Skip to main content
U.S. flag

An official website of the United States government

Here’s how you know

Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

HTTPS

Secure .gov websites use HTTPS
A lock (LockA locked padlock) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Cybersecurity & Infrastructure Security Agency
America's Cyber Defense Agency

Search

 
 
  • Topics
    Cybersecurity Best Practices
    Cyber Threats and Advisories
    Critical Infrastructure Security and Resilience
    Election Security
    Emergency Communications
    Industrial Control Systems
    Information and Communications Technology Supply Chain Security
    Partnerships and Collaboration
    Physical Security
    Risk Management
    How can we help?
    GovernmentEducational InstitutionsIndustryState, Local, Tribal, and TerritorialIndividuals and FamiliesSmall and Medium Businesses
  • Spotlight
  • Resources & Tools
    All Resources & Tools
    Services
    Programs
    Resources
    Training
    Groups
  • News & Events
    News
    Events
    Cybersecurity Alerts & Advisories
    Directives
    Request a CISA Speaker
    Congressional Testimony
  • Careers
    Benefits & Perks
    HireVue Applicant Reasonable Accommodations Process
    Hiring
    Resume & Application Tips
    Students & Recent Graduates
    Veteran and Military Spouses
    Work @ CISA
  • About
    Culture
    Divisions & Offices
    Regions
    Leadership
    Doing Business with CISA
    Contact Us
    Site Links
    CISA Administrative Subpoena
    Reporting Employee and Contractor Misconduct
    CISA GitHub
    Signature Verification
    Subpoena Process
Report a Cyber Issue
Breadcrumb
  1. Home
  2. Topics
  3. Critical Infrastructure Security and Resilience
  4. Critical Infrastructure Sectors
Share:
Stadium with bright lighting

Commercial Facilities Sector

The sector protects a diverse range of sites that draw large crowds of people for shopping, business, entertainment, or lodging.

Critical Infrastructure Sectors

  • Chemical Sector
  • Commercial Facilities Sector
  • Communications Sector
  • Critical Manufacturing Sector
  • Dams Sector
  • Defense Industrial Base Sector
  • Emergency Services Sector
  • Energy Sector
  • Financial Services Sector
  • Food and Agriculture Sector
  • Government Facilities Sector
  • Healthcare and Public Health Sector
  • Information Technology Sector
  • Nuclear Reactors, Materials, and Waste Sector
  • Transportation Systems Sector
  • Water and Wastewater Sector

Sector Details

The Commercial Facilities Sector includes a diverse range of sites that draw large crowds of people for shopping, business, entertainment, or lodging. Facilities within the sector operate on the principle of open public access, meaning that the general public can move freely without the deterrent of highly visible security barriers. The majority of these facilities are privately owned and operated, with minimal interaction with the federal government and other regulatory entities. 

The Commercial Facilities Sector consists of eight subsectors 

  1. Entertainment and Media (e.g., motion picture studios, broadcast media). 

  1. Gaming (e.g., casinos). 

  1. Lodging (e.g., hotels, motels, conference centers, RV parks and campgrounds). 

  1. Outdoor Events (e.g., theme and amusement parks, fairs, parades, exhibitions, parks, marathons). 

  1. Public Assembly (e.g., arenas, stadiums, aquariums, zoos, museums, convention centers). 

  1. Real Estate (e.g., office and apartment buildings, condominiums, mixed use facilities, self-storage). 

  1. Retail (e.g., retail centers and districts, shopping malls). 

  1. Sports Leagues (e.g., professional sports leagues and federations). 

Sector-Specific Plan

The Commercial Facilities Sector-Specific Plan sets the strategic direction for voluntary, collaborative efforts to improve security and resilience in the sector and details how the National Infrastructure Protection Plan's risk management framework is implemented within the context of the unique characteristics and risk landscape of the sector. Each Sector Risk Management Agency develops a sector-specific plan through a coordinated effort involving its public and private sector partners. The Department of Homeland Security is designated as the Sector Risk Management Agency for the Commercial Facilities Sector. 

Commercial Facilities Sector-Specific Plan - 2015 (PDF, 8.28 MB )

Resources

Commercial Facilities Sector Risk Management Agency

AUG 05, 2021 | PUBLICATION
Download File (PDF, 367.46 KB)

What's in Store: Ordinary People, Extraordinary Events

This video provides information on identifying and reporting suspicious activity and threats at shopping centers and retail establishments.
What's in Store: Ordinary People, Extraordinary Events

If You See Something, Say Something® campaign

EXTERNAL
A campaign to raise public awareness of the indicators of terrorism and terrorism-related crime and explain how to report suspicious activity.
If You See Something, Say Something®" campaign

Suspicious Activity Reporting Tool

EXTERNAL
The Suspicious Activity Reporting tool offers a variety of benefits to critical infrastructure owners and operators, as well as to government agencies responding to suspicious activity reports.
Homeland Security Information Network - Critical Infrastructure

Commercial Facilities Training

CISA offers a variety of trainings related to commercial facilities and physical security.

View All Commercial Facility Training

IS-907: Active Shooter: What You Can Do

COURSE | VIRTUAL/ONLINE
Training to provide the public with guidance on how to prepare for and respond to active shooter crisis situations.
IS-907: Active Shooter: What You Can Do

Surveillance Detection Principles Course (AWR-940)

COURSE | VIRTUAL/ONLINE
The Surveillance Detection Principles Course (AWR-940) provides participants with a topical knowledge and introductory skills to recognize hostile surveillance at facilities and events, and foundational knowledge for planning and responding appropriately.
Register

Protective Measures Course (PER-336)

COURSE | IN-PERSON
The Protective Measures Course (PER-336) provides participants the foundational knowledge to identify risks and vulnerabilities to a facility, venue, or event and identify various types of protective measures to mitigate an IED threat.
Register
View All Commercial Facility Training

Related Topics

These related topics offer additional resources, training, and services associated with the Commercial Facilities Sector.

A crowded street of people walking in a city

Physical Security

There are a vast number of physical locations that must be protected and there are preventative and protective strategies that can be implemented at all levels.

Public crowd security

Active Shooter Preparedness

CISA aims to enhance active shooter preparedness through a "whole community" approach.

A person walking away from a suspicious bag

Bombing Prevention

A whole-of-government approach will best position the US to discover plots to use IEDs in the US or against US persons abroad before the threats become imminent.

Return to top
  • Topics
  • Spotlight
  • Resources & Tools
  • News & Events
  • Careers
  • About
Cybersecurity & Infrastructure Security Agency
  • Facebook
  • Twitter
  • LinkedIn
  • YouTube
  • Instagram
  • RSS
CISA Central 888-282-0870 Central@cisa.dhs.gov
DHS Seal
CISA.gov
An official website of the U.S. Department of Homeland Security
  • About CISA
  • Accessibility
  • Budget and Performance
  • DHS.gov
  • FOIA Requests
  • No FEAR Act
  • Office of Inspector General
  • Privacy Policy
  • The White House
  • USA.gov
  • Website Feedback