248-588-1600 (outside the US)


The Site Security Plan (SSP) is an online tool of approximately 1,200-1,500 questions where the facility enters all their current security measures and identifies what other measures they need to take.  DHS has authored the Risk Based Performance Standards (RBPS) which they believe to be the most important areas for reviewing each facility’s security posture.  These 18 standards include physical security, background screening of employees and vendors, training of personnel and even cyber security. While this list is not exhaustive, the details behind each individual RBPS are.  Completing the SSP is an intensive process requiring you to analyze all aspects of security with regards to your facility.  Security “guards, gates and guns” and procedures are not enough to make you compliant.

It is important to note that DHS focuses on the implementation of your SSP, not just the presence of the technology you add or the policies and procedures you write.  You must be able to demonstrate compliant security behavior rather than simply write about it.

Huffmaster has a four-step process that will help you focus on achieving compliance. Our expertise will guide you through each step, at any level of assistance you may need.  This process starts out with an onsite orientation which will allow our consultants to learn your business process, current security measures and culture.  Step two is the preparation stage where, after our site orientation, we will provide you with a Gap Analysis and Recommendations document that will help guide you toward compliance.  The third step is the completion of the SSP online tool which will be fully prepared with data, existing practices and approved plans.  Finally, and most importantly, Huffmaster can provide you with the assistance you need to implement the changes or improvements to achieve compliance; including training, documentation, audits and exercises!

CFATS Compliance

  • This field is for validation purposes and should be left unchanged.

  • This field is for validation purposes and should be left unchanged.