Written Statement of Clyde D. Miller Director, Corporate Security BASF Corporation



Similar documents
Re: Docket No. DHS , Advanced Notice of Proposed Rulemaking on the Chemical Facility Anti-Terrorism Standards

Best Practices: Meeting CFATS Performance Requirements A Town Hall Meeting

Written Statement of. Timothy J. Scott Chief Security Officer and Corporate Director Emergency Services and Security The Dow Chemical Company

TESTIMONY. Analyzing Terrorism Risk HENRY WILLIS CT-252. November 2005

Actions to Improve Chemical Facility Safety and Security A Shared Commitment Report of the Federal Working Group on Executive Order 13650

The Office of Infrastructure Protection

CRITICAL INFRASTRUCTURE PROTECTION. DHS Action Needed to Verify Some Chemical Facility Information and Manage Compliance Process

RE: Notice of Proposed Rulemaking, Request for Comments: Operation and Certification of Small Unmanned Aircraft Systems [Docket No.

Homeland Security Alert

Written Testimony. Dr. Andy Ozment. Assistant Secretary for Cybersecurity and Communications. U.S. Department of Homeland Security.

Testimony of Dan Nutkis CEO of HITRUST Alliance. Before the Oversight and Government Reform Committee, Subcommittee on Information Technology

Statement of. Thomas A. Allegretti President & CEO The American Waterways Operators


Statement of. before the. Committee on Homeland Security Subcommittee on Oversight and Management Efficiency U.S. House of Representatives

Indian Health Service Advances in Indian Health Conference April 30, Indian Health Care Reform

Office of Infrastructure Protection Infrastructure Security Compliance Division

Examining the Evolving Cyber Insurance Marketplace

Department of Homeland Security

DHS IT Successes. Rationalizing Our IT Infrastructure

STATEMENT OF JAMAIL LARKINS ASCENSION AIRCRAFT, INC. REPRESENTING THE NATIONAL BUSINESS AVIATION ASSOCIATION BEFORE THE COMMITTEE ON SMALL BUSINESS

Middle Class Economics: Cybersecurity Updated August 7, 2015

Statement of Gil Vega. Associate Chief Information Officer for Cybersecurity and Chief Information Security Officer. U.S. Department of Energy

Five-Year Strategic Plan

Preservation of longstanding, roles and missions of civilian and intelligence agencies

Department of Homeland Security Information Sharing Strategy

SPEECH. Gabriel Bernardino, Chairman of EIOPA. Towards a new virtuous cycle in consumer protection in insurance

Department of Finance. Strategic Plan California s Fiscal Policy Experts

UNITED STATES OFFICE OF PERSONNEL MANAGEMENT

Experience the commitment WHITE PAPER. Information Security Continuous Monitoring. Charting the Right Course. cgi.com 2014 CGI GROUP INC.

Department of Homeland Security

CompTIA and the State of Federal Information Security

Cruise Industry Regulation

Chairman Johnson, Ranking Member Carper, and Members of the committee:

Testimony of. Before the United States House of Representatives Committee on Oversight and Government Reform And the Committee on Homeland Security

November 30, Docket No. DHS Chemical Facility Anti-Terrorism Standards (CFATS) Appendix A. To Whom It May Concern:

DEPARTMENT OF HOMELAND SECURITY

Statement by. Mark E. Van Der Weide. Deputy Director. Division of Banking Supervision and Regulation. Board of Governors of the Federal Reserve System

TESTIMONY OF ZOË BAIRD, PRESIDENT, MARKLE FOUNDATION CHAIRMAN, TASK FORCE ON NATIONAL SECURITY IN THE INFORMATION AGE

Chair Cabinet Committee on State Sector Reform and Expenditure Control

Guide to Assessment and Rating for Services

[ P] Intent to Request Renewal From OMB of One Current Public Collection of

quality staff, NIST's management, starting in the mid 1980's, worked with Congress to establish an alternative personnel management system.

STATEMENT OF JOHN E. MCCOY II DEPUTY ASSISTANT INSPECTOR GENERAL FOR AUDITS U.S. DEPARTMENT OF HOMELAND SECURITY BEFORE THE

Statement. Mr. Paul A. Brinkley Deputy Under Secretary of Defense for Business Transformation. Before

ON: Examining Legislative Proposals to Modernize Business Development Companies and Expand Investment Opportunities

H. R To enhance cybersecurity information sharing and coordination at ports in the United States, and for other purposes.

