Appendix A: Chemicals of Interest
As of July 28, 2023, Congress has allowed the statutory authority for the Chemical Facility Anti-Terrorism Standards (CFATS) program (6 CFR Part 27) to expire.
Therefore, CISA cannot enforce compliance with the CFATS regulations at this time. This means that CISA will not require facilities to report their chemicals of interest or submit any information in CSAT, perform inspections, or provide CFATS compliance assistance, amongst other activities. CISA can no longer require facilities to implement their CFATS Site Security Plan or CFATS Alternative Security Program.
CISA encourages facilities to maintain security measures. CISA’s voluntary ChemLock resources are available on the ChemLock webpages.
If CFATS is reauthorized, CISA will follow up with facilities in the future. To reach us, please contact CFATS@hq.dhs.gov.
Keeping hazardous chemicals out of the hands of those who would misuse them is a responsibility shared between facility owners and operators, employees, and emergency responders and the Cybersecurity and Infrastructure Security Agency (CISA).
Appendix A of the Chemical Facility Anti-Terrorism Standards (CFATS) regulation (6 CFR Part 27) lists more than 300 chemicals of interest (COI) and their respective screening threshold quantities (STQ) and concentrations. These COI are categorized under three main security issues:
- Release: Toxic, flammable, or explosive chemicals or materials that can be released at a facility.
- Theft or Diversion: Chemicals or materials that, if stolen or diverted, can be converted into weapons using simple chemistry, equipment, or techniques.
- Sabotage: Chemicals or materials that can be mixed with readily available materials.
First Step: Read the Appendix A CFATS Chemicals of Interest (COI) List if your facility possesses or plans to possess any chemical(s). Any COI that meets or exceeds the STQ and concentration must be reported to CISA.
Facilities that Possess COI
A facility that meets or exceeds the specified concentrations and quantities for any COI is required to report possession of those chemicals to CISA by completing an online survey called a Top-Screen via the Chemical Security Assessment Tool (CSAT).
CISA reviews Top-Screens using a risk-based methodology. Facilities are notified once they are either:
- Determined to be a high-risk facility, and ranked into Tier 1, 2, 3, or 4, with Tier 1 being the highest risk.
- Determined to not be a high-risk facility and not regulated under CFATS.
Facilities determined to be "high-risk" are required to develop a security plan and implement security measures that reduce the risks associated with their COI.
COI Resources for Facilities
CISA regularly engages with stakeholders to identify how to reach new segments of the population and ensure that those who hold COI are aware of their obligation to report.
Please download, print, and distribute these voluntary resources to increase the awareness of the CFATS program.
Appendix A Final Rule
In developing Appendix A, the Department referenced existing expert sources of information including other federal regulations related to chemicals, such as:
- Chemicals covered under the Environmental Protection Agency's Risk Management Program
- Chemicals included in the Chemical Weapons Convention
- Hazardous materials, such as gases that are poisonous by inhalation
- Explosives regulated by the Department of Transportation
CISA continues to assess available information about chemicals critical to the government mission and the economy. The Agency will use the information it collects through the Top-Screen process to identify facilities responsible for economically critical and mission-critical chemicals.