Chemistryworld GAO Urges Voluntary Security Measures for Chemical Plants Post-CFATS Expiry
Article Content
- •CFATS expired in July 2023, leaving 3,200 high-risk chemical facilities without mandatory security.
- •CISA can no longer vet 9,000 personnel monthly against terrorist watch lists.
- •GAO recommends voluntary measures for personnel vetting and legislative action to restore security.
The US Government Accountability Office (GAO) has called for rapid implementation of voluntary security measures for chemical plants after the Chemical Facility Anti-Terrorism Standards (CFATS) program expired in July 2023. This lapse has left approximately 3,200 high-risk chemical facilities without mandatory security inspections or personnel vetting against terrorist watch lists. The Cybersecurity and Infrastructure Security Agency (CISA) can no longer conduct monthly vetting for about 9,000 individuals accessing these facilities. The Department of Homeland Security (DHS) stated that without CFATS, it cannot enforce compliance or require facilities to report hazardous chemicals. The GAO report recommends that CISA explore options for voluntary vetting and seek legislative authority. Chemical industry leaders have been urging the government to renew CFATS since its expiration, emphasizing the risks to national security and public safety. CISA's staffing for chemical sector activities has also dramatically decreased, from 214 to 52 personnel, further hampering security efforts.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (3)
Common questions
What is the impact of CFATS expiration?
What actions are being recommended?
How many facilities are affected?
Continue Reading
Critical Zero-Day Exploited in BeyondTrust Remote Support by China-linked Group A critical vulnerability in BeyondTrust Remote Support, tracked as CVE-2026-102764 with a CVSS score of 9.3, has been exploited by the China-linked espionage group Armory Castle since August 29, 2026. This flaw allows unauthenticated remote attackers to perform file operations, gaining root control and access to…
Silent Lynx Targets CIS Governments via WinRAR Exploit The threat actor Silent Lynx has launched a series of attacks against government organizations in the Commonwealth of Independent States (CIS) from June 2025 to August 2026. These attacks exploit a vulnerability in WinRAR (CVE-2025-8088) to deploy reverse shells, including FoalShell and PickleShell, facilitating…