Skip to main content
U.S. flag

An official website of the United States government

Here’s how you know

Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

HTTPS

Secure .gov websites use HTTPS
A lock (LockA locked padlock) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Free Cyber ServicesSecure by design Secure Our WorldShields UpReport A Cyber Issue

Cybersecurity & Infrastructure Security Agency logo America’s Cyber Security Defense Agency National Coordinator For Critical Infrastructure Security and ResilienceCybersecurity & Infrastructure Security Agency logo America’s Cyber Security Defense Agency National Coordinator For Critical Infrastructure Security and Resilience
CISA Logo

Search

 

America's Cyber Defense Agency
 
  • Topics
    Cybersecurity Best Practices
    Cyber Threats and Advisories
    Critical Infrastructure Security and Resilience
    Election Security
    Emergency Communications
    Industrial Control Systems
    Information and Communications Technology Supply Chain Security
    Partnerships and Collaboration
    Physical Security
    Risk Management
    How can we help?
    GovernmentEducational InstitutionsIndustryState, Local, Tribal, and TerritorialIndividuals and FamiliesSmall and Medium BusinessesFind Help LocallyFaith-Based CommunityExecutivesHigh-Risk Communities
  • Spotlight
  • Resources & Tools
    All Resources & Tools
    Services
    Programs
    Resources
    Training
    Groups
  • News & Events
    News
    Events
    Cybersecurity Alerts & Advisories
    Directives
    Request a CISA Speaker
    Congressional Testimony
    CISA Conferences
    CISA Live!
  • Careers
    Benefits & Perks
    HireVue Applicant Reasonable Accommodations Process
    Hiring
    Resume & Application Tips
    Students & Recent Graduates
    Veteran and Military Spouses
  • About
    Divisions & Offices
    Regions
    Leadership
    Doing Business with CISA
    Site Links
    CISA GitHub
    CISA Central
    Contact Us
    Subscribe
    Transparency and Accountability
    Policies & Plans

Free Cyber ServicesSecure by design Secure Our WorldShields UpReport A Cyber Issue

Breadcrumb
  1. Home
  2. Resources & Tools
  3. Programs
  4. ChemLock
  5. ChemLock: Response Security Goal
Share:

ChemLock: Response Security Goal

Related topics:
Chemical Security, Critical Infrastructure Security and Resilience

The ChemLock program encourages facilities with dangerous chemicals to develop a holistic, customized, site-specific security plan that mitigates risk and enhances chemical security at the facility. To assist your facility in developing a security plan, the ChemLock program presents five security goals to consider as you evaluate and implement security measures tailored to your facility’s unique circumstances and business model. This is an overview of the response security goal.

Response Security Goal

ChemLock Response Security Goal

Response includes the capability to communicate, report, and manage the appropriate reaction(s) to potential attacks and/or adversary actions, and/or to reduce the effect of security-related events.

The first time that local law enforcement or first responders actually access the facility should not be the day of an incident.

Responding to a threat to your chemicals is one of the most important aspects of chemical security. Once a threat or incident has been identified, a security response should be initiated. This can be conducted by either local law enforcement or dedicated facility security forces. Planning and training are important to ensure that your facility personnel, on-site security, law enforcement, and first responders can effectively respond to external and internal security incidents in a timely manner. These incidents include the theft or diversion of chemicals; an on-site fire, explosion, or release of chemicals; and loss of containment of chemicals.

Examples of Response Security Measures

Response security measures include developing emergency response procedures and crisis management plans, outreach programs to local first responders, and security plans for elevated threats.

As part of response preparations, your facility should include training personnel to effectively respond to a threat of or actual theft or release of chemicals. Comprehensive response plans should involve all your facility personnel, designated facility emergency response personnel, local law enforcement, and other off-site first responders.

  1. Emergency Response Procedures and Crisis Management Plans. One of the most important elements for a successful response to an incident is a well thought-out, documented crisis management plan upon which the relevant individuals have been trained.
  2. Outreach Programs. To ensure that external resources are properly prepared, your facility should consider an active outreach program with local first responders, such as your local police department, fire department, emergency management, and Local Emergency Planning Committees (LEPCs).
  3. Security Plans for Elevated Threats. The ability to escalate the levels of security measures for periods of elevated threat provides your facility with the capacity to increase security measures to better protect against known increased threats or generalized increased threat levels.

Security Response vs. Emergency Response

It is important not to confuse a “security response,” which engages and neutralizes adversaries, with the broader “emergency response,” which follows an attack and reduces the severity of the event. The initial “security response” has tactical considerations, whereas the “emergency response” relates to containing the damage and mitigating the consequences of a security incident. Facilities should consider both responses in planning.

Considerations for Response

When implementing elements of response into your security plan, you should account for multiple response security measures in keeping with your facility’s operational constraints and business needs. For example, response measures for a facility with dedicated on-site security personnel will be different from response measures at a facility that relies on off-site local law enforcement, first responders, or a third-party security vendor. 

