[Federal Register Volume 86, Number 54 (Tuesday, March 23, 2021)]
[Notices]
[Pages 15490-15493]
From the Federal Register Online via the Government Publishing Office [www.gpo.gov]
[FR Doc No: 2021-05955]
[[Page 15490]]
-----------------------------------------------------------------------
DEPARTMENT OF HOMELAND SECURITY
[Docket No. CISA-2021-0003]
Revision of a Currently Approved Information Collection for the
Chemical Facility Anti-Terrorism Standards (CFATS)
AGENCY: Cybersecurity and Infrastructure Security Agency, DHS.
ACTION: 60-Day notice and request for comments; revision of information
collection request: 1670-0014.
-----------------------------------------------------------------------
SUMMARY: The Infrastructure Security Division (ISD) within the
Cybersecurity and Infrastructure Security Agency (CISA) is issuing a
60-day notice and request for comments to revise Information Collection
Request (ICR) 1670-0014. CISA will submit the ICR to the Office of
Management and Budget (OMB) for review and clearance in accordance with
the Paperwork Reduction Act of 1995.
DATES: Comments are due May 24, 2021.
ADDRESSES: You may submit comments, identified by docket number CISA-
2021-0003 through the Federal eRulemaking Portal available at http://www.regulations.gov. Follow the instructions for submitting comments.
Instructions: All comments received via https://www.regulations.gov
will be posted to the public docket at https://www.regulations.gov,
including any personal information provided.
Do not submit comments that include trade secrets, confidential
commercial or financial information, Chemical-terrorism Vulnerability
Information (CVI), Protected Critical Infrastructure Information
(PCII), or Sensitive Security Information (SSI) directly to the public
regulatory docket. Contact the individual listed in the FOR FURTHER
INFORMATION CONTACT section below with questions about comments
containing protected information. CISA will not place comments
containing protected information in the public docket and will handle
them in accordance with applicable safeguards and restrictions on
access. Comments containing protected information will be held in a
separate file to which the public does not have access and CISA will
place a note in the public docket documenting receipt of the comment.
If CISA receives a request to examine or copy this information, CISA
will treat it as any other request under the Freedom of Information Act
(FOIA), 5 U.S.C. 552, and the Department's FOIA regulation found in
part 5 of Title 6 of the Code of Federal Regulations (CFR).
FOR FURTHER INFORMATION CONTACT: Lona Saccomando, 703-235-5263,
[email protected].
SUPPLEMENTARY INFORMATION:
The CFATS Program identifies chemical facilities of interest and
regulates the security of high-risk chemical facilities through a risk-
based approach. The CFATS Program is authorized under the Protecting
and Securing Chemical Facilities from Terrorist Attacks Act of 2014 \1\
or ``CFATS Act of 2014''. CISA collects necessary information through
1670-0014 to implement CFATS.
---------------------------------------------------------------------------
\1\ The Protecting and Securing Chemical Facilities from
Terrorist Attacks Act of 2014 (also known as the CFATS Act of 2014,
Pub. L. 113-254) codified the CFATS program into the Homeland
Security Act of 2002. See 6 U.S.C. 621 et seq., as amended by Public
Law 116-136, Sec. 16007 (2020).
---------------------------------------------------------------------------
CISA's Methodology in Estimating the Burden for The Request for
Redetermination
This instrument collects information to support a facility's
request for redetermination of high-risk which CISA is obligated to
perform pursuant to the CFATS Act of 2014. The collection of
information may be concurrent with a facility's submission of a Top-
Screen pursuant to 6 CFR 27.210(d) or collected after CISA reviews a
Top-Screen that reflects material modifications made by the facility.
This instrument authorizes CISA to collect both the reason for the
redetermination as well as supporting documentation.
CISA is proposing minor revisions to the instrument that reflect
the passage of the Cybersecurity and Infrastructure Security Act of
2018, 6 U.S.C. 651-74, such as updating the Agency name to conform with
the Agency's new designation as CISA, as well as a clearer description
of the scope of the instrument. The scope of this instrument remains
unchanged.
Number of Respondents
The current information collection estimated that 625 respondents
would submit a request for a Request for Redetermination annually.
Based on data collected between CY 2018-2020, 215 respondents, on
average, submitted a Request for Redetermination annually. Because of
the historical pattern of lower submissions over the past three years,
CISA proposes to decrease the estimated number of respondents from 625
to 250 respondents. CISA will retain the number of responses per
respondent of 1.0.
Estimated Time per Respondent
In the current information collection, the estimated time per
respondent to prepare and submit a Request for Redetermination is 0.25
hours (15 minutes). CISA continues to believe this is a reasonable
burden estimate for this instrument.
Annual Burden Hours
The annual burden hours for a Request for Redetermination is [0.25
hours x 250 respondents x 1 response per respondent], which equals 62.5
hours.
