§ 73.14 Incident response.

(a) An individual or entity required to register under this part must develop and implement a written incident response plan based upon a site specific risk assessment. ^[1] The incident response plan must be coordinated with any entity-wide plans, kept in the workplace, and available to employees for review. The current incident response plan must be submitted for initial registration, renewal of registration, or when requested.

(b) The incident response plan must fully describe the entity's response procedures for the theft, loss, or release of a select agent or toxin; inventory discrepancies; security breaches (including information systems); severe weather and other natural disasters; workplace violence; bomb threats and suspicious packages; and emergencies such as fire, gas leak, explosion, power outage, and other natural and man-made events.