B)(i) section 2102(c)(4) by the Secretary that identifies specific security measures that are sufficient to meet the risk-based performance standards for facilities in tiers 3 and 4 that elect to utilize the expedited approval program 3. Expedited approval program Section 2102(c)(4) of the Homeland Security Act of 2002 ( 6 U.S.C. 622(c)(4) (1) in subparagraph (A)(i), by striking subparagraph (C) subparagraph (C)(i) (2) in subparagraph (B)— (A) in clause (i), by striking Not later than the Secretary shall issue The Secretary shall maintain (B) by striking clause (iii); (3) in subparagraph (C)— (A) in clause (iii), by redesignating subclauses (I) through (III) as items (aa) through (cc), respectively, and adjusting the margins accordingly; (B) by redesignating clauses (i) through (viii) as subclauses (I) through (VIII), respectively, and adjusting the margins accordingly; (C) in the matter preceding subclause (I), as so redesignated, by striking The owner (i) In general The owner ; and (D) by adding at the end the following: (ii) Risk-based performance standards In submitting a site security plan and certification under subparagraph (A)(i), an owner or operator of an expedited approval facility should consider using the guidance for expedited approval facilities to determine appropriate measures for the site security plan of the expedited approval facility. ; (4) in subparagraph (D)— (A) in clause (i), by striking subparagraph (C) subparagraph (C)(i) (B) in clause (iii)— (i) by striking 30 7 (ii) by striking subparagraph (C) subparagraph (C)(i) (5) in subparagraph (F)(i)(I), by striking subparagraph (C) subparagraph (C)(i) (6) by striking subparagraph (I) and inserting the following: (I) Notice by the Secretary The Secretary shall provide notice to each covered chemical facility of the expedited approval program under this paragraph. . 4. CFATS Recognition Program Section 2102(c) of the Homeland Security Act of 2002 ( 6 U.S.C. 622(c) (5) CFATS Recognition Program (A) Definitions In this paragraph— (i) the term CFATS Recognition Program (ii) the term participating facility (iii) the term participating industry stewardship program (I) meets the eligibility requirements under subparagraph (C)(i); and (II) provides regulatory recognition to covered chemical facilities that meet industry best practices; and (iv) the term sponsor organization (B) Establishment (i) In general Not later than 270 days after the date of enactment of this paragraph, the Secretary shall establish a program that shall be known as the CFATS Recognition Program— (I) with the goal of leveraging CFATS regulations and industry stewardship programs to further enhance security relating to hazardous chemicals; and (II) under which the Secretary shall— (aa) establish— (AA) eligibility criteria under subparagraph (C)(i) for industry stewardship programs seeking to participate in the CFATS Recognition Program; and (BB) performance requirements under subparagraph (C)(ii) for participating facilities; (bb) provide incentives under subparagraph (C)(iii) to encourage participation in the CFATS Recognition Program; and (cc) issue such guidance as the Secretary deems necessary or appropriate for the implementation of the CFATS Recognition Program. (ii) Applicability of other laws During the period before the Secretary has met the deadline under clause (i), in developing and issuing, or amending, the guidance relating to carrying out the CFATS Recognition Program and collecting information from industry stewardship programs, sponsor organizations, and participating facilities, the Secretary shall not be subject to— (I) section 553 of title 5, United States Code; (II) subchapter I of chapter 35 (III) section 2107(b) of this Act. (C) Eligibility criteria; facility performance requirements; incentives (i) Eligibility criteria for industry stewardship programs Not later than 270 days after the date of enactment of this paragraph, the Secretary shall establish minimum eligibility criteria for industry stewardship programs desiring to be considered by the Secretary for participation in the CFATS Recognition Program that shall include— (I) a requirement that any industry stewardship program desiring to participate in the CFATS Recognition Program be governed by an industry association or technical organization that is an entity described in paragraph (3) or (6) of section 501(c) (II) a documented top management commitment to chemical facility security; (III) criteria relating to— (aa) program auditing requirements and frequency; (bb) security vulnerability assessment requirements and frequency; and (cc) security measures that align with the risk-based performance standards established under subsection (a)(2)(C), including— (AA) detection measures; (BB) delay measures; (CC) cybersecurity measures; (DD) response measures; and (EE) security management; and (dd) reporting required to be done by any industry stewardship program desiring to participate in the CFATS Recognition Program. (ii) Performance