Critical Infrastructure Protection: DHS Needs to Improve Its Risk Assessments and Outreach for Chemical Facilities

Testimony issued by the Government Accountability Office with an abstract that begins "In April 2013, GAO reported that, since 2007, the Department of Homeland Security's (DHS) Infrastructure Security Compliance Division (ISCD) assigned about 3,500 high-risk chemical facilities to risk-based tiers under its Chemical Facility Anti-Terrorism Standards (CFATS) program, but it has not fully assessed its approach for doing so. The approach ISCD used to assess risk and make decisions to place facilities in final tiers does not consider all of the elements of consequence, threat, and vulnerability associated with a terrorist attack involving certain chemicals. For example, the risk assessment approach is based primarily on consequences arising from human casualties, but does not consider economic consequences, as called for by the National Infrastructure Protection Plan (NIPP) and the CFATS regulation, nor does it consider vulnerability, consistent with the NIPP. ISCD had taken some actions to examine how its risk assessment approach could be enhanced, including commissioning a panel of experts to assess the current approach and recommend improvements. In April 2013, GAO reported that ISCD needed to incorporate the results of these efforts to help ensure that the revised assessment approach includes all elements of risk. After ISCD has incorporated all elements of risk into its approach, an independent peer review would provide better assurance that ISCD can appropriately identify and tier chemical facilities, better inform CFATS planning and resource decisions, and provide the greatest return on investment consistent with the NIPP.