Yep, there is a requirement in 33CFR105 that mandates that we have a Security Audit conducted annually at our facilities!
33CFR105.415 (4)(b) states that, “The FSO must ensure an audit of the FSP is performed annually, beginning no later than one year from the initial date of approval, and attach a letter to the FSP certifying that the FSP meets the applicable requirements of this part.”
So, that seems simple enough …….. not so fast, there are additional times when an audit may be required. 33CFR105 goes on to say, ” The FSP must be audited if there
is a change in the facility’s ownership or operator, or if there have been modifications to the facility, including but not limited to physical structure, emergency response procedures, security measures, or operations.”
We now know when we must have an audit conducted. In our next blogs we’ll discuss what should be included in the audit, who can conduct an audit and what documentation is required.