When considering response, be sure to account for different threats as well. Some response measures may be highly effective against some attacks, but not against others. For example, response measures may be different for the release of a toxic chemical into the air than for the theft or diversion of an explosive precursor chemical by a nefarious actor.

Building collaborative relationships with local law enforcement and first responders prior to an incident helps ensure response personnel have an improved understanding of your facility’s layout and hazards and maintain appropriate equipment and training to address facility hazards. Collaboration and communication with response personnel will also allow them to take quick and decisive action during an incident. Facilities should consider:

  • Including response personnel in the development and exercise of your response plans
  • Meeting regularly with first responders and sharing updates to your emergency response plans
  • Creating a toolkit for responders that contains items like your facility’s emergency contacts, facility layout, safety data sheets, access credentials, and radio interoperability
  • Inviting local fire department and law enforcement for a tour of your facility
  • Participating in Local Emergency Planning Committee (LEPC) meetings
  • Conducting joint exercises with other off-site organizations

Building on the ChemLock security goals, the ChemLock program also provides information to help facilities think through a variety of chemical security topics to ensure that your facility security plan is holistic and comprehensive.

List icon

Additional Chemical Security Considerations

The ChemLock program provides a variety of chemical security topics—from drones to no-notice events—that facilities with dangerous chemicals should consider as they develop and implement a facility security plan.

Next Steps

Here are some questions you can use to evaluate your facility’s response security measures:

  • How does your facility ensure emergency response procedures and crisis management plans are up to date, relevant, and actionable?
  • What training do your facility personnel have on response plans? Has your facility conducted exercises to ensure that personnel are ready and prepared to implement your response plans?
  • Are the points of contact for first responders, law enforcement, and others that may respond to an incident up to date and relevant? Are first responders aware of the chemicals at your facility?

ChemLock Security Goals

Learn more about the other ChemLock security goals.

ChemLock icon in a hexagon

ChemLock Security Goals

CISA encourages facilities with dangerous chemicals to develop a holistic security plan based around five chemical security goals: detection, delay, response, cybersecurity, and policies, plans, and procedures. Learn more about these security goals.
ChemLock Detection Security Goal

ChemLock: Detection Security Goal

Detection is the ability to identify potential attacks or precursors to an attack and to communicate that information as appropriate. Learn more about the detection security goal that can enhance your facility's chemical security posture.
ChemLock Delay Security Goal

ChemLock: Delay Security Goal

Delay includes limiting access to your facility or assets to reduce the likelihood of an adversary successfully breaching the perimeter or assets and allowing sufficient time to initiate a response to the attack. Learn more about the delay security goal.
ChemLock Policies, Plans, and Procedures Security Goal

ChemLock: Policies, Plans, and Procedures Security Goal

Policies, plans, and procedures ensure you have the capability to manage your facility security plan, including the development of processes that support security plan implementation and oversight. Learn more about this security goal that enhances your chemical security posture.
Chemlock logo

ChemLock Security Plan

To help facilities use the ChemLock security goals to develop a security plan or evaluate an existing plan, CISA has a guidance document and security plan template that facilities can download and customize for their facility.

ChemLock Security Plan

ChemLock Services and Tools

Not sure where to start? CISA has security experts across the country that can come to your facility to help you evaluate whether your current security measures adequately address these security goals.

If you want to learn more about these security goals, ChemLock provides training that will walk you through them in greater detail so that you can build a facility security plan tailored for your facility.

To request any of these ChemLock services, please fill out the ChemLock Services Request Form.

Request ChemLock Services
On-Site Assessments and Assistance icon

ChemLock On-Site Assessments and Assistance

CISA's ChemLock program can provide on-site assistance and assessments that help facilities identify the security risks their on-site chemicals present and offer scalable, tailored suggestions for security measures that will best enhance their security posture.
ChemLock Training icon

ChemLock Training

The ChemLock program provides live, on-demand training to assist owners, operators, and facility personnel with understanding the threats that chemicals pose and what security measures can be put into place to reduce the risk of dangerous chemicals being weaponized.
Request ChemLock Services

Contact Information

For more information or questions, please email ChemLock@cisa.dhs.gov.

Return to top
  • Topics
  • Spotlight
  • Resources & Tools
  • News & Events
  • Careers
  • About
Cybersecurity & Infrastructure Security Agency
  • Facebook
  • X
  • LinkedIn
  • YouTube
  • Instagram
  • RSS
CISA Central 1-844-Say-CISA SayCISA@cisa.dhs.gov
DHS Seal
CISA.gov
An official website of the U.S. Department of Homeland Security
  • About CISA
  • Budget and Performance
  • DHS.gov
  • FOIA Requests
  • No FEAR Act
  • Office of Inspector General
  • Privacy Policy
  • Subscribe
  • The White House
  • USA.gov
  • Website Feedback