105.305—Facility Security Assessment (FSA) requirements.
(a) Background.
The facility owner or operator must ensure that the following background information, if applicable, is provided to the person or persons who will conduct the assessment:
(3)
Procedures for monitoring facility and vessel personnel, vendors, repair technicians, and dock workers;
(4)
Existing contracts with private security companies and existing agreements with local or municipal agencies;
(8)
Threat assessments, including the purpose and methodology of the assessment, for the port in which the facility is located or at which passengers embark or disembark;
(10)
Any other existing security procedures and systems, equipment, communications, and facility personnel.
(b) On-scene survey.
The facility owner or operator must ensure that an on-scene survey of each facility is conducted. The on-scene survey examines and evaluates existing facility protective measures, procedures, and operations to verify or collect the information required in paragraph (a) of this section.
(c) Analysis and recommendations.
In conducting the FSA, the facility owner or operator must ensure that the FSO analyzes the facility background information and the on-scene survey, and considering the requirements of this part, provides recommendations to establish and prioritize the security measures that should be included in the FSP. The analysis must consider:
(v)
Measures to protect radio and telecommunication equipment, including computer systems and networks;
(vii)
Areas that may, if damaged or used for illicit observation, pose a risk to people, property, or operations within the facility;
(viii)
Existing agreements with private security companies providing waterside and shore-side security services;
(xiii)
Any deficiencies identified following security incidents or alerts, the report of security concerns, the exercise of control measures, or audits;
(iii)
Tampering with cargo, essential equipment or systems, or stores of a vessel moored at the facility;
(vi)
Use of a vessel moored at the facility to carry those intending to cause a security incident and their equipment;
(vii)
Use of a vessel moored at the facility as a weapon or as a means to cause damage or destruction;
(viii)
Impact on the facility and its operations due to a blockage of entrances, locks, and approaches; and
(ix)
Use of the facility as a transfer point for nuclear, biological, radiological, explosive, or chemical weapons;
(4)
Vulnerabilities, including human factors, in the facility's infrastructure, policies and procedures;
(5)
Any particular aspects of the facility, including the vessels using the facility, which make it likely to be the target of an attack;
(6)
Likely consequences in terms of loss of life, damage to property, and economic disruption, including disruption to transportation systems, of an attack on or at the facility; and
(d) FSA report.
(1)
The facility owner or operator must ensure that a written FSA report is prepared and included as part of the FSP. The report must contain:
(ii)
A description of existing security measures, including inspection, control and monitoring equipment, personnel identification documents and communication, alarm, lighting, access control, and similar systems;
(vi)
A list of identified weaknesses, including human factors, in the infrastructure, policies, and procedures of the facility.
(3)
The FSA report must list the persons, activities, services, and operations that are important to protect, in each of the following categories:
(iii)
The impact of watch-keeping duties and risk of fatigue on facility personnel alertness and performance;
(iii)
Controlling the embarkation of vessel personnel and other persons and their effects (including personal effects and baggage whether accompanied or unaccompanied);