Related Resources

• Chemical-terrorism Vulnerability Information

Sharing Chemical-terrorism Vulnerability Information

General Need-to-Know Requirements
The Chemical Security Compliance Division provides each authorized user with an unique identification number. Before sharing Chemical-terrorism Vulnerability Information, ask for this number. If you are unsure that the provided number is accurate, you may send an email to csat@dhs.gov to confirm the number’s validity.

Access to material containing Chemical-terrorism Vulnerability Information requires the holder of the information to verify that the recipient is an authorized user with a valid need to know and that the transfer complies with all applicable requirements for dissemination as marked on the Chemical-terrorism Vulnerability Information, as stipulated in the Procedural Manual Safeguarding Information Designated as Chemical-Terrorism Vulnerability Information (CVI) (PDF, 59 pages - 228 KB) or as established in the Federal regulations.

For recipients who are state and local government officials, need-to-know determinations will be made by the state Chemical-terrorism Vulnerability Information Security Officer (unless otherwise noted in the Memorandum of Agreement between the Department of Homeland Security and the state [PDF, 3 pages - 30 KB] ).

Chemical-terrorism Vulnerability Information-Specific Need-to-Know Requirements
Within the Department of Homeland Security, federal employees may share Chemical-terrorism Vulnerability Information directly with other employees and contractors who have a need to know. Employees of other Federal agencies who are covered by a Memorandum of Agreement may share Chemical-terrorism Vulnerability Information in the same manner as Department of Homeland Security employees.

Individuals in states covered by a Memorandum of Agreement will rely on the state’s Chemical-terrorism Vulnerability Information Security Officer to determine need to know.  Individuals within a state or local government—or their contractors—seeking to share Chemical-terrorism Vulnerability Information will prepare a request and submit this to the state’s Chemical-terrorism Vulnerability Information Security Officer.  If a state or local official wants to share Chemical-terrorism Vulnerability Information beyond the scope of the Memorandum of Agreement, the person seeking Chemical-terrorism Vulnerability Information must submit a request to the Chemical Security Compliance Division Security Officer. 

Federal grantees and contractors may not disclose Chemical-terrorism Vulnerability Information without consent from the Department of Homeland Security Assistant Secretary for Infrastructure Protection. Private-sector third parties that receive Chemical-terrorism Vulnerability Information from a chemical facility may under no circumstances further disclose Chemical-terrorism Vulnerability Information  to any other party.

Chemical facilities may share Chemical-terrorism Vulnerability Information with private third parties. The Chemical Security Compliance Division asks that the chemical facility provide notice when this action occurs. Private-sector third parties that receive Chemical-terrorism Vulnerability Information  from a chemical facility may under no circumstances disclose Chemical-terrorism Vulnerability Information  to any other party. Violation of this requirement is grounds for a civil penalty or other corrective action by the Department of Homeland Security. Corrective action may include issuance of an order requiring retrieval of Chemical-terrorism Vulnerability Information or an order to cease future unauthorized disclosure.

Chemical facilities may share Chemical-terrorism Vulnerability Information with state and local governments provided these entities have entered into a Memorandum of Agreement with the Chemical Security Compliance Division and the recipient is an authorized user with a valid need to know.  This type of sharing does not require the consent of the Chemical Security Compliance Division Director.

Security Officer
If the state or local entity has not entered into a Memorandum of Agreement, they should be referred to the Chemical Security Compliance Division's Chemical-terrorism Vulnerability Information  Security Officer, who has three functions:

• Assistance. Authorized users have a local resource in the Chemical-terrorism Vulnerability Information Security Officer for questions and concerns regarding the continued safeguarding of Chemical-terrorism Vulnerability Information. The Chemical-terrorism Vulnerability Information Security Officer will receive more in-depth training about protecting Chemical-terrorism Vulnerability Information  from misuse or mishandling. 
• Oversight. The Chemical-terrorism Vulnerability Information Security Officer will be responsible for conducting self-inspections to assure authorized users comply with the safeguarding requirements defined in the procedural manual.  The Chemical-terrorism Vulnerability Information Officer is also the initial investigator into any suspected disclosure violations.
• Coordination. The Chemical Security Compliance Division will direct program updates, alerts, or additional authorized user training through the Chemical-terrorism Vulnerability Information Security Officer. The Chemical Security Compliance Division also expects the Chemical-terrorism Vulnerability Information Security Officer to provide feedback from authorized users about ways to improve the program or address shortcomings in the existing procedures.

This page was last modified on October 4, 2007