Securing Critical Chemical Assets:Securing Critical Chemical Assets:The Responsible CareThe Responsible Care®® Security Code Security Code

Protection of Hazardous Installations from Intentional Adversary Acts

European Commission

Budapest 27 April 2005

Dorothy KelloggAmerican Chemistry Council

Chemicals Are EssentialChemicals Are Essential

• Safety & Security

• Other Critical Assets

• Economy

The chemical industry is the only thing between us and living in huts.

Gregory D. L. MorrisMuseum of American Financial History

Responsible CareResponsible Care®® Security Security CodeCode

• Analysis of Threats, Vulnerabilities and Consequences

• Information/Cyber Security

• Enhanced Security Measures

• Training, Drills & Guidance

• 3 Party Verification

• Leadership Commitment

• Documentation & Audits

• Communication Dialogue & Information Exchange

• Response to Security Threat & Incidence

• Change Management

• Continuous Improvement

Plan Leadership

Commitment

Prioritize

Assess

ActSecurity Measures

Security Plans

Training & Exercises

Communicate

Check Independent

3d party verification

RCMS 3d party

certification

Improve MOC

Continuous Improvement

DocumentDocument

RCSC Security RCSC Security Management SystemManagement System

AuditAudit

Four Tiers:• Tiers 1-3 – serious potential off-site impact• Tier 4 – no expected serious off-site impact

Based on:• Attractiveness of the Target• Consequence Severity• Likelihood of Success

Prioritize FacilitiesPrioritize Facilities

Assess Security Assess Security VulnerabilitiesVulnerabilities

Understand Security-Related Risks

Prioritize Risks & Identify Countermeasures

4 Categories of Threat: (1) Uncontrolled releases

(2) Theft

(3) Product contamination

(4) Significant economic disruption

“Off-Site Impact” could be from any of the 4

Site Vulnerability Site Vulnerability AssessmentsAssessments

Facility Characterization– Assets– Consequences– Attractiveness

Facility Threat Identification

– Threat intelligence– Internal & external

adversaries– Characteristics/capabilities

Vulnerability Analysis

– Attack scenarios– Layers of protection– Attractiveness

Countermeasures– Deter/Detect/Delay– Recommendations– Documentation

Physical Security Examples:– Perimeter Barriers– Access Controls– Surveillance– Process Control Systems & Equipment– Loss Prevention/Materials Control/Accountability– Policies & Procedures– Crisis Management & Emergency Response Plans

Security Enhancements: Security Enhancements: Physical SecurityPhysical Security

Security Enhancements Must be Appropriate to the Conditions at the Site

Site Security ProgressSite Security Progress

Tier 1 Tier 2 Tier 3 Tier 4

Complete Site Vulnerability Assessments

Dec 02* June 03* Dec 03* Dec 03*

Complete Implementation of Site Security Measures

Dec 03 June 04 Dec 04 Dec 04

Verification of Physical Site Security Measures

Mar 04* Sept 04* Mar 05* N/A

Number of Facilities Reported

112 376 546 1005

2040 Facilities Completed SVAs; $2 Billion Invested since 9/11

* Reported to ACC

Reliance on Government Reliance on Government & Other Infrastructure& Other Infrastructure

Transportation & Value ChainCyber SystemsFederal Government

– Information– Cross-Sector Strategies– Resources– Information Protection

State & Local Government– Information Protection– Protection– Response

RCSC & Government RCSC & Government Security ProgramsSecurity Programs

• Recommendations to non-ACC chemical assets

• US General Accountability Office -- http://www.gao.gov/new.items/d05327.pdf

• US Coast Guard Maritime Transportation Security Program

• US Customs-Trade Partnership Against Terrorism (C-TPAT)

• State Security Programs

• Proposed Federal Legislation

ResourcesResources

Responsible Care® Materialshttp://www.responsiblecaretoolkit.com/security.asp

ACC Site Security Guidelineshttp://www.accnewsmedia.com/docs/100/89.pdf

ACC Transportation Security Guidelines

http://www.accnewsmedia.com/docs/300/250.doc?DocTypeID=4&TrackID=

ConclusionsConclusions

Chemical Industry - National Strategic Asset

Committed to Performance

Security is Not Environment or Safety “Plus”

Security Important before 11 September;

Heightened by 11 September;

Remains Critical Today

Dorothy Kellogg011-703-741-5236Dorothy_Kellogg@americanchemistry.com