GOVERNMENT RESPONSE TO THE CHILD INTERVENTION SYSTEM REVIEW

Testimony of Charles Jarvis, Vice Chair of the HIMSS EHR Association. House Ways and Means Committee, Health Subcommittee

CyberSkills Management Support Initiative

U.S. Office of Personnel Management. Actions to Strengthen Cybersecurity and Protect Critical IT Systems

Nurse Leaders in Native Care Conference. Indian Health Reform

American Trucking Associations 2200 Mill Road, Alexandria, VA

GAO PROTECTION OF CHEMICAL AND WATER INFRASTRUCTURE. Federal Requirements, Actions of Selected Facilities, and Remaining Challenges

The Dow Chemical Company. statement for the record. David E. Kepler. before

Before the. Committee on Energy and Commerce Subcommittee on Communications and Technology United States House of Representatives

How Cybersecurity Initiatives May Impact Operators. Ross A. Buntrock, Partner

GUIDELINE NO. 22 REGULATORY AUDITS OF ENERGY BUSINESSES

Testimony of. Doug Johnson. New York Bankers Association. New York State Senate Joint Public Hearing:

Principal risks and uncertainties

SOCMA Frequently Asked Questions on CFATS and Appendix A

Eric Hess, CEO, KeyPoint Government Solutions OPM Data Breach: Part II House Committee on Oversight and Government Reform June 24, 2015

WRITTEN TESTIMONY BY DAVID SNELL FEDERAL BENEFITS SERVICE DIRECTOR NATIONAL ACTIVE AND RETIRED FEDERAL EMPLOYEES ASSOCIATION

Docket No. DHS , Notice of Request for Public Comment Regarding Information Sharing and Analysis Organizations

STATEMENT JOHN P. WOODS

Department of Homeland Security Office of Inspector General. DHS' Role in State and Local Fusion Centers Is Evolving

STATEMENT OF. Dr. David McClure Associate Administrator Office of Citizen Services and Innovative Technologies General Services Administration

STATEMENT OF DIANA ESPINOSA DEPUTY ADMINISTRATOR, HEALTH RESOURCES AND SERVICES ADMINISTRATION BEFORE THE

TRANSITIONING THE IMF TO CADE2

Risk-Based Performance Standards Guidance Chemical Facility Anti-Terrorism Standards. May 2009

How To Support The Air Traffic Control Bill Of Rights

JOINT EXPLANATORY STATEMENT TO ACCOMPANY THE CYBERSECURITY ACT OF 2015

Public Company Accounting Oversight Board Strategic Plan: Improving the Quality of the Audit for the Protection and Benefit of Investors

ORAL TESTIMONY OF PATRICIA THOMPSON, CPA ON BEHALF OF THE AMERICAN INSTITUTE OF CERTIFIED PUBLIC ACCOUNTANTS BEFORE THE

Statement of Danny Harris, Ph.D. Chief Information Officer U.S. Department of Education

Following is a discussion of the Hub s role within the health insurance exchanges, the results of our review, and concluding observations.

Department of Homeland Security Office of Inspector General

How To Make A Terrorist Watchlist More Secure

FY2010 CONFERENCE SUMMARY: HOMELAND SECURITY APPROPRIATIONS

Written Statement of Richard Dewey Executive Vice President New York Independent System Operator

Testimony. Marilyn A. Pendergast, CPA. Chair, Ethics Committee. International Federation of Accountants (IFAC) before the

This page is intentionally left blank.

GAO COMBATING TERRORISM. Observations on Options to Improve the Federal Response. Testimony

STATEMENT OF J. RICHARD BERMAN ASSISTANT INSPECTOR GENERAL FOR AUDITS OFFICE OF INSPECTOR GENERAL U. S. DEPARTMENT OF HOMELAND SECURITY BEFORE THE

GAO CYBERSECURITY. Progress Made but Challenges Remain in Defining and Coordinating the Comprehensive National Initiative

PRINCIPLES AND GOOD PRACTICES

STATEMENT OF ROBERT A. TAYLOR DEPUTY ASSISTANT INSPECTOR GENERAL FOR AUDIT DEPARTMENT OF THE TREASURY OFFICE OF INSPECTOR GENERAL

Frequently Asked Hosting Questions 2015

Labour Mobility Act QUESTIONS AND ANSWERS

Supplemental Tool: NPPD Resources to Support Vulnerability Assessments

Quality Assurance in Romanian Technical and Vocational Education and Training

ISO/IEC Information Security Management. Securing your information assets Product Guide

