ChemLock Security Goals
The Cybersecurity and Infrastructure Security Agency (CISA) is a recognized international leader in chemical security with more than a decade of experience assisting facilities in building tailored security plans to prevent terrorist exploitation of their chemicals. From on-site consultations to chemical security training, the ChemLock program offers scalable, tailored options for facilities looking to enhance their chemical security posture and reduce the risk of dangerous chemicals being weaponized.
![ChemLock Security Goals: Detection, Delay, Response, Cybersecurity, and Policies, Plans, and Procedures](/sites/default/files/styles/ckeditor_large/public/2024-04/chemlock-security-goals-600px.png?itok=HsnDNTVJ)
Since each facility that possesses dangerous chemicals faces different security challenges, facilities will benefit most from a flexible, holistic approach that can address their unique security challenges. To help facilities apply a comprehensive approach to security that can address different threats and hazards, the ChemLock program presents five security goals for facilities to think through as they formulate a facility security plan:
- Can you DETECT an attack or suspicious activity?
- Can you DELAY the adversary?
- Are you able to RESPOND in a timely manner?
- Are you protecting your CYBER assets?
- Do you have the appropriate POLICIES, PLANS, and PROCEDURES to implement your plan?
By considering a variety of potential avenues of attack and approaching security from this integrated approach, facilities can choose cost-effective, efficient security measures that work best to protect the dangerous chemicals at their facility from the threats and hazards most likely to occur at their facility.
ChemLock Security Plan Documents
The ChemLock program has developed guidance documents that walk facilities step-by-step through the process of developing and implementing a facility security plan.
ChemLock: Security Plan
The ChemLock program can help facilities that possess dangerous chemicals develop and implement a tailored security plan that will prevent dangerous chemicals from being exploited.
ChemLock: Secure Your Chemicals
ChemLock: Secure Your Chemicals is a guidance document that walks facilities with dangerous chemicals step-by-step through the process of developing and implementing a facility security plan.
ChemLock: Security Goal Fact Sheets
To assist your facility, the ChemLock program provides fact sheets on the security goals to consider as you evaluate and implement security measures tailored to your facility’s unique circumstances and business model.
Security-in-Depth
![Security-in-depth graphic. Three concentric circles representing perimter, building, and interior assets. Security measures are laid out at different points in the facility. See ChemLock: Secure Your Chemicals for more information on this graphic: cisa.gov/chemical-security-plan.](/sites/default/files/styles/large/public/2024-04/chemlock-security-in-depth.png?itok=pFsX7Fjv)
Security-in-depth (also referred to as layered security) is an industry accepted concept in asset protection used to slow or dissuade potential criminals from unauthorized facility access. Most frequently, this is accomplished by placing the most critical (or dangerous) assets within the innermost interior of the site while applying multiple active and passive physical security measures to deter, detect, and delay an adversary.
Using multiple layers between the outer and inner layers—including the use of physical barriers, fencing, signs, lighting, and advanced technologies, such as access control systems, intrusion detection systems, and camera systems—dramatically increases the likelihood of delaying and detecting unauthorized access, and ensures a facility’s critical assets can be suitably protected against a variety of potential threats.
Security-in-depth integrates security procedures—such as a personnel screening at an entry point—with technologies—such as an electronic access card reader—that complement each other. Furthermore, layered security measures can be used in different application levels because not all assets are valued equally and thus require different levels of protection.
CISA has trained chemical security experts located around the country that can help you understand the risks associated with your on-site chemical holdings and assess your facility’s existing security measures.
![ChemLock wordmark. Know your chemicals. Lock in your security posture.](/sites/default/files/styles/16x9_medium/public/2024-04/ChemLockMottoTeaser-700px.png?h=b48b0f9f&itok=KPeERElv)
ChemLock Program
The ChemLock program is a voluntary program that provides facilities that possess dangerous chemicals with no-cost services and tools to help you better understand the risks you face and improve your chemical security posture at your facility.
Contact Information
For more information or questions, please email ChemLock@cisa.dhs.gov.
To request any of CISA ChemLock's no-cost services and tools, please fill out the ChemLock Services Request Form.
Note: Participation in any portion of CISA's ChemLock program does not replace any reporting or compliance requirements under CISA's Chemical Facility Anti-Terrorism Standards (CFATS) regulation (6 CFR part 27). Some ChemLock activities may fulfill CFATS requirements, depending on your specific security plan. Contact local CISA Chemical Security personnel or visit the CFATS webpage to learn more about CFATS regulatory requirements.