Important Notice: Our web hosting provider recently started charging us for additional visits, which was unexpected. In response, we're seeking donations. Depending on the situation, we may explore different monetization options for our Community and Expert Contributors. It's crucial to provide more returns for their expertise and offer more Expert Validated Answers or AI Validated Answers. Learn more about our hosting issue here.

How will DHS know that it is addressing the highest risk facilities first?

April 26, 2017ADDRESSING DHS facilities Highest risk

0

Posted

How will DHS know that it is addressing the highest risk facilities first?

1 Answer

0

Posted

Facilities that are placed into a tier based on the results of their Top Screen have the potential to create significant security related consequences. These facilities are required to complete a Security Vulnerability Assessment (SVA). The SVA provides more in-depth information that allows DHS to assign a final risk tier ranking to the facility. The highest tier facilities or Phase 1 facilities are addressed by DHS first. Facilities that complete the CSAT Top Screen and do not meet the consequence thresholds are not obligated to comply with CFATS.