Who this is for: fleet managers, owner-operators, compliance assistants
Hazmat Security Plan Requirements for Carriers
Carriers transporting certain high-risk hazardous materials must have a written security plan under 49 CFR 172.800. Required materials include select agents, highway route-controlled quantities of radioactive materials, bulk quantities of certain flammable gases, and materials toxic by inhalation. The plan must address personnel security, unauthorized access, and en-route security.
Important Notice
Security plan requirements under 49 CFR 172.800 apply only to specific materials in specific quantities. This page is an educational overview. Consult 49 CFR Part 172 Subpart I and PHMSA guidance to determine whether your operations require a security plan.
Which carriers need a security plan
Under 49 CFR 172.800, a written security plan is required for carriers offering or transporting: highway route-controlled quantities of Class 7 (radioactive) materials; more than 25 kg of Division 1.1, 1.2, or 1.3 explosives; more than 1 liter per package of a Division 6.1 Packing Group I poison; any quantity of a material toxic by inhalation (TIH); bulk packaging containing hazardous materials of any class; and certain other specified quantities of high-risk materials. Check 49 CFR 172.800 for the complete list of materials and quantities that trigger the requirement.
What the security plan must include
Under 49 CFR 172.802, a hazmat security plan must address three areas: (1) Personnel security — procedures to confirm information provided by job applicants, including checks for employees who handle or transport certain hazmat; (2) Unauthorized access — measures to address the risk of unauthorized access to hazmat while in storage or transport, including truck checks and seal verification; and (3) En-route security — measures to address the risk of theft or diversion during transport, such as not leaving hazmat vehicles unattended in public areas.
Security training requirements
Under 49 CFR 172.704, employees who handle hazmat subject to a security plan must receive security awareness training. This includes training on recognizing and responding to possible security threats, how to report suspicious activity, and the carrier's security plan procedures. Security training must occur within 90 days of a new employee's first assignment involving hazmat and must be repeated every three years.
Background checks for hazmat drivers
CDL drivers who transport hazardous materials in quantities requiring a Hazmat (H) endorsement must pass a TSA security threat assessment (background check). This is a federal requirement for obtaining and renewing the H endorsement. The TSA check runs criminal history records and terrorist watch lists. Drivers with disqualifying offenses cannot obtain the H endorsement and cannot transport placardable quantities of hazmat.
Security plan recordkeeping and review
The security plan must be in writing and must be reviewed and updated as necessary. A copy of the plan must be maintained at the principal place of business and must be available for inspection by authorized federal, state, and local officials. PHMSA and DOT enforcement may review the plan during compliance inspections. The plan should be updated when operations change, personnel responsibilities change, or a security incident occurs.
Keeping the security plan current
A security plan is not a file-and-forget document. Review it when your operations change — new routes, new materials, new drivers handling qualifying hazmat, or a change in storage or terminal arrangements. After a security incident, even a minor one like an unauthorized person accessing a parked hazmat vehicle, update the plan to close the gap that was exposed. PHMSA inspectors reviewing the plan will look at when it was last updated relative to your operational history. A plan dated several years ago that doesn't reflect current routes, personnel, or materials raises questions that a current plan avoids.
Frequently Asked Questions
Does a small owner-operator transporting fuel in bulk need a security plan?
It depends on the quantities and materials involved. Bulk packaging of flammable liquids (e.g., fuel tankers) may trigger security plan requirements depending on quantity and material classification. Check 49 CFR 172.800 to determine if your specific operation requires a plan, or consult a hazmat compliance consultant.
Is the H endorsement security check the same as the security plan?
No. The TSA background check for the H endorsement is a driver qualification requirement. The security plan under 49 CFR 172.800 is a carrier operational requirement. Both may apply to the same operation — the driver must pass the TSA check, and the carrier must have a written security plan if transporting qualifying materials.
Does the security plan need to be updated when personnel change?
Yes. The plan addresses personnel security procedures, and when employees who handle qualifying hazmat change roles or leave, the plan should be reviewed to confirm it remains accurate and appropriate. A plan that names specific individuals in its procedures will need to be updated when those people are no longer in those roles.