Cybersecurity threats continue to evolve in complexity and sophistication. As part of their commitment under the Responsible Care® Security Code, ACC member companies must assess cybersecurity vulnerabilities, implement security measures to address them and provide appropriate training and guidance to employees on current and emerging threats.
ACC and its members are also working to improve information sharing between industry executives and government officials, enhance control systems, and develop best practices to prepare and respond to cyber threats. For example, ACC’s “Roadmap Implementation Website,” launched in partnership with the Chemical Sector Coordinating Council, serves as an information resource, offering practices and programs to reduce the cybersecurity risk to industrial control systems (ICS).
ACC members have put our incident response and crisis communication processes to the test by participating in the DHS Cyber Storm and NLE Emergency Response Exercises, which have helped to identify areas for improvement.
Unlike many other critical infrastructure sectors, the federal government regulates cybersecurity for the chemical sector. Under the Chemical Facility Anti-Terrorism Standards (CFATS), chemical facilities must meet comprehensive cybersecurity requirements that address the protection of business networks and process control systems.
Beyond CFATS, we have also been actively engaged with the federal government as the National Institute of Standards and Technology moves forward with developing a cybersecurity framework in response to the Executive Order issued by the White House.
- ACC has developed a set of principles to help promote policies that will allow for the free flow of commerce and spur economic growth while protecting critical cyber systems and the privacy of information.