CRITICAL INFRASTRUCTURE PROTECTION. DHS Action Needed to Enhance Integration and Coordination of Vulnerability Assessment Efforts

TESTIMONY. Kelli Ann Burriesci. Deputy Assistant Secretary for Screening Coordination. Office of Policy U.S. DEPARTMENT OF HOMELAND SECURITY BEFORE

Chapter 6: Develop a Stakeholder Engagement Strategy


STATEMENT OF SYLVIA BURNS CHIEF INFORMATION OFFICER U.S. DEPARTMENT OF THE INTERIOR BEFORE THE

IAEA Safety Standards for Regulatory Activities

National Occupational Standards. Compliance

ENERGY SECTOR CYBERSECURITY FRAMEWORK IMPLEMENTATION GUIDANCE

Science and Engineering Professional Framework

Transcription:

Written Statement of Clyde D. Miller Director, Corporate Security BASF Corporation Representing BASF and The American Chemistry Council To the United States House of Representatives Committee on Homeland Security Subcommittee on Cybersecurity, Infrastructure Protection, and Security Technologies Regarding a Legislative Hearing on the Chemical Facility Anti-Terrorism Standards Program Authorization and Accountability Act of 2014 February 27, 2014

Good morning, Chairman Meehan, Ranking Member Clarke and Members of the Committee. My name is Clyde Miller, and I am the director of corporate security for BASF Corporation. I am here today on behalf of BASF and the American Chemistry Council. At BASF, I am responsible for all of the security functions at our chemical facilities in North America and for the implementation of the Chemical Facility Anti-Terrorism Standards, or CFATS, at our facilities in the United States. I have been directly involved in that effort since CFATS inception. Last year, I was asked to serve on the Department of Homeland Security (DHS) commissioned Peer Review Panel analyzing the CFATS risk assessment methodology that was conducted by the Homeland Security Studies and Analysis Institute. For BASF and the chemical industry as a whole, security is an important aspect of our operations and there is no greater priority than the safety and security of our employees and the communities that surround our sites. I appreciate the opportunity to appear here this morning to provide feedback on the Chemical Facility Anti-Terrorism Standards Program Authorization and Accountability Act of 2014. To that end, I would like to emphasize the following points in my remarks: ONE: We support moving the CFATS regulation from an appropriations process to an authorization process. TWO: We support the implementation of the overarching findings and recommendations of the Peer Review Panel, in the manner mentioned in this bill. THREE: Dave Wulf and his team have done a tremendous job of turning the CFATS program around and moving toward an effective chemical facility security program. FOUR: The passage of this bill by no means conflicts with Executive Order 13650. If anything, it will add to enhancing and strengthening security throughout the sector one of the goals of the EO. Now, I would like to elaborate on these points. I. We support moving the CFATS program from an appropriations process to an authorization process. This bill, for the most part, codifies what is in the original 2006 spending bill, which established the nation s first comprehensive chemical facility security regulation. Like the original bill, it is short and to the point and validates the original premise of establishing a risk-based performance model for enhancing chemical facility security across the nation. I look at CFATS as an essay test rather than a multiple choice or fill-in-the-blank exam. Due to the CFATS security regulation being a collection of performance standards, a facility can implement a solution that draws from all available options to meet those 1

