U.S. LNG Export Terminals: Physical Security, Maritime Interfaces and Fire-Protection Risk

Publication note: This article discusses federal requirements with different scopes and agencies. A proposed regulation remains proposed until finalized and effective. A fire watch, security patrol, radio-frequency examination, or third-party guard contract cannot independently restore a failed process-safety system or authorize continued LNG operations. Site-specific procedures, permits, approved security plans, and the responsible authorities control operational decisions.

Executive Abstract

The security of a liquefied natural gas export terminal is distributed across several jurisdictions and across systems whose failure consequences differ considerably. Protective enclosures around cryogenic storage and control equipment, waterside security measures around the marine transfer area, access-control records, firefighting systems, industrial shutdown logic, and corporate communications can have separate accountable operators and regulators. An operator may satisfy one requirement while leaving an adjacent physical or operational dependency insufficiently examined. The resulting exposure is especially consequential during expansions, maintenance campaigns, contractor turnover, and the transition from construction to operations.

A genuine regulatory catalyst arrived on November 3, 2026. The Pipeline and Hazardous Materials Safety Administration (PHMSA) published Pipeline Safety: Amendments to Liquefied Natural Gas Facilities, a notice of proposed rulemaking under docket PHMSA-2019-0091, 91 FR 69314. It proposes extensive revisions to 49 CFR Part 193, including use of NFPA 59A-2026, revised fire-protection requirements, and a proposed physical-security compliance recognition mechanism involving documented Coast Guard or Department of Homeland Security requirements. Comments are due January 4, 2027. This proposal must be evaluated as a pending change; current law remains applicable while the rulemaking develops. ^S01S02

For qualifying maritime facilities, a separate Coast Guard cybersecurity regime under 33 CFR Part 101, Subpart F, establishes a July 16, 2027 Cybersecurity Plan submission deadline and an assessment deadline. It should not be conflated with a universal 2027 requirement for every LNG export terminal to complete a newly named Physical Security Risk Assessment. Existing physical-security obligations already arise from PHMSA rules, maritime Facility Security Assessment and Facility Security Plan requirements, and specific operating conditions. ^S03S04

This paper examines the two principal regulatory boundaries—49 CFR Part 193 and 33 CFR Parts 105 and 127—together with FERC licensing and inspections, Department of Energy export authority, applicable hot-work safeguards, technical surveillance countermeasures (TSCM), and enterprise continuity. It draws distinctions among enforceable duties, proposed changes, historical events, illustrative risk scenarios, and privately recommended controls. The central planning proposition is straightforward: management needs evidence that each safety and security layer is functioning, a named authority for changing operating conditions, and a method for reconciling responsibilities at the points where plant, berth, vessel, contractor, and regulator intersect.

1. Evidence Architecture and Research Boundaries

Public discussion of LNG facility security often combines the regulatory content of several federal agencies, voluntary engineering practice, and private-service recommendations into a single asserted requirement. That approach obscures the decisions facility operators must actually make. The research therefore assigns every consequential assertion to a defined evidence class and treats a provider's recommended safeguards as analysis rather than as a federal mandate.

The work uses publicly available federal regulations, Federal Register notices, agency program descriptions, and published enforcement or infrastructure records. No site inspection, proprietary process-hazard analysis, Coast Guard-approved Facility Security Plan, nonpublic incident record, or classified threat intelligence was available for this study. Consequently, its scenario analysis does not certify any named terminal as compliant or deficient. Detailed plant network topