Home — Solutions — Cybersecurity Services — OT and ICS Security — CFATS Compliance Consulting Services

CFATS Compliance Consulting Services

Protect operations, satisfy stakeholders, and demonstrate due diligence by voluntarily complying with Chemical Facility Anti-Terrorism Standards. CBIZ Technology helps you stay aligned with the 18 risk-based performance standards (RBPS).

Risks Remain

While mandatory compliance with CFATS expired in 2023, the risks remain. Insurers, customers, and other stakeholders likely still expect you to take strong precautions and maintain CFATS-level protection. Abandoning the security investments you’ve already made creates gaps that invite exploitation and can increase the risk of noncompliance if Congress reauthorizes CFATS.

CBIZ Technology understands that chemical facilities remain attractive targets for cyber attacks, and we partner with you to maintain voluntary CFATS compliance. Our specialists adapt the 18 RBPS framework to your current threat potential, helping you protect critical infrastructure and supporting your reputation as a responsible corporate citizen.

construction

Our Solutions

Security Vulnerability Assessment

Knowing where vulnerabilities are is the first step to addressing them. We start with a structured methodology to identify your unique risks and existing defenses across critical security areas, including the cyber domain, access controls, and incident response.

Our team takes a comprehensive approach that considers your distinct technology setup and workflows. We apply proven frameworks to develop a risk-based, tiered strategy that prioritizes the highest-impact initiatives.

Manufacturing

CYBERSECURITY

Site Security Plan Development

Traditional site security plans have historically covered physical security extensively. The issue with this approach is that modern chemical facilities rely heavily on automation and network controls that manage operational technology and industrial systems.

We have the specialized knowledge to understand the full scope of your infrastructure. As a result, we tailor our advice to your actual risk environment and recommend the right chemical facility cyber risk management solutions to address the challenges.

Distribution

DATA GOVERNANCE

Chemical Facility OT Cybersecurity

The convergence of IT and OT in today’s chemical facilities creates one-of-a-kind cybersecurity challenges. Programmable logic controllers (PLCs), SCADA systems, and other operational technology mean new attack surfaces. These solutions often run on legacy systems that are difficult to secure, and patching can be an issue due to the downtime it often requires.

At CBIZ Technology, we take the time to understand how IT and OT interact and interconnect, so we know precisely where your particular vulnerabilities arise. We design customized chemical plant cybersecurity services to integrate with broader enterprise security operations and segment critical processes from corporate IT networks.

Why Partner With CBIZ Technology for CFATS Security Assessment Services?

Our team is uniquely qualified to help higher-risk chemical facilities maintain rigid security protocols to safeguard against potential terrorist activity. We bring:

  • AI-enhanced assessments: We leverage this advanced technology for faster vulnerability identification, monitoring, and predictive risk modeling that can strengthen your security posture.
  • Enterprise specialization: Our team specializes in serving enterprise-level businesses, providing us with deep expertise in the organizational complexities involved.
  • Cross-domain perspective: We have experience in IT and OT and understand the challenges of both disciplines and their convergence.
  • Industry framework knowledge: We understand industry framework requirements and how to accurately apply methodologies to risk standards to uphold voluntary compliance.
  • Insights that impact: Our team provides strategic security programs that help protect operations and enable business resilience, not just compliance checklists.

Frequently Asked Questions

What chemical facility security consulting services does CBIZ Technology provide?

We offer Security Vulnerability Assessments (SVAs) using CFATS methodology, Site Security Plan development focusing on technology defense, and OT/ICS cybersecurity integration for process control systems. Our services help you maintain documentation that satisfies stakeholder expectations and regulatory preparedness.

Is CFATS compliance still necessary since the program expired?

CFATS compliance is no longer a legal obligation, but your facility could still face substantial risks. Additionally, many stakeholders, including investors and insurers, may still expect you to follow strict security protocols. Maintaining voluntary compliance helps address these concerns and prepares you better for potential reauthorization.

What happens if Congress reauthorizes CFATS?

Facilities that kept up voluntary compliance may be able to demonstrate that quickly and avoid scrambling under deadline pressure. We help you stay current with SVAs and safeguard critical infrastructure by aligning your strategy with the 18 RBPS CFATS established.

Meet Our Cybersecurity Leadership Team

John Verry

John Verry

National Leader, Cybersecurity & GRC

Tiffany Garcia

Tiffany Garcia

Managing Director, Cybersecurity & GRC

Jeremy Price

Jeremy Price

Managing Director, Cybersecurity & GRC

Justin-Van-Druff

Justin Van Druff

VP, Business Development

Maintain Your Voluntary CFATS Program

Contact CBIZ Technology to discuss how our chemical facility security consulting services can help protect your operations and keep you ready for reauthorization.

Strategic Technology Solutions for Lasting Success
CBIZ Technology
Corporate Headquarters

68 South Service Road, Suite 300 Melville, NY 11747
877-454-0039

Get Social

Join the conversation and connect with us on our social media channels.

Online Support

For existing CBIZ Technology customers.


CBIZ Technology, Inc. ©2026 • All Rights Reserved.