standards. And since not all facilities are the same, plans can also be tailored to address the unique needs of individual sites. To effectively comply with CFATS, an essay of measures has to be implemented. This can be perimeter-related measures as well as other security measures, combined with operating measures such as process cameras and alarms. The totality, or essay, becomes the regulation with which the facility complies and is given a pass or no-pass grade when undergoing a compliance inspection by DHS. A long-term authorized regulation provides industry with the confidence to make longterm capital investments. Further, having that certainty helps DHS in recruiting and retaining top talent to effectively oversee the regulation. The bill does not try to reinvent the wheel or add complexity to the program, which seemed to doom previous attempts at long-term authorizations. Instead, this bill has some narrow fixes in a few areas that need to be addressed, such as a simplified Alternative Security Program, similar to that used by the U.S. Coast Guard under the Maritime Transportation Security Act, implementation of third party inspectors and some simplified solutions to the personnel surety program. Concerning the Personnel Surety Program, the bill requires DHS to accept other well-established federal credentials that currently continually vet their holders against the Terrorist Screening Database with no further obligation required of the facility. This bill reiterates a part of the original regulation, using threat, vulnerability and consequence for assessing risk, which DHS had not been doing, as we discovered during the previously mentioned peer review process. The Peer Review Panel recommended DHS evaluate all three elements to fully assess risk, which is also required by the National Infrastructure Protection Program of 2009 and 2013. Finally, the bill sets up an oversight process to ensure the program continues to make improvements and establishes accountability by setting a timeline for the Secretary of DHS to report to Congress on its progress with implementation of recommendations made by the Peer Review Panel. II. We support the implementation of the overarching findings and recommendations of the Peer Review Panel, in the manner mentioned in this bill. A peer review panel was established last year by the Homeland Security Studies and Analysis Institute to study the methodology used by DHS to tier facilities covered under CFATS. This panel was made up of subject matter experts covering 15 areas of expertise, including industrial security, risk analysis, toxicology, process safety, infrastructure security and other pertinent areas. This effort resulted in a report setting out key findings and over-arching recommendations. As a member of that panel, it is gratifying to see that the effort is mentioned in this bill and requires DHS to report on the progress in implementation of those recommendations. III. Since Dave Wulf and his team have arrived at DHS; they have done a tremendous job of turning around the program and moving CFATS toward an effective chemical facility security program. 2

First, recognizing that the Chemical Security Assessment Tool (CSAT) process could be streamlined, they embraced the American Chemistry Council s Alternative Security Plan (ASP) template, which provides an alternate path for developing and submitting site security plans. Second, they significantly increased the number of approved site security plans, having recently passed the 500 th approved security plan. Third, they have greatly increased the pace of inspections, up to 100 inspections per month. They have completed nearly all of the Tier 1 and 2 high risk facilities and have started reaching into the Tier 3 and Tier 4 sites. BASF has had sites that have gone through these authorization inspections and I can assure you that the heightened pace has not reduced their effectiveness or compromised the program. Fourth, they recognized that implementing a new regulatory program required significant outreach to the regulated community. As a result, they have enhanced their outreach efforts, engaging with industry via sector councils and other means. They ve increased the number of Compliance Assistance Visits and inspectors regularly participate in introductory meetings with owners and operators of CFATS-regulated or potentially regulated facilities. Finally, DHS has undertaken efforts to better identify outlier facilities that should have submitted Top-Screens but have failed to do so by coordinating with other agencies such as EPA, the U.S. Coast Guard and state and local authorities. IV. The passage of this bill by no means conflicts with Executive Order 13650. If anything, it will add to enhancing and strengthening security throughout the sector one of the goals of the EO. As just mentioned, DHS is undertaking many of the activities being considered under the Executive Order. Passage of this bill will allow DHS to increase these activities that go to the heart of their mission ensuring chemical facility security throughout the sector. It is precisely these efforts, without any changes to the program that might hamper efficiency or speed, that the EO and Congress - should be encouraging and supporting. Passing this bill will give the program the permanency it needs so that it does not risk lapsing as occurred during the government shutdown last year. 3

Conclusion CFATS has had a positive impact on enhancing security at US chemical sites, and we support making this a permanent program for the approximately 4,500 sites that are regulated under CFATS. It is a robust program, for example at BASF we already had a fairly comprehensive and effective security program. However, for facilities under the CFATS regulation, we have seen increased capital spending and operating costs to ensure we meet or exceed the performance standards set out in the regulation. In complying with CFATS facilities have evaluated their processes and security programs and in some cases taken measures to reduce their risk and dropped out of the program. The previously mentioned Peer Review made recommendations to make some process changes to make the program more transparent and consistent. To try to reinvent CFATS by passing more comprehensive legislation, I m afraid, would have a significantly negative impact on the program. Congressional oversight via authorization would help DHS continue to address some of the challenges they have faced implementing the program, even as the Agency has made progress with a new management team. The industry has seen considerable increased activity from DHS, including improved quality of inspections and faster authorizations. Most importantly, DHS leadership has demonstrated a commitment to working with stakeholders to improve the implementation of the CFATS program. A long term authorization will provide the regulatory certainty and operational stability to give the industry confidence that our long term capital commitments to this program are appropriate, and provide a stronger foundation for the overall success of the program. We support and share in your efforts to provide a long term authorization for CFATS. We pledge our continued support as this legislation moves forward, and look forward to continuing to work in partnership with you and your staff as this process moves forward. Thank you again for the opportunity to testify in support of this bill. I ll be glad to answer any questions you may have. 4