The Department of Homeland Security (DHS) administers a Chemical Facility Antiterrorism Standards (CFATS) program, requiring chemical facilities to undertake security measures to protect against “potential consequences of or vulnerabilities to a terrorist attack or incident.” The statutory basis for the program was first enacted in 2007, revised in 2014, and continued as of 2020 to expire on July 27, 2023. CFATS is administered by DHS’ Cybersecurity and Infrastructure Security Agency (CISA). CFATS regulations establish risk-based performance standards for facilities that handle more than a screening threshold quantity (STQ) of any of 322 DHS-listed Chemicals of Interest. Regulatory requirements start with facility filing an online “Top-Screen” survey form with CISA. On February 10, 2021, CISA reported receiving its 100,000th Top-Screen report (from over 40,000 unique facilities); this milestone provides a reminder that CFATS requirements apply to large swathes of industry.