CFATS provides chemical facilities with a short time frame for completing their security compliance plans. Here is a timeline of the process:

  • The DHS will publish a final list of chemicals (Appendix A) considered to place facilities at a security risk when present on their premises beyond applicable thresholds. Within 60 days after publication of the list, all facilities possessing more than the relevant threshold of these chemicals on their premises must register for CFATS. (Appendix A, which was promised by the end of July 2007, was not finalized as of the time this update went to press.)
  • Within 90 days after registration for CFATS, facilities placed into one of the four security “tiers” must complete a Security Vulnerability Assessment (SVA) obtained from the DHS.
  • Within 120 days of the completion of the SVA, a facility must submit its Site Security Plan. Other timelines also apply:
  • If, at any time after the final publication of Appendix A, a facility comes into possession of a chemical on the list in an amount greater than the applicable threshold, the facility must register under CFATS within 60 days.
  • Tier 1 and 2 facilities must submit a new Step 2 SVA not fewer than two years and not more than two years and two months from the date of DHS approval of the Site Security Plan.
  • Tier 3 and 4 facilities must submit a new Step 2 SVA not fewer than three years and not more than three years and two months from the date of DHS approval of the Site Security Plan.