TWIC NexGen Card

TSA plans to implement a new TWIC card, TWIC NexGen, in fiscal year 2018.

The TWIC NexGen updates are focused on enhancing the card functionality, new security features of the card, changes to the Technology Infrastructure Modernization (TIM) system.

Click here for TWIC Authentication Features.

TWIC Authentication & Identification

Based on the requirements of each facility/vessel and specific threat levels, TWIC is designed to be used in various Access Control Systems at different levels of security.

  • Static Identification –
    • Proximity card – Contact or Contactless Card Reader
    • Identify card using Cardholder Unique Identifier (CHUID).
      • Federal Agency Smart Credential Number (FASC-N) may be checked against the TWIC Canceled Card List (CCL).
  • Crytographic Authentication
    • TWIC PIN authentication
    • No biometric authentication
  • Biometric Identification
    • Biometric authentication
    • No card authentication
  • Combined Authentication – 2 Factor Authentication
    • Biometric authentication
    • Card authentication
    • FASC-N verified against CCL

USCG/TSA is also currently developing a mobile app to verify TWIC cards. The app will be capable of verifying the Credential Identification Number (CIN) printed on the TWIC against the CCL.

TWIC UPDATES

From TWIC Stakeholders Communications Committee Meeting – March 2018

TWIC Reader Requirements Final Rule

  • As we are now within 6 months of the implementation date of the TWIC Reader Rule, CG-FAC wanted to reiterate a Maritime Commons Blog post dated March 31, 2017 (http://mariners.coastguard.dodlive.mil/2017/03/31/3312017-twic-reader-rule- update/), and where units should expect to enforce TWIC reader rule “on time” at:
    • a) Facilities that receive vessels certificated to carry more than 1,000 passengers; and
    • b) Facilities subject to 33 CFR 105.295.
  • USCG is still working to establish how/when all other facilities that were captured by the Final Rule language will have to comply with the TWIC Reader requirement; however, until then, facility inspectors should be socializing the above guidance for “on time” enforcement with industry.

USCG TWIC Handheld Reader Status

USCG is currently conducting technical evaluations of potential vendors for TWIC Handheld Readers. The current plan is once a vendor is selected, 250 readers will be issued out to the field. The current projected award date is late March to early April with distribution out to the field shortly thereafter.

Status of TWIC Reader Final Rule

The status of TWIC Final Reader Ruling was brought up at the recent AMSC meeting held on January 10, 2018, at the St. Charles EOC, by several members of the maritime community. The concern was referencing information being circulated, verbally, in the maritime community that this ruling was being delayed or changed. We advised the maritime community members that the Coast Guard would research the TWIC Final Reader Ruling from August 23, 2016 to determine it’s true status and effective date.

Coast Guard Sector New Orleans Facility Division contacted Coast Guard Headquarters to obtain the most up to date information on this ruling which is listed below.

CG Headquarters (CG-FAC) continues to work with DHS to address concerns with the TWIC Reader Rule that were detailed in the petition filed under Docket # USCG-2017-0447-0003. Options being considered to clarify/correct the reader rule are: Delay of the current TWIC Reader Rule, a reader rule amendment, a new regulation, and clarification through policy. Each option requires time to process, review, approve, gain clearance, and finally publish. Once a way forward is determined and approved, the Coast Guard anticipates to respond to the petition at that time.

Note; if no change to the rule is made and the rule is implemented on Aug 23, 2018, Coast Guard will evaluate each facility to which the rule applies and will work with each facility operator to ensure implementation while striving to minimize impact to the facility.

Thanks Lester J. Millet (MSOC Port of South Louisiana) and Mike Sawyer (USCG Sector N.O./Port Security Specialist) for this update.

3 Tips for a Successful USCG Inspection

Many companies aren’t prepared when they receive a letter from the U.S. Coast Guard notifying them of an upcoming facility security inspection. You might have documents that are out of date, or you may be missing the necessary forms. If left unchecked, you could be forced to waste time and money in enforcing corrective actions. When it comes to advising our clients to be prepared, these are the top three tips we give them for a successful USCG Inspection.

Review Your Documents

When you receive a notice from the USCG about an upcoming inspection, this is always a good time to review your FSP and required documents to make sure that you have everything in order. Also, this is a good time to verify that you have conducted the required quarterly drills, annual exercise, and annual audit of the FSP.

Training Moment

Training is very important for facility personnel and this is a good opportunity to make sure all your training is up to date and to have a general discussion regarding security of the facility. The training can focus on topics that will most likely be covered during the inspection; including TWIC, screening, security personnel (who is the FSO, Alt. FSO?), MARSEC security measures, etc.

