Metodologia Api

October 2004

Security Vulnerability Assessment Methodology for the Petroleum and Petrochemical Industries, Second Edition

October 2004

Security Vulnerability Assessment Methodology for the Petroleum and Petrochemical Industries, Second Edition

American Petroleum Institute 1220 L Street, NW Washington, DC 20005-4070 National Petrochemical & Refiners Association 1899 L Street, NWSuite 1000 Washington, DC 20036-3896

All rights reserved. No part of this work may be reproduced, stored in a retrieval system, or transmitted by any means, electronic, mechanical, photocopying, recording, or otherwise, without prior written permission from the publisher. Contact the Publisher, API Publishing Services, 1220 L Street, N.W., Washington, D.C. 20005. Copyright © 2004 AmericanPetroleum Institute

PREFACE
The American Petroleum Institute (API) and the National Petrochemical & Refiners Association (NPRA) are pleased to make this Second Edition of this Security Vulnerability Assessment Methodology available to members of petroleum and petrochemical industries. The information contained herein has been developed in cooperation with government and industry, and isintended to provide a tool to help maintain and strengthen the security of personnel, facilities, and industry operations; thereby enhancing the security of our nation’s energy infrastructure. API and NPRA wish to express sincere appreciation to the member companies who have made personnel available to work on this document. We especially thank the Department of Homeland Security and itsDirectorate of Information Analysis & Infrastructure Protection and the Department of Energy’s Argonne National Laboratory for their invaluable contributions. The lead consultant in developing this methodology has been David Moore of the AcuTech Consulting Group, whose help and experience was instrumental in developing this document. Lastly, we want to acknowledge the contributions of the Centersfor Chemical Process Safety for their initial work on assessing security vulnerability in the chemical industry. This methodology constitutes but one approach for assessing security vulnerabilities at petroleum and petrochemical industry facilities. However, there are several other vulnerability assessment techniques and methods available to industry, all of which share common risk assessmentelements. Many companies, moreover, have already assessed their own security needs and have implemented security measures they deem appropriate. This document is not intended to supplant measures previously implemented or to offer commentary regarding the effectiveness of any individual company efforts. The focus of this second edition was to expand the successful first edition by includingadditional examples of how the methodology can be applied to a wide range of assets and operations. This includes petroleum refining and petrochemical manufacturing operations, pipelines, and transportation including truck and rail. The methodology was originally field tested at two refinery complexes, including an interconnected tank farm, marine terminal and lube plant before the publication ofthe first edition. Since then, it has been used extensively at a wide variety of facilities involving all aspects of the petroleum and petrochemical industries. API and NPRA are not undertaking to meet the duties of employers, manufacturers, or suppliers to train and equip their employees, nor to warn any who might potentially be exposed, concerning security risks and precautions. Ultimately,it is the responsibility of the owner or operator to select and implement the security vulnerability assessment method and depth of analysis that best meet the needs of a specific location.

iii

CONTENTS
CHAPTER 1 INTRODUCTION ............................................................................................................ 1 1.1 INTRODUCTION TO SECURITY VULNERABILITY...