5/8/2014 Responsible Care Security Code

http://responsiblecare.americanchemistry.com/Responsible-Care-Program-Elements/Responsible-Care-Security-Code?css=print 1/3

Responsible Care

Program Elements » Security Code

Responsible Care® Security Code

Security is a top priority for America’s leading chemical producers. Responsible Care companiesare leaders in chemical security and work closely with federal, state and local intelligenceauthorities to safeguard our communities.

After September 11, 2001, ACC members took the lead to enhancesecurity against terrorism. Without waiting for government direction, theACC Board of Directors adopted the Responsible Care Security Code tofurther enhance the security of our facilities, our communities and theessential products we produce.

The Responsible Care Security Code is recognized by local, state and federal governments as amodel security program for chemical facilities and other U.S. industries. Through ResponsibleCare, ACC member companies have enhanced coordination, conducted training and safety drills,and shared important security information with local emergency response teams.

The Security Code predates federal security regulations and hasserved as a model for subsequent regulatory action under theDepartment of Homeland Security’s (DHS) Chemical Facility Anti-terrorism Standards program. In addition, through the SAFETY Act,DHS has recognized the Security Code as a Qualified Anti-Terrorism Technology, which provides ACC members andResponsible Care Partners with certain liability protections in theevent of a terrorist action at their facilities.

HOW THE RESPONSIBLE CARE SECURITY CODE WORKS

Under the Security Code’s 13 management practices – which address facility, cyber andtransportation/value chain security – companies must conduct comprehensive security vulnerabilityassessments (SVAs) and implement security enhancements under a strict timeline, using methodsapproved by nationally recognized security experts. Companies also must obtain independentverification to prove they have made required physical site security measures identified during the

5/8/2014 Responsible Care Security Code

http://responsiblecare.americanchemistry.com/Responsible-Care-Program-Elements/Responsible-Care-Security-Code?css=print 2/3

SVA.

Prioritization and Assessment of Sites

Companies initially prioritize their facilities according to a four-tier system based on vulnerabilityand then conduct SVAs at all facilities.

Implementation of Security Measures

After completing the SVA process, companies implement security enhancements to control ormitigate identified risks to facility, cyber and value chain security, based on the 13 managementpractices.

Protecting Information and Cyber-Security: Safeguarding information and process

control systems is a critical component of sound security management and an essential partof the Security Code.

Training, Drills and Guidance: Emergency preparedness is a hallmark of the Responsible

Care initiative. Training, drills and guidance enhance security awareness and capabilitiesacross the business of chemistry.

Communications, Dialogue and Information Exchange: The Security Codeemphasizes cooperation among chemical producers, customers, suppliers, and shippersand establishing and maintaining a constructive, consistent dialogue with governmentagencies.

Response to Security Threats and Incidents: Companies evaluate, respond, report and

communicate security threats as appropriate and have a process in place to respond toincidents and take corrective action.

Continuous Improvement: The Security Code includes planning, establishing goals and

objectives, monitoring progress and performance, analyzing trends, and developing andimplementing corrective actions.

Independent Review: Facilities undergo independent audits by third-party individuals and

organizations to assure that necessary security enhancements are in place.

IMPLEMENTING THE SECURITY CODE

ACC tracks members’ and Partners’ implementation of the Security Code and publicly disclosestheir performance:

In the last decade, Responsible Care companies have invested nearly $13 billion toenhance security at their facilities.

5/8/2014 Responsible Care Security Code

http://responsiblecare.americanchemistry.com/Responsible-Care-Program-Elements/Responsible-Care-Security-Code?css=print 3/3

ACC members and Responsible Care Partners implement the Security Code at more than1,550 facilities nationwide.

New members and Partners are required to implement the Security Code, conduct sitesecurity vulnerability assessments and make necessary security upgrades within threeyears of joining ACC.

Each Responsible Care company’s Security Code implementation status is subject toreview as part of ACC’s mandatory third-party, Responsible Care Management Systems®certification process.

Security Code implementation is monitored by ACC and companies that do not meet specificdeadlines are held accountable, at the senior executive level, by a Board-level Responsible Caregovernance process.

©2005 – 2014 American Chemistry Council, Inc. The ACC mark, Responsible Care®, the hands logo mark,CHEMTREC®, TRANSCAER®, and americanchemistry.com are registered service marks of the AmericanChemistry Council, Inc.