Organize

One thing that we recommend and develop for majority of our clients is to have a single security plan binder with all relevant documents and forms. This is a perfect, centralized place to store and secure all the forms and documents that the USCG will want to review during the inspection. We have had great success with these binders for all of our regulated clients; MTSA, CFATS, TSA, DOT, etc. As we tell our clients, it is best to get the inspectors the requested material in a timely fashion and get the inspection over with as quickly as possible.

Recently one of our clients had a US Coast Guard inspection that they passed without any issues, “We went through our MARSEC book while the USCG was here and we were complimented on how all the files for MARSEC were in one book and not in different locations.  We didn’t spend much time with it, because everything was in the binder that they had questions about. “

Let us know if we can help you prepare for USCG Security Inspection and develop a security binder for you and help you succeed with your inspections.

CFATS Quarterly Update

Recently DHS released their Fall Quarterly Update providing more detail on the implementation of the CFATS program.

CFATS Update

As of September 1, 2017, CFATS covers 3,478 facilities. DHS has completed more than 2,700 Compliance Inspections (to read more about Compliance Inspections, click here). Since launching CSAT 2.0 a year ago, DHS has received more than 25,000 CSAT Top Screens. DHS is continuing to issue tiering letters to facilities as their Top Screens are received and reviewed.

You can read more about CSAT 2.0 here.

SVA/SSP Questions

One topic discussed in the update in the new questions that facilities will need to answer when submitting a new or revised SVA/SSP.

When submitting the SSP, the new questions facilities will need to address include:

  • Q3.10.050 Personnel Presence
  • Q3.10.400 through Q3.10.420 Inventory Controls
  • Q3.40.400 through Q3.40.430 Cyber Control and Business Systems
  • Q3.50.320 Personnel Surety, Types of Affected Individuals
  • Q3.50.710 Recordkeeping Affirmation

In addition to these new SSP question, facilities are asked to select whether a certain detection and delay security measure applies to perimeter and/or critical assets. The following SSP questions should be reviewed to ensure the location(s) are correctly associated with the security measures applied:

  • Q3.10.070 Mobile Patrols
  • Q3.10.120 Intrusion Detection Systems
  • Q3.10.180 through Q3.10.230 Intrusion Detection Sensors
  • Q3.10.290 and Q3.10.310 Closed Circuit Television
  • Q3.20.030 through Q3.20.160 Perimeter Security
  • Q3.20.430 and Q3.20.440 Access Control Systems
  • Q3.20.560 Anti-Vehicle Measures

Personnel Surety Program (PSP)

Tier 1 and Tier 2 facilities will see questions that address RBPS 12(iv), screening for terrorist ties. Questions Q3.50.330 through Q3.50.550 allow facilities to identify the option(s) chosen and measure(s) used to implement those options for compliance with RBPS 12(iv). To read more about those options, click here.

Additionally, DHS is going to integrate the Personnel Surety Program into the CSAT 2.0 Portal. This should make it much easier and provide better functionality for the user.

Chiefs of Regulatory Compliance

DHS also announced in this update that they have hired Chiefs of Regulatory Compliance (CRCs) for majority of their Regional Offices. CRCs will serve as the lead DHS representatives administering the CFATS regulation and serving as advisors to the Office of Infrastructure Protection Regional Directors.

Region CRCs:

  • Region 1 (VT, RI, ME, NH, CT, MA) – Charles Colley charles.colley@hq.dhs.gov
  • Region 2 (VI, PR, NJ, NY) – John Dean john.dean@hq.dhs.gov
  • Region 3 (DC, DE, WV, MD, VA, PA) – Don Keen donald.keen@hq.dhs.gov
  • Region 4 (MS, SC, AL, KY, FL, NC, TN, GA) – Cheryl Louck cheryl.louck@hq.dhs.gov
  • Region 5 (MN, WI, IN, MI, IL, OH) – Kathy Young kathryn.young@hq.dhs.gov
  • Region 6 (NM, OK, LA, AR, TX) – Steve Shedd steven.shedd@hq.dhs.gov
  • Region 7 (NE, KS, IA, MO) – Dave Martak david.martak@hq.dhs.gov
  • Region 8 (WY, ND, SD, MT, UT, CO) – Jim Williams james.williams@hq.dhs.gov
  • Region 9 (MP, GU, HI, NV, AZ, CA) – Marcie Stone marcie.stone@hq.dhs.gov
  • Region 10 (AK, ID, OR, WA) – Marc Glasser marc.glasser@hq.dhs.gov

Feel free to contact us if more information or support is needed.

Changes in USCG Leadership Indicate Strong Continued Interest in Port Security

  • Rear Adm. Paul Thomas moves from Prevention Policy to command of the Eighth District – New Orleans.
  • Rear Adm. John Nadeau assumes position as assistant commandant for Prevention Policy.

