33 CFR §105.400

1. (a)The Facility Security Officer (FSO) must ensure a Facility Security Plan (FSP) is developed and implemented for each facility for which he or she is designated as FSO. The FSP:
   1. (1)Must identify the FSO by name and position, and provide 24-hour contact information;
   2. (2)Must be written in English;
   3. (3)Must address each vulnerability identified in the Facility Security Assessment (FSA);
   4. (4)Must describe security measures for each MARSEC Level; and
   5. (5)May cover more than one facility to the extent that they share similarities in design and operations, if authorized and approved by the cognizant COTP.
2. (b)The FSP must be submitted for approval to the cognizant COTP in a written or electronic format.
3. (c)The FSP is sensitive security information and must be protected in accordance with 49 CFR part 1520.
4. (d)If the FSP is kept in an electronic format, procedures must be in place to prevent its unauthorized deletion, destruction, or amendment.