New hazmat rules require shippers who are registered with the DOT as hazmat shippers and shippers of certain highly hazardous materials must develop and implement written security plans. In addition, all shippers (registered or not) and carriers of hazardous materials must assure that their employee training includes a security component.

General awareness training is required within 90 days of new hires, or at next recurrent training for existing employees. For companies required to develop a plan, it must be complete by Sept. 22, 2003, and employees who may ship or have access to an affected shipment will need to be trained in the new plan by Dec. 22, 2003.

The security plan must include an assessment of possible transportation security risks for shipments of the hazardous materials listed in Sec. 172.800 and appropriate measures to address the assessed risks. Specific measures put into place by the plan may vary commensurate with the level of threat at a particular time.

At minimum, a security plan must include the following elements:

(1) Personnel security. Measures to confirm information provided by job applicants hired for positions that involve access to and handling of the hazardous materials covered by the security plan. Such confirmation system must be consistent with applicable federal and state laws and requirements concerning employment practices and individual privacy.

(2) Unauthorized access. Measures to address the assessed risk that unauthorized persons may gain access to the hazardous materials covered by the security plan or transport conveyances being prepared for transportation of the hazardous materials covered by the security plan.

(3) En route security. Measures to address the assessed security risks of shipments of hazardous materials covered by the security plan en route from origin to destination, including shipments stored incidental to movement.

The security plan must be in writing and must be retained for as long as it remains in effect. Copies of the security plan, or portions thereof, must be available to the employees who are responsible for implementing it, consistent with personnel security clearance or background investigation restrictions and a demonstrated need to know. The security plan must be revised and updated as necessary to reflect changing circumstances. When the security plan is updated or revised, all copies of the plan must be maintained as of the date of the most recent revision.