Rear Adm. Paul Thomas, in an article posted in Maritime Commons, stated:

This week marks my last as assistant commandant for prevention policy. I assume command of the Coast Guard’s Eighth District in mid-August. It has been a distinct privilege to lead and represent the men and women of the U.S. Coast Guard who are dedicated to ensure our national security and economic prosperity by ensuring the safety, security and environmental soundness of our Marine Transportation System globally . . .Thank you for your professional and productive relationship with the U.S. Coast Guard.

About Rear Admiral Nadeau, Thomas stated:

I am pleased to introduce Rear Adm. John Nadeau as the new assistant commandant for prevention policy effective today. His most recent assignment was as assistant commandant for capability, where he was responsible for identifying and sourcing new and extended capabilities, competencies, and capacity to meet mission requirements. Prior to that, he served as commanding officer of the Coast Guard Marine Safety Center where he led the review and approval of plans for the design, construction, alteration, and repair of U.S. and foreign flag commercial vessels subject to U.S. laws, regulations, and international standards. Rear Adm. Nadeau’s other assignments cover the full spectrum of marine safety and inspections and span the bulk of his nearly three decades long career: chief of inspections, senior investigating officer, MSU commanding officer, captain of the port and federal on scene coordinator, Officer In Charge, Marine Inspection, and chief of the Office of Design and Engineering Standards.

In summary: Prevention Policy is assumed by a strong advocate for robust port security with a background in marine safety and inspection, and the command of District Eight is assumed by the former assistant commandant for prevention policy.  These moves indicate a strong continued interest in port security programs.

State Bill 1871, signed into law by Governor Abbott

Titled:  An Act relating to the creation of the offense of petroleum product or oil and gas equipment theft.   This penal code addition takes effect on September 1, 2017.

Definitions include: “Oil and gas equipment means machinery, drilling equipment, welding equipment, pipe, fittings, pumps, vehicles, or other equipment used in the drilling or maintenance of oil and gas wells, in the production of oil and gas, or to transport petroleum products.  Petroleum product means crude oil, natural gas, or condensate”.

The offense is committed by unlawfully appropriating oil and gas equipment “without the owner’s effective consent.”  A felony.

This is a finely crafted penal code addition – simple and direct, easy to understand, and comprehensive to our industry’s concerns.  John P. Chamberlain, Executive Director of the Energy Security Council, posted this morning:

Texas Governor Abbott signed State Bill 1871 into law. This bill applies to the theft of oil and oilfield equipment and the penalties for those committing oilfield crimes.  This law is another very useful tool for corporate security teams and law enforcement to use in the ongoing fight against oilfield theft and crime.   

 Much thanks are due to those who spent many hours helping research, craft and promote this timely legislation, including Rob Ream of BHP Billiton Petroleum; LC Wilson, Clete Buckaloo, and Kevin Pullen of Anadarko Petroleum; Mike Peters of Lewis Energy; Robert Butler from the Texas Attorney General’s office; and Paula Barnett from BP.  

2017 Port Security Grant Program (PSGP) Update 3.0 – May 18, 2017

The American Association of Port Authorities hosted a webinar regarding the FY2017 Port Security Grant Program. Duane Davis, East Section Chief for the Port Security Grant Program presented during the webinar.

Summary:

  • Notice of Funding Opportunity announcement expected June 2, 2017.
  • Grant applications will need to be submitted to FEMA by June 21, 2017.
  • Anticipated to be for the same amount as FY2016, $100,000,000.00.
  • Funding priorities remain the same as 2016:
    • Enhancing Maritime Domain Awareness
    • TWIC Readers
    • Cybersecurity Capabilities
    • Training and Exercises, etc.
  • Cost sharing remains the same as 2016, 25/75 split.

The timeframe from the NOFO announcement to application due date is only 21 days or 3 weeks. This is a very tight timeframe to get all the necessary registrations and Investment Justification (IJs) completed.

Failing to complete the following steps will likely result in an invalid application:

  • Verifying, updating, or applying for a DUNS
  • Updating or verifying SAM
  • Register and establish a AOR
  • Submit application in Grants.gov
  • Applying for, updating or verifying your EIN (can take up to 2 weeks!)
  • Submitting the final application in NDGrants

Mr. Davis stated to get the above done as soon as possible, hopefully already started. Don’t wait or it might be too late.

To read more about the PSCP, click here.

Chemical Sector Security Summit

For the first time after 10 years, the annual Chemical Sector Security Summit will be held outside the D.C. area in Houston, Texas. The summit is scheduled to take place in July 2017.

This year’s Summit will feature vital chemical security information for 2017 and beyond, while bringing together industry owners and operators, key government officials, first responders, and law enforcement to engage in face-to-face discussions and share the latest in security best practices.

Summit registration will open in spring 2017, along with updates on the venue, agenda, and speakers.

For more information, click here.