requirements for participating facilities The Secretary shall require that each participating facility— (I) submit an acknowledgment by the sponsor organization of the participating industry steward program, of which the participating facility is a member, that the participating facility is— (aa) a member in good standing of the participating industry stewardship program; and (bb) in full compliance with the requirements of the participating industry stewardship program; and (II) promptly notify the Secretary if the participating facility ceases to be— (aa) a member in good standing of the participating industry stewardship program; or (bb) in full compliance with the requirements of the participating industry stewardship program. (iii) Program incentives Not later than 270 days after the date of enactment of this paragraph, the Secretary shall— (I) establish incentives for participation in the CFATS Recognition Program, which shall include— (aa) a reduction in the frequency of compliance inspections, except— (AA) in the case of any inspection relating to any planned measure in the site security plan of a participating facility that has not been fully implemented; or (BB) in a case in which a participating facility is not in full compliance with the requirements under the Chemical Facility Anti-Terrorism Standards Program; (bb) streamlined vulnerability assessment and site security plan processes; and (cc) any other regulatory relief as determined appropriate by the Secretary; and (II) provide written guidance on any incentive established under subclause (I). (D) Evaluation Not later than 1 year after the date on which the CFATS Recognition Program is established under subparagraph (B)(i), the Secretary shall provide a briefing to the Committee on Homeland Security and Governmental Affairs of the Senate and the Committees on Homeland Security and Energy and Commerce of the House of Representatives on the progress in carrying out the CFATS Recognition Program. . 5. Frequency of audits and inspections Section 2102(d)(1) of the Homeland Security Act of 2002 ( 6 U.S.C. 622(d)(1) (1) in subparagraph (B), by striking The Secretary Subject to subparagraph (G), the Secretary (2) by adding at the end the following: (G) Frequency of audits and inspections (i) In general Except as provided in clauses (ii) and (iii), the Secretary may not conduct any audit or inspection under this paragraph of a covered chemical facility more frequently than once every 2 years. (ii) CFATS Recognition Program Except as provided in clause (iii), in the case of a covered chemical facility that participates in the CFATS Recognition Program under subsection (c)(5) and meets compliance, audit, and inspection requirements under that program, the Secretary may not conduct any audit or inspection under this paragraph of that covered chemical facility more frequently than once every 3 years. (iii) Increased frequency of audits and inspections The Secretary may conduct audits and inspections more frequently than provided in clauses (i) and (ii) when— (I) the covered chemical facility has identified planned enhancements that have not yet been validated by an audit or inspection; (II) a deficiency or infraction at the covered chemical facility has been identified that may result in an enforcement action against the covered chemical facility; (III) an elevated or specific threat has been identified; (IV) a security incident or suspicious activity has occurred at the covered chemical facility; or (V) the Secretary determines that an inspection or audit is warranted by exigent circumstances. . 6. Personnel surety program Section 2102(d)(2)(A) of the Homeland Security Act of 2002 ( 6 U.S.C. 622(d)(2)(A) (1) in the matter preceding clause (i), by inserting is mandatory for each owner or operator of a covered chemical facility assigned to tier 1 or 2 and optional for each owner or operator of a covered chemical facility assigned to tier 3 or tier 4 that carry out a Personnel Surety Program that (2) in clause (ii), by inserting who will have access to any chemical of interest designated under Appendix A to part 27 of title 6, Code of Federal Regulations, or any successor thereto, about an individual 7. Security risk assessment approach and corresponding tiering methodology Section 2102(e) of the Homeland Security Act of 2002 ( 6 U.S.C. 622(e) (1) in paragraph (2)(A), by striking develop maintain (2) in paragraph (3)— (A) in subparagraph (B)— (i) by striking the period at the end and inserting , including— (ii) by adding at the end the following: (i) each input and assumption under the tiering methodology; (ii) the rationale for each input; and (iii) the output of the tiering methodology. ; and (B) by adding at the end the following: (C) Reports Not later than 30 days after the Secretary makes a determination that tiering for a covered chemical facility is changed, or that a covered chemical facility is no longer subject to the requirements under this title, the Secretary