Chemical-terrorism Vulnerability Information (CVI) is the information protection regime administered under the Chemical Facility Anti-Terrorism Standards (CFATS) regulation to ensure information chemical facilities provide to the Cybersecurity and Infrastructure Security Agency (CISA) is protected from public disclosure or misuse. Accordingly, the Agency expects individuals in possession of CVI to safeguard it with equal care.
For access to CVI—which includes having a need to know and obtaining an Authorized User number—visit the CVI Authorized User training page. Only CVI Authorized Users can access CFATS-related documents housed in the Chemical Security Assessment Tool (CSAT).
Defining CVI
What information is protected as CVI?
Disclosure of CVI
How to safeguard and share CVI.
Handling CVI
Materials containing CVI must be physically controlled and protected, appropriately designated, and withheld from public disclosure.
Evaluating Need to Know CVI
How should you evaluate a need to know CVI?
CVI Authorized User Training and Application
Complete the Safeguarding Information Designated as Chemical-terrorism Vulnerability Information (CVI) Authorized User Training and then submit the CVI Authorized User Application.
CVI Resources
The CVI Procedures Manual provides guidance to anyone authorized to possess, disclose, or receive CVI on how to ensure sensitive information about the nation's high-risk chemical facilities is safeguarded.
Use the CVI cover sheet to help safeguard CVI from unauthorized or inadvertent disclosure by placing it on the front and back of transmittal letters, reports, or documents.
Contact Information
If you have questions, call the Chemical Security Assessment Tool (CSAT) Help Desk at 866-323-2957 Monday through Friday (except federal holidays) from 8:30 a.m. to 5 p.m. (ET) or email CSAT@hq.dhs.gov.