Page 154 of the DSE Cybersecurity knowledge center, with source-backed guidance and practical next steps.
Source-backed guidance for identity, vulnerability reduction, ransomware readiness, detection, response, and recovery.
Under 44 CFR 201, the rule requires that states have an approved Standard State Mitigation Plans meeting the requirements of this section as a condition of receiving non-emergency Stafford Act assistance and FEMA mitigation grants.
Read the playbook
Under 44 CFR 201, the rule requires that the Enhanced State Mitigation Plan demonstrate that a State has developed a comprehensive mitigation program, that the State effectively uses available mitigation funding, and that it is capable of managing the increased funding.
Read the briefing
Under 44 CFR 201, the rule requires that the plan include the following: a plan maintenance process that includes a process by which local governments incorporate the requirements of the mitigation plan into other planning mechanisms such as comprehensive or capital improvement plans, when appropriate.
Read the checklist
Under 44 CFR 201, the rule requires that indian Tribal governments review and revise their plan to reflect changes in development, progress in local mitigation efforts, and changes in priorities, and resubmit it for approval within 5 years in order to continue to be eligible for non-emergency Stafford Act assistance and FEMA mitigation grant funding.
Read the explainer
Under 33 CFR 105, the rule requires that for each facility, the facility owner or operator ensure that adequate coordination of security issues takes place between the facility and vessels that call on it, including the execution of a Declaration of Security (DoS) as required by this part.
Read the guide
Under 33 CFR 105, in addition to those responsibilities and duties specified elsewhere in this part, the FSO must, for each facility for which he or she has been designated: ensure that the Facility Security Assessment (FSA) is conducted.
Read the playbook
Under 33 CFR 105, facility personnel responsible for security duties must maintain a TWIC, and must have knowledge, through training or equivalent job experience, in the following, as appropriate: the meaning and the consequential requirements of the different MARSEC Levels.
Read the briefing
Under 33 CFR 105, the rule requires that all other facility personnel, including contractors, whether part-time, full-time, temporary, or permanent, have knowledge of, through training or equivalent job experience, in the following, as appropriate: techniques used to circumvent security measures.
Read the checklist
Under 33 CFR 105, the rule requires that drills and exercises test the proficiency of facility personnel in assigned security duties at all MARSEC Levels and the effective implementation of the Facility Security Plan (FSP).
Read the explainer
Under 33 CFR 105, the rule requires that the following records be kept: for each occurrence of maintenance, calibration, and testing, record the date and time, and the specific security equipment involved.
Read the guide