shall submit to the owner or operator of the covered chemical facility a written report that contains— (i) the information described in subparagraphs (A) and (B); and (ii) a controlled unclassified statement— (I) of the criteria under paragraph (2)(B) and how the security risk of terrorism associated with the covered chemical facility was evaluated under those criteria; and (II) that includes any chemical-terrorism vulnerability information (as defined in section 27.105 of title 6, Code of Federal Regulations, or any successor thereto) relating to the determination. (D) Public disclosure Reports submitted to the owner or operator of the covered chemical facility under subparagraph (C) shall be protected from public disclosure under section 2103. . 8. Annual performance reporting Section 2102(e)(4) of the Homeland Security Act of 2002 ( 6 U.S.C. 622(e)(4) (1) in the paragraph heading, by striking Semiannual Annual (2) in the matter preceding subparagraph (A)— (A) by striking 6 months after the date 1 year after the date (B) by striking 2014 2018 (C) by striking once every 6 months once each year (3) by striking subparagraph (C); (4) by redesignating subparagraph (D) as subparagraph (C); (5) by inserting after subparagraph (C), as so redesignated, the following: (D) the effectiveness of the Chemical Facility Anti-Terrorism Standards Program at— (i) managing security risks; and (ii) developing and using appropriate metrics and analysis capabilities to measure risk reduction, including— (I) vulnerability and consequence mitigation indicators; and (II) outcome metrics that measure cumulative risk reduction over time; and ; (6) by striking subparagraph (E); and (7) by redesignating subparagraph (F) as subparagraph (E). 9. Specific products and mixtures containing chemicals of interest Section 2102(e) of the Homeland Security Act of 2002 ( 6 U.S.C. 622(e) (5) Specific products and mixtures containing chemicals of interest (A) Definitions In this paragraph— (i) the term chemical of interest (ii) the term covered product or mixture (B) In general The Secretary may exclude a covered product or mixture from the designation as a chemical of interest for the purposes of the definition of the term chemical facility of interest (C) Regulations (i) Promulgation Not later than 1 year after the date of enactment of this paragraph, the Secretary shall promulgate regulations to prescribe a process under which an interested party may petition the Secretary for exclusion of a covered product or mixture under subparagraph (B). (ii) Federal information policy In collecting information from petitioners pursuant to this subparagraph, the Secretary shall not be subject to subchapter I of chapter 35 . 10. CFATS regulations Section 2107(b) of the Homeland Security Act of 2002 ( 6 U.S.C. 627(b) (1) in paragraph (1), by inserting ( Public Law 113–254 2014 (2) in paragraph (2), by striking 2014 2018 11. Explosive materials (a) In general Title XXI of the Homeland Security Act of 2002 ( 6 U.S.C. 621 6 U.S.C. 629 2109. Explosive materials The Secretary may not designate any explosive material subject to regulation by the Department of Justice under chapter 40 . (b) Technical and conforming amendment The table of contents in section 1(b) of the Homeland Security Act of 2002 ( Public Law 107–196 Sec. 2109. Explosive materials. . 12. Changes to Appendix A to part 27 of title 6, Code of Federal Regulations (a) In general Title XXI of the Homeland Security Act of 2002 ( 6 U.S.C. 621 2110. Changes to Appendix A to part 27 of title 6, Code of Federal Regulations (a) Definition In this section, the term Appendix A (b) Notice of proposed rulemaking The Secretary shall publish a notice of proposed rulemaking in the Federal Register relating to any proposed change to Appendix A if the Secretary determines that— (1) a chemical should be designated as a chemical of interest under Appendix A; (2) a chemical designated as a chemical of interest under Appendix A should not be so designated; or (3) a chemical amount, concentration, or threshold quantity described in Appendix A should be modified. . (b) Technical and conforming amendment The table of contents in section 1(b) of the Homeland Security Act of 2002 ( Public Law 107–196 Sec. 2110. Changes to Appendix A to part 27 of title 6, Code of Federal Regulations. . 