result from an unauthorized release of a 
covered substance of concern; and 
(iii) prepare a prevention, prepared-
ness, and response plan that incorporates 
the results of those vulnerability and haz-
ard assessments. 
(B) ACTIONS AND PROCEDURES.—A pre-
vention, preparedness, and response plan re-
quired under subparagraph (A)(iii) shall in-
clude— 
(i) actions and procedures, including 
safer design and maintenance of the chem-
ical source, to eliminate or significantly 
lessen the potential consequences of an un-
authorized release of a covered substance 
of concern; 
(ii) a specific numeric goal for the 
percent by which the size of the vulner-
ability zone, as measured by distance to an 
endpoint, will be reduced, relative to the 
size of the vulnerability zone reported in 
the offsite consequence analysis most re-
cently submitted pursuant to section 
112(r) of the Clean Air Act (42 U.S.C. 
7412(r));
(iii) such security measures as are 
necessary— 
(I) to reduce vulnerability of the 
chemical source to release of a covered 
substance of concern until actions and 
procedures planned under subpara-
graph (B)(i) have been implemented; 
and 
(II) to reduce vulnerability of the 
chemical source to release of a covered 
substance of concern that remains 
after actions and procedures planned 
under subparagraph (B)(i) have been 
implemented; and 
(iv) for emergency response plans, an 
evaluation of the adequacy of evacuation 
plans for the population living within the 
vulnerability zone. 
(C) THREAT INFORMATION.—To the max-
imum extent permitted by applicable authorities 
and the interests of national security, the Sec-
retary, in consultation with the Administrator, 
shall provide owners and operators of chemical 
sources with threat information relevant to the
assessments and plans required under sub-
section (b). 
(4) REVIEW AND REVISIONS.—Not later than 5 
years after the date of promulgation of regulations 
under each of paragraphs (1) and (3), the Adminis-
trator, in consultation with the Secretary, shall re-
view the regulations and make any necessary revi-
sions. 
(5) ADDITION OF SUBSTANCES OF CONCERN.— 
For the purpose of designating high priority cat-
egories under paragraph (1) or any subsequent revi-
sion of the regulations promulgated under paragraph 
(1), the Administrator, in consultation with the Sec-
retary, may designate additional substances that 
pose a serious threat as substances of concern. 
(b) CERTIFICATION.— 
(1) VULNERABILITY
AND
HAZARD
ASSESS-
MENTS.—Not later than 1 year after the date of 
promulgation of regulations under subsection (a)(3), 
each owner and each operator of a chemical source 
that is within a high priority category designated 
under subsection (a)(1) shall— 
(A) certify to the Administrator that the 
chemical source has conducted assessments in 
accordance with the regulations; and
(B) submit to the Administrator written 
copies of the assessments. 
(2) PREVENTION, PREPAREDNESS, AND
RE-
SPONSE
PLANS.—(A) Not later than 18 months 
after the date of promulgation of regulations under 
subsection (a)(3), the owner or operator shall certify 
to the Administrator that the chemical source has 
completed a prevention, preparedness, and response 
plan that incorporates the results of the assessments 
and complies with the regulations. 
(B) Such certification shall include— 
(i) the goal for reducing the size of the vul-
nerability 
zone, 
described 
in 
section 
(a)(3)(B)(ii); 
(ii) a general description of each option 
considered, within each element of safer design 
and maintenance, in developing the prevention, 
preparedness, and response plans; 
(iii) a general description of each option 
selected for implementation; and 
(iv) for options not implemented, an indi-
cation of the reason(s). 
(3) 5-YEAR REVIEW.—Not later than 5 years 
after each of the dates of submission of a copy of 
an assessment under paragraph (1) and a plan
under paragraph (2), and not less often than every 
3 years thereafter, the owner or operator of the 
chemical source covered by the assessment or plan, 
in coordination with local law enforcement and first 
responders, shall— 
(A) review the adequacy of the assessment 
or plan, as the case may be; and 
(B)(i) certify to the Administrator that the 
chemical source has completed the review; and 
(ii) as appropriate, submit to the Adminis-
trator any changes to the assessment or plan. 
(4) PROTECTION OF INFORMATION.— 
(A) 
DISCLOSURE
EXEMPTION.—Except 
with respect to certifications specified in para-
graphs (1) through (3) of this subsection and 
section 5(a), all information provided to the Ad-
ministrator under this subsection, and all infor-
mation derived from that information, shall be 
exempt from disclosure under section 552 of 
title 5, United States Code. 
(B) DEVELOPMENT OF PROTOCOLS.—Not 
later than 1 year after the date of enactment of 
this Act, the Administrator, in consultation 
with the Secretary, shall develop such protocols 
as are necessary to protect the copies of the as-