Immediate compliance and business risks Missing a written hazmat security plan puts your shipments and your company at immediate legal and financial risk. PHMSA requires a written Hazardous Materials Security Plan under 49 CFR 172.800 for anyone who offers for transportation or transports specified hazardous materials. Under 49 CFR 172.802 , the plan must be written, retained while in effect, and reviewed at least annually. PHMSA can assess baseline civil penalties around $9,300 for certain security plan failures, with much larger fines and enforcement actions for serious violations. PHMSA enforcement guidance Beyond fines, inspections, shipment holds, corrective orders, and even criminal exposure can disrupt operations. Reputational damage from a public enforcement action often costs more than the penalty and slows recovery. Who must have a written hazmat security plan? Quick checks for shippers Not sure if your shipments need a written security plan? Under 49 CFR 172.800 , PHMSA requires a written plan for specific materials, quantities, and situations. Start with a few clear triggers. Any quantity of Division 1.1, 1.2, or 1.3 explosives requires a plan. Any quantity of materials poisonous by inhalation (PIH) also requires a plan and must carry "Inhalation Hazard" markings. Quantity thresholds matter for many other classes. A "large bulk quantity" is more than 3,000 kg (6,614 lb) for solids or more than 3,000 liters (792 gal) for liquids or gases in a single packaging. Large bulk shipments of flammable gases, certain flammable liquids, oxidizers, corrosives, and poisonous materials can trigger the plan requirement. Simple rules to self‑screen shipments Explosives manufacturers or distributors who ship any amount of Division 1.1, 1.2, or 1.3 materials need a security plan. If you move a cargo tank filled with gasoline or LPG, that large bulk quantity likely triggers the requirement. Agricultural suppliers hauling anhydrous ammonia or ammonium nitrate fertilizers in bulk should expect to need a plan. Medical or research facilities shipping Highway Route Controlled radioactive quantities or regulated select agents must include security planning. Manufacturers of organic peroxides or highly corrosive chemicals that meet Packing Group I or II thresholds must have a plan for affected shipments. Some materials need special treatment, not just a yes or no. Lithium cells and batteries do not automatically trigger the DOT security plan by hazard class. But lithium shipments face strict, mode‑specific safety controls for air transport, including state‑of‑charge and cargo‑only limits. PHMSA guidance on lithium batteries For radioactive materials, the triggers include IAEA Category 1 and 2 items, Highway Route Controlled Quantities, and NRC‑listed quantities of concern. Uranium hexafluoride that requires placarding will also bring the security plan requirement into play. Quick takeaway: if you ship explosives or PIH at all, you need a written plan. If you move large bulk quantities in a single packaging, check the 3,000 kg/3,000 L thresholds. When a material or quantity sits in a gray area, plan for a compliance audit or expert review so you stay ahead of enforcement risk. What a Compliant Hazmat Security Plan Must Include — and How to Turn Requirements into Controls Not sure what to put in a written hazmat security plan so it actually passes inspection? Start with the rule: 49 CFR 172.802 requires a transportation security risk assessment and measures for personnel security, prevention of unauthorized access, and en route security. PHMSA also recommends a clear, repeatable TSRA process to make those requirements practical. Following that process gives you defensible decisions and a record for inspectors. Follow a seven‑step TSRA so your plan is defensible Scoping: define which materials, locations, and modes the plan covers. Knowledge of operations: collect quantities, routes, schedules, and current security measures. Assessment: identify threat scenarios and risk control points using internal and external data. Strategy: prioritize risks and select proportional controls. Action: implement the chosen security measures across people, places, and processes. Verification: monitor that controls are working as intended. Evaluation: review results and update the plan at least annually. This seven‑step approach comes from PHMSA's RMSEF security template and makes the TSRA repeatable and auditable. PHMSA RMSEF security template Practical, proportionate controls you can use today Distribution centers: tighten access with single, well‑lit entry points, badge or fob systems, CCTV, inventory tracking, and targeted background checks for employees handling covered shipments. Manufacturing sites: add perimeter fencing, layered access zones, CCTV with active monitoring, role‑based security duties, and documented inspection rounds tied to the TSRA. Radiopharmacies: use locked, shielded storage; assigned Radiation Safety Officers; dos
