Ask X3What does 49 CFR 172.802 (Components of a security plan) require?
Generated guidance. Confirm the source and its applicability before you act. How we check sources.
As Ask X3, your fleet-compliance assistant, here is what is required according to 49 CFR 172.802:
Your security plan must be in writing, kept for as long as it remains in effect, and maintained as an accessible copy (or electronic file) at or through your principal place of business. You must make it available upon request at a reasonable time and location to authorized officials from the Department of Transportation or the Department of Homeland Security.
Specifically, per 49 CFR 172.802, your security plan must include:
1. Risk Assessment: An assessment of transportation security risks for covered hazardous materials shipments, including site- or location-specific risks at facilities where materials are prepared for transport, stored, or unloaded incidental to movement. It must include appropriate measures to address these risks (which can vary based on the threat level).
2. Personnel Security: Measures to confirm background information for job applicants hired for positions involving access to or handling of covered hazardous materials, complying with applicable employment and privacy laws.
3. Unauthorized Access: Measures to prevent unauthorized persons from accessing the hazardous materials or transport conveyances being prepared for transport.
4. En Route Security: Measures to address security risks for shipments from origin to destination, including during storage incidental to movement.
5. Management Responsibility: Identification by job title of the senior management official responsible for developing and implementing the plan.
6. Duties and Notification: The specific security duties for each position or department responsible for the plan, plus a process for notifying employees when to implement specific elements of the plan.
7. Training: A plan to train hazmat employees according to § 172.704(a)(4) and (a)(5).
Ongoing Maintenance:
* You must review the plan at least annually, and revise or update it as needed for changing circumstances.
* When updated or revised, you must notify all employees responsible for implementing it and ensure all copies reflect the most recent revision date.
* The most recent version (or relevant portions) must be made available to the employees responsible for implementing it, subject to background clearance restrictions and a demonstrated need to know.