Total Capital/Startup Burden Cost
CISA provides access to CSAT free of charge and assumes that each
respondent already has computer hardware and access to the internet for
basic business needs. Therefore, there are no annualized capital or
start-up costs incurred by chemical facilities of interest or high-risk
chemical facilities for this information collection.
Total Recordkeeping Burden
There are no recordkeeping burden costs incurred by chemical
facilities of interest or high-risk chemical facilities for this
information collection.\2\
---------------------------------------------------------------------------
\2\ The recordkeeping burden for facilities under CFATS is
accounted for by CISA under the CSAT Information Collection No.
1670-0007.
---------------------------------------------------------------------------
Total Annual Burden Cost
CISA assumes that Site Security Officers (SSOs) are responsible for
submitting a Request for Redetermination. For the purpose of this
notice, CISA maintains this assumption.
Therefore, to estimate the total annual burden, CISA multiplied the
annual burden of 62.5 hours by the average hourly wage rate of SSOs
which is $85.82 per hour.\3\ Therefore, the total annual burden cost
for the Request for Redetermination instrument is $5,364 (i.e., 62.5
total annual burden hours x $85.82 per hour).\4\
---------------------------------------------------------------------------
\3\ The above Average Hourly Wage Rate is the May 2019 Bureau of
Labor Statistics average wage for ``Management Occupations (Major
Group (11-0000))'' of $58.88 times the wage rate benefit multiplier
of 1.4575 (to account for fringe benefits) equaling $85.82. The
benefits multiplier is estimated by dividing total compensation of
$38.26 by salaries and wages of $26.25, based on Employer Cost for
Employee Compensation, September 2020 data, released December 17,
2020 (https://www.bls.gov/news.release/ecec.nr0.htm).
\4\ Throughout this analysis, CISA presents rounded hourly time
burden estimates and hourly compensation rates to assist in
reproducing the results. However, CISA's actual calculations use
unrounded figures; as such, estimates calculated using the values
presented in this analysis may not exactly match the reported
results.
---------------------------------------------------------------------------
CISA's Methodology in Estimating the Burden for the Request for an
Extension
This instrument collects information to request extensions for
CFATS reporting requirements.
[[Page 15491]]
CISA is proposing minor revisions to the instrument that reflect
the passage of the Cybersecurity and Infrastructure Security Act of
2018, 6 U.S.C. 651-74, such as updating the Agency name to conform with
the Agency's new designation as CISA, as well as a clearer description
of the scope of the instrument. The scope of this instrument remains
unchanged.
Number of Respondents
The current information collection estimated that 730 respondents
would submit a request for a Request for an Extension annually. Based
on data collected between CY 2018-2020, 374 respondents, on average,
submitted a Request for an Extension annually. In addition, there was
also a slight increase in the number of times a respondent would
request an extension. Because of the historical pattern of lower
submissions over the past three years with a slight increase in the
number of responses per respondent, CISA proposes to decrease the
estimated number of respondents from 730 to 400 respondents and
increase the number of responses per respondent from 1.00 to 1.25.
Estimated Time per Respondent
In the current information collection, the estimated time per
respondent to prepare and submit a Request for an Extension is 0.083
hours (5 minutes). CISA continues to believe this is a reasonable
burden for gathering and providing supporting documentation for this
instrument.
Annual Burden Hours
The annual burden hours for the Request for an Extension is [0.083
hours x 400 respondents x 1.25 response per respondent], which equals
41.7 hours.
Total Capital/Startup Burden Cost
CISA provides access to CSAT free of charge and assumes that each
respondent already has computer hardware and access to the internet for
basic business needs. Therefore, there are no annualized capital or
start-up costs incurred by chemical facilities of interest or high-risk
chemical facilities for this information collection.
Total Recordkeeping Burden
There are no recordkeeping burden costs incurred by chemical
facilities of interest or high-risk chemical facilities for this
information collection.
Total Annual Burden Cost
CISA assumes that SSOs are responsible for submitting a Request for
an Extension. For the purpose of this notice, CISA maintains this
assumption.
Therefore, to estimate the total annual burden, CISA multiplied the
annual burden of 41.7 hours by the average hourly wage rate of SSOs,
which is $85.82 per hour. Therefore, the total annual burden cost for
the Request for an Extension instrument is $3,576 (i.e., 41.7 total
annual burden hours x $85.82 per hour).
Top-Screen Update
This instrument collects information about the reason a facility
submits an updated Top-Screen (e.g., closure or sale of the facility).
CISA is proposing minor revisions to the instrument that reflect
the passage of the Cybersecurity and Infrastructure Security Act of
2018, 6 U.S.C. 651-74, such as updating the Agency name to conform with
the Agency's new designation as CISA, as well as a clearer description
of the scope this instrument. The scope of this instrument remains
unchanged.
