RBPS 9 - Response is the performance standard that addresses the development and exercising of an emergency plan to respond to security incidents with the assistance of local law enforcement and first responders.
Appropriately trained personnel should be able to prepare for, respond to, and recover from security incidents such as a fire, aerial release, or other loss of containment of a chemical of interest (COI) at a covered chemical facility. Planning and training are important to ensure that facility personnel, on-site security, law enforcement, and first responders are ready to respond to the consequences of a security incident, and to report external and internal security incidents in a timely manner.
- Read or download the CFATS RBPS Guidance
- Read or download the RBPS 9 - Response Fact Sheet
- The DHS Infrastructure Protection (IP) Gateway is a repository of critical infrastructure tools and information, including certain Chemical Facility Anti-Terrorism (CFATS) data on a geospatial map. IP Gateway improves coordination between Federal, State and local governments, and community stakeholders to prevent, prepare for, and respond to chemical incidents.
- Read or download the CFATS and IP Gateway Fact Sheet
Security Response vs. Emergency Response
It is important not to confuse a “security response,” which is intended to engage and neutralize adversaries, with the broader “emergency response,” which follows an attack and attempts to reduce the severity of the event. The initial “security response” has tactical considerations, whereas the “emergency response” relates to the more traditional efforts to contain the damage and mitigate the consequences of a security incident. Facilities should address both security response and emergency response in their emergency plan.
Having established relationships, lines of communications, and plans in place can assist in reducing the impact of these security incidents that might include:
- Theft or diversion of a COI
- On-site fire, explosion, or release of a COI
- Loss of containment of a COI
Security Measures for Response
Facilities should consider security measures that involve a response from not only designated facility emergency response personnel, but all facility personnel, as well as local law enforcement and other offsite emergency responders that include:
- Identifying hazards
- Planning an effective response
- Identifying the number of responders needed
- Identifying the response skills needed for different types of adversary events
- Equipping and training response personnel to maximize their efficiency and knowledge of a site
Crisis Management Plan
One of the most important elements for a successful response to an incident is a well-thought-out, documented crisis management plan, upon which the relevant individuals have been trained.
Crisis management plans should contain strategies for responding to different types of security incidents, including:
- Contingency plans
- Continuity of operations plans
- Emergency response
- Security response
- Post-incident security (e.g. post-terrorist attack, security incident, accident, hurricane, or other natural disaster)
- Notification control and contact requirements
Crisis management plans generally include documented agreements with off-site responder services, including:
- Ambulance/medical support
- Firefighting support
- Marine support
- Environmental restoration support
- Hazardous spill/recovery support
- Explosive device disposal support
Training, Drills, and Exercises
The best plans are of limited value in a crisis if the individuals responsible to respond are not prepared to do so. Training, drills, and exercises (such as tabletop and full scale exercises) play a vital role in maximizing and testing the efficiency of the response plan to a security incident. Involving local first responders when preparing the plan and conducting drills improves responder understanding of the facility’s layout and of hazards associated with the facility.