(a) A facility owner or operator must ensure that the FSP consists of the individual sections listed in this paragraph (a). If the FSP does not follow the order as it appears in the list, the facility owner or operator must ensure that the FSP contains an index identifying the location of each of the following sections:
(1) Security administration and organization of the facility;
(2) Personnel training;
(3) Drills and exercises;
(4) Records and documentation;
(5) Response to change in MARSEC Level;
(6) Procedures for interfacing with vessels;
(7) Declaration of Security (DoS);
(8) Communications;
(9) Security systems and equipment maintenance;
(10) Security measures for access control, including the facility's TWIC Program and designated public access areas;
(11) Security measures for restricted areas;
(12) Security measures for handling cargo;
(13) Security measures for delivery of vessel stores and bunkers;
(14) Security measures for monitoring;
(15) Security incident procedures;
(16) Audits and security plan amendments;
(17) Facility Security Assessment (FSA) report;
(18) Facility Vulnerability and Security Measures Summary (Form CG-6025) available at https://www.dcms.uscg.mil/forms/ ;
(19)-(20) [Reserved]
(21) If applicable, cruise ship TSP in accordance with subpart E of this part; and
(22) System for seafarers' access.
(b) The FSP must describe in detail how the requirements of subpart B of this part will be met.
(c) The Facility Vulnerability and Security Measures Summary (Form CG-6025) must be completed using information in the FSA concerning identified vulnerabilities and information in the FSP concerning security measures in mitigation of these vulnerabilities.
[USCG-2003-14732, 68 FR 39322, July 1, 2003, as amended by USCG-2006-24196, 72 FR 3585, Jan. 25, 2007; USCG-2006-23846, 83 FR 12102, Mar. 19, 2018; USCG-2007-28915, 81 FR 57713, Aug. 23, 2016; USCG-2013-1087, 84 FR 12119, Apr. 1, 2019; USCG-2020-0304, 85 FR 58278, Sept. 18, 2020]