Page 161 of the DSE Cybersecurity knowledge center, with source-backed guidance and practical next steps.
Source-backed guidance for identity, vulnerability reduction, ransomware readiness, detection, response, and recovery.
Under 40 CFR 68, the rule requires that for each scenario required under paragraph (a) of this section, the owner or operator select a scenario: that will reach an endpoint offsite, unless no such scenario exists.
Read the playbook
Under 40 CFR 68, the owner or operator may use the most recent Census data, or other updated information, to estimate the population potentially affected.
Read the briefing
Under 40 CFR 68, the rule requires that the owner or operator list in the RMP environmental receptors within a circle with its center at the point of the release and a radius determined by the distance to the endpoint defined in section 68.22(a) of this part.
Read the checklist
Under 40 CFR 68, the rule requires that the owner or operator of a stationary source revise and update the RMP submitted under section 68.150 as follows: no later than three years after a newly regulated substance is first listed by EPA.
Read the explainer
Under 40 CFR 68, offsite-consequence records for alternative release scenarios must describe the scenarios, assumptions, parameters, selection rationale, administrative controls, and mitigation assumed to limit a release.
Read the guide
Under 40 CFR 68, the rule requires that the owner or operator include in the five-year accident history all accidental releases from covered processes that resulted in deaths, injuries, or significant property damage on site, or known offsite deaths, injuries, evacuations, sheltering in place, property damage, or environmental damage.
Read the playbook
Under 40 CFR 68, the rule requires that the owner or operator compile and maintain the following up-to-date safety information related to the regulated substances, processes, and equipment: equipment specifications.
Read the briefing
Under 40 CFR 68, the rule requires that the review identify the following: any steps used or needed to detect or monitor releases.
Read the checklist
Under 40 CFR 68, the rule requires that the procedures address the following: startup following a normal or emergency shutdown or a major change that requires a hazard review.
Read the explainer
Under 40 CFR 68, the rule requires that the owner or operator ensure that operators are trained in any updated or new procedures prior to startup of a process after a major change.
Read the guide