CFATS Compliance Checklist for Chemical Facilities in 2026

CFATS Program Status in 2026

As of July 2023, the statutory authority for the Chemical Facility Anti-Terrorism Standards (CFATS) program expired. CISA is not currently enforcing the regulation. However, Congress could reauthorize the program at any time, and the underlying security threats to chemical facilities have not diminished.

Why Voluntary Security Matters

Regardless of regulatory status, maintaining robust chemical facility security is a business imperative. Chemical incidents can result in loss of life, environmental catastrophe, community harm, and business destruction. The CFATS framework remains the best available model for chemical facility security.

Your 2026 Security Readiness Checklist

• Chemical Inventory: Know which Chemicals of Interest (COI) you possess and whether quantities exceed Screening Threshold Quantities (STQ)
• Security Vulnerability Assessment: Conduct or update your SVA at least annually
• Site Security Plan: Maintain a current SSP covering physical security, cyber security, and personnel security
• Access Control: Verify badge/credential systems, visitor management, and vehicle screening procedures
• Personnel Surety: Background check programs for employees with access to critical assets
• Cyber Security: Protect industrial control systems (ICS/SCADA) from unauthorized access
• Training: Regular security awareness training for all personnel
• Drills: Conduct security drills and exercises at least quarterly

CISA ChemLock Resources

CISA's free ChemLock program provides voluntary security resources for chemical facilities. We recommend leveraging these tools as a baseline for your security program.

Need a professional security assessment? Our CFATS security assessments apply military-grade methodology to chemical facility protection.