Number of Respondents
The current information collection estimated that 1,250 respondents
would submit a request for a Top-Screen Update annually. Based on data
collected between CY 2018-2020, 2,353 respondents, on average,
submitted a Top-Screen Update annually. Because of the historical
pattern of higher submissions, CISA proposes to increase the estimated
number of respondents from 1,250 to 2,500 respondents. CISA will retain
the number of responses per respondent of 1.5.
Estimated Time per Respondent
In the current information collection, the estimated time per
respondent to prepare and submit a Top-Screen Update is 0.083 hours (5
minutes). CISA continues to believe this is a reasonable burden per
response for this instrument.
Annual Burden Hours
The annual burden hours for a Top-Screen Update is [0.083 hours x
2,500 respondents x 1.5 responses per respondent], which equals 312.5
hours.
Total Capital/Startup Burden Cost
CISA provides access to CSAT free of charge and assumes that each
respondent already has computer hardware and access to the internet for
basic business needs. Therefore, there are no annualized capital or
start-up costs incurred by chemical facilities of interest or high-risk
chemical facilities for this information collection.
Total Recordkeeping Burden
There are no recordkeeping burden costs incurred by chemical
facilities of interest or high-risk chemical facilities for this
information collection.
Total Annual Burden Cost
CISA assumes that SSOs are responsible for submitting a Top-Screen
Update. For the purpose of this notice, CISA maintains this assumption.
Therefore, to estimate the total annual burden, CISA multiplied the
annual burden of 312.5 hours by the average hourly wage rate of SSOs,
which is $85.82 per hour. Therefore, the total annual burden cost for
the Top-Screen Update instrument is $26,818 (i.e., 312.5 total annual
burden hours x $85.82).
CISA's Methodology in Estimating the Burden for Compliance Assistance
This instrument collects information when a facility requests a
consultation or seeks technical assistance about its CFATS regulatory
requirements. This instrument also collects information to respond to
potentially non-compliant facilities; verify material modifications
during the redetermination process; or follow-up on security issues or
results of a recent incident.
CISA is proposing minor revisions to the instrument that reflect
the passage of the Cybersecurity and Infrastructure Security Act of
2018, 6 U.S.C. 651-74, such as updating the Agency name to conform with
the Agency's new designation as CISA, as well as a clearer description
of the scope instrument. The scope of this instrument remains
unchanged.
Number of Respondents
The current information collection estimated that 455 respondents
would submit a request for Compliance Assistance annually. Based on
data collected between CY 2018-2020, 1,540 respondents, on average,
submitted a request for Compliance Assistance annually. Because of the
historical pattern of higher submissions, CISA proposes to increase the
estimated number of respondents from 455 to 1,600 respondents. CISA
previously estimated a response rate of 1.5 requests per respondent
annually; however, based on the historical pattern of requests for
Compliance Assistance, CISA proposes to decrease the number of
responses per respondent to 1.0.
Estimated Time per Respondent
In the current information collection, the estimated time per
respondent to prepare and submit a Request for Compliance Assistance is
0.083 hours (5 minutes). CISA continues to believe this
[[Page 15492]]
is a reasonable burden per response for this instrument.
Annual Burden Hours
The annual burden hours for the Compliance Assistance instrument is
[0.083 hours x 1,600 respondents x 1.0 responses per respondent], which
equals 133.3 hours.
Total Capital/Startup Burden Cost
CISA assumes that each respondent already has computer hardware and
access to the internet for basic business needs. Therefore, there are
no annualized capital or start-up costs incurred by chemical facilities
of interest or high-risk chemical facilities for this information
collection.
Total Recordkeeping Burden
There are no recordkeeping burden costs incurred by chemical
facilities of interest or high-risk chemical facilities for this
information collection.
Total Annual Burden Cost
CISA assumes that SSOs are responsible for submitting a Compliance
Assistance. For the purpose of this notice, CISA maintains this
assumption.
Therefore, to estimate the total annual burden, CISA multiplied the
annual burden of 133.3 hours by the average hourly wage rate of SSOs,
which is $85.82 per hour. Therefore, the total annual burden cost for
the Compliance Assistance instrument is $11,443 (i.e., 133.3 total
annual burden hours x $85.82 per hour).
CISA's Methodology in Estimating the Burden for the Declaration of
Reporting Status
This instrument collects information when a facility notifies CISA
that it is not required to register in CSAT or submit a Top-Screen.
CISA is proposing minor revisions to the instrument that reflect
the passage of the Cybersecurity and Infrastructure Security Act of
2018, 6 U.S.C. 651-74, such as updating the Agency name to conform with
the Agency's new designation as CISA, as well as a clearer description
of the scope instrument. The scope of this instrument remains
unchanged.