13. Assessment, report, briefing, and updated retrospective estimate on costs (a) Definitions In this section— (1) the term applicable committee (A) the Committee on Homeland Security and Governmental Affairs of the Senate; (B) the Committee on Homeland Security of the House of Representatives; and (C) the Committee on Energy and Commerce of the House of Representatives; (2) the terms CFATS regulation covered chemical facility 6 U.S.C. 621 (3) the term Chemical Facility Anti-Terrorism Standards Program (A) the Chemical Facility Anti-Terrorism Standards Program initially authorized under section 550 of the Department of Homeland Security Appropriations Act, 2007 ( Public Law 109–295 (B) the Chemical Facility Anti-Terrorism Standards Program subsequently authorized under section 2102(a) of the Homeland Security Act of 2002 ( 6 U.S.C. 622(a) (4) the term Department (5) the term inspector 6 U.S.C. 621 (6) the term Secretary (b) Third-Party assessment (1) In general Not later than 90 days after the date of enactment of this Act, using amounts appropriated to the Department before the date of enactment of this Act, the Secretary shall commission a third-party study, which shall be completed not later than 1 year after the date on which the third-party study is commissioned, to assess the effectiveness of the Chemical Facility Anti-Terrorism Standards Program in— (A) managing security risks; (B) developing and using appropriate metrics and analysis capabilities to measure risk reduction, including— (i) vulnerability and consequence mitigation indicators; and (ii) outcome metrics that measure cumulative risk reduction over time; and (C) engaging with and making necessary information available to first responders and emergency planners and, if necessary, improving the degree of situational awareness of first responders and emergency planners that is needed to prepare for and respond to security incidents at high-risk chemical facilities. (2) Briefing and submission of study Not later than 90 days after the date on which the third-party study described in paragraph (1) is completed, the Secretary shall— (A) brief each applicable committee on the results of the third-party study; and (B) submit a copy of the completed third-party study to each applicable committee. (c) GAO report Not later than 2 years after the date of enactment of this Act, the Comptroller General of the United States shall submit to each applicable committee a report on inspector training that contains recommendations for improving inspector training, including recommendations relating to— (1) how the Department selects inspectors; (2) initial training required for inspectors before the inspectors are selected by the Department to be used to conduct inspections; (3) qualification standards required to be met by inspectors before they are selected by the Department to be used to conduct inspections; (4) on-the-job training required for inspectors and how that training is documented; (5) final qualification and approval standards required to be met by inspectors before the inspectors are initially used by the Department to conduct inspections; (6) continuing qualification standards required to be met by inspectors while the inspectors are used by the Department to conduct inspections; (7) continuous training required for inspectors while the inspectors are used by the Department to conduct inspections; and (8) improving cybersecurity training. (d) Annual briefing Not later than 1 year after the date of enactment of this Act, and each year thereafter for 5 years, the Secretary shall brief each applicable committee on the activities carried out under this section and under title XXI of the Homeland Security Act of 2002 ( 6 U.S.C. 621 (1) detailed information relating to— (A) as of the date on which the briefing is made— (i) threats to covered chemical facilities; and (ii) how chemicals of interest are being utilized by bad actors in the threat environment— (I) in the United States; and (II) globally; (B) how CFATS regulations play a role in making the United States safer; and (C) how the Chemical Facility Anti-Terrorism Standards Program is effectively addressing the threat landscape; and (2) data, rationale, and metrics on how the Chemical Facility Anti-Terrorism Standards Program effectively reduces risks. (e) Updated retrospective estimate on costs Not later than 1 year after the date of enactment of this Act, the Secretary shall complete a retrospective estimate of the costs, including costs to the Government, regulated entities, and the public, of carrying out the Chemical Facility Anti-Terrorism Standards Program during the period beginning on the first day of fiscal year 2006 and ending on the last day of fiscal year 2018. (f) Repeal Section 3 of the Protecting and Securing Chemical Facilities from Terrorist Attacks Act of 2014 ( Public Law 113–254 14. Effective date This Act, and the amendments made by this Act, shall take effect on the date that is 30 days after the date of enactment of this Act. 15. Termination The authority provided under title XXI of the Homeland Security Act of 2002 ( 6 U.S.C. 621 16. Technical and conforming amendment The table of contents in section 1(b) of the Homeland Security Act of 2002 ( Public Law 107–196

Summary: Protecting and Securing Chemical Facilities from Terrorist Attacks Act of 2018 This bill: (1) reauthorizes the Department of Homeland Security's Chemical Facility Anti-Terrorism Standards (CFATS) Program, and (2) establishes a CFATS Recognition Program with the goal of leveraging CFATS regulations and industry stewardship programs to further enhance security relating to hazardous chemicals.