While mandatory compliance with CFATS expired in 2023, the risks remain. Insurers, customers, and other stakeholders likely still expect you to take strong precautions and maintain CFATS-level protection. Abandoning the security investments you’ve already made creates gaps that invite exploitation and can increase the risk of noncompliance if Congress reauthorizes CFATS.
CBIZ Technology understands that chemical facilities remain attractive targets for cyber attacks, and we partner with you to maintain voluntary CFATS compliance. Our specialists adapt the 18 RBPS framework to your current threat potential, helping you protect critical infrastructure and supporting your reputation as a responsible corporate citizen.

Knowing where vulnerabilities are is the first step to addressing them. We start with a structured methodology to identify your unique risks and existing defenses across critical security areas, including the cyber domain, access controls, and incident response.
Our team takes a comprehensive approach that considers your distinct technology setup and workflows. We apply proven frameworks to develop a risk-based, tiered strategy that prioritizes the highest-impact initiatives.

Traditional site security plans have historically covered physical security extensively. The issue with this approach is that modern chemical facilities rely heavily on automation and network controls that manage operational technology and industrial systems.
We have the specialized knowledge to understand the full scope of your infrastructure. As a result, we tailor our advice to your actual risk environment and recommend the right chemical facility cyber risk management solutions to address the challenges.

The convergence of IT and OT in today’s chemical facilities creates one-of-a-kind cybersecurity challenges. Programmable logic controllers (PLCs), SCADA systems, and other operational technology mean new attack surfaces. These solutions often run on legacy systems that are difficult to secure, and patching can be an issue due to the downtime it often requires.
At CBIZ Technology, we take the time to understand how IT and OT interact and interconnect, so we know precisely where your particular vulnerabilities arise. We design customized chemical plant cybersecurity services to integrate with broader enterprise security operations and segment critical processes from corporate IT networks.
We offer Security Vulnerability Assessments (SVAs) using CFATS methodology, Site Security Plan development focusing on technology defense, and OT/ICS cybersecurity integration for process control systems. Our services help you maintain documentation that satisfies stakeholder expectations and regulatory preparedness.
CFATS compliance is no longer a legal obligation, but your facility could still face substantial risks. Additionally, many stakeholders, including investors and insurers, may still expect you to follow strict security protocols. Maintaining voluntary compliance helps address these concerns and prepares you better for potential reauthorization.
Facilities that kept up voluntary compliance may be able to demonstrate that quickly and avoid scrambling under deadline pressure. We help you stay current with SVAs and safeguard critical infrastructure by aligning your strategy with the 18 RBPS CFATS established.
Contact CBIZ Technology to discuss how our chemical facility security consulting services can help protect your operations and keep you ready for reauthorization.


Join the conversation and connect with us on our social media channels.
For existing CBIZ Technology customers.
CBIZ Technology, Inc. ©2026 • All Rights Reserved.