Number of Respondents
The current information collection estimated that 480 respondents
would submit a Declaration of Reporting Status annually. Based on data
collected between CY 2018-2020, 20 respondents, on average, submitted a
Declaration of Reporting Status annually. Because of the historical
pattern of lower submissions, CISA proposes to decrease the estimated
number of respondents from 480 to 100 respondents. CISA will retain the
number of responses per respondent of 1.0.
Estimated Time per Respondent
In the current information collection, the estimated time per
respondent to prepare and submit a Declaration of Reporting Status is
0.25 hours (15 minutes). CISA continues to believe this is a reasonable
burden estimate for this instrument.
Annual Burden Hours
The annual burden hours for the Declaration of Reporting Status is
[0.25 hours x 100 respondents x 1 response per respondent], which
equals 25 hours.
Total Capital/Startup Burden Cost
CISA assumes that each respondent already has computer hardware and
access to the internet for basic business needs. Therefore, there are
no annualized capital or start-up costs incurred by chemical facilities
of interest or high-risk chemical facilities for this information
collection.
Total Recordkeeping Burden
There are no recordkeeping burden costs incurred by chemical
facilities of interest or high-risk chemical facilities for this
information collection.
Total Annual Burden Cost
CISA maintains the assumption found in the other instruments within
this Information Collection that SSOs are responsible for submitting
information to CISA. Thus, CISA assumes that an SSO will submit the
Declaration of Reporting Status.
Therefore, to estimate the total annual burden, CISA multiplied the
annual burden of 25 hours by the average hourly wage rate of SSOs,
which is $85.82 per hour. Therefore, the total annual burden cost for
the Declaration of Reporting Status instrument is $2,145 (i.e., 25
total annual burden hours x $85.82 per hour).
OMB is particularly interested in comments that:
1. Evaluate whether the proposed collection of information is
necessary for the proper performance of the functions of the agency,
including whether the information will have practical utility;
2. Evaluate the accuracy of the agency's estimate of the burden of
the proposed collection of information, including the validity of the
methodology and assumptions used;
3. Enhance the quality, utility, and clarity of the information to
be collected; and
4. Minimize the burden of the collection of information on those
who are to respond, including through the use of appropriate automated,
electronic, mechanical, or other technological collection techniques or
other forms of information technology (e.g., permitting electronic
submissions of responses).
Analysis
Agency: Department of Homeland Security, Cybersecurity and
Infrastructure Security Agency.
Title: Chemical Facility Anti-Terrorism Standards (CFATS).
OMB Number: 1670-0014.
Instrument: Request for Redetermination.
Frequency: ``On occasion'' and ``Other''.
Affected Public: Business or other for-profit.
Number of Respondents: 250 respondents.
Estimated Time per Respondent: 0.25 hours.
Total Burden Hours: 62.5 annual burden hours.
Total Burden Cost (capital/startup): $0.
Total Recordkeeping Burden: $0.
Total Burden Cost: $5,364.
Instrument: Request for an Extension.
Frequency: ``On occasion'' and ``Other''.
Affected Public: Business or other for-profit.
Number of Respondents: 400 respondents.
Estimated Time per Respondent: 0.083 hours (5 minutes).
Total Burden Hours: 41.7 annual burden hours.
Total Burden Cost (capital/startup): $0.
Total Recordkeeping Burden: $0.
Total Burden Cost: $3,576.
Instrument: Top-Screen Update.
Frequency: ``On occasion'' and ``Other''.
Affected Public: Business or other for-profit.
Number of Respondents: 2,500 respondents.
Estimated Time per Respondent: 0.083 hours (5 minutes).
Total Burden Hours: 312.5 hours.
Total Burden Cost (capital/startup): $0.
Total Recordkeeping Burden: $0.
Total Burden Cost: $26,818
Instrument: Compliance Assistance.
Frequency: ``On occasion'' and ``Other''.
Affected Public: Business or other for-profit.
Number of Respondents: 1,600 respondents.
[[Page 15493]]
Estimated Time per Respondent: 0.083 hours (5 minutes).
Total Burden Hours: 133.3 annual burden hours.
Total Burden Cost (capital/startup): $0.
Total Recordkeeping Burden: $0.
Total Burden Cost: $11,443.
Instrument: Declaration of Reporting Status.
Frequency: ``On occasion'' and ``Other''.
Affected Public: Business or other for-profit.
Number of Respondents: 100 respondents.
Estimated Time per Respondent: 0.25 hours.
Total Burden Hours: 25 annual burden hours.
Total Burden Cost (capital/startup): $0.
Total Recordkeeping Burden: $0.
Total Burden Cost: $2,145.
(Authority: 6 U.S.C. 621-629)
Samuel Vazquez,
Acting Chief Information Officer, Department of Homeland Security,
Cybersecurity and Infrastructure Security Agency.
[FR Doc. 2021-05955 Filed 3-22-21; 8:45 am]
BILLING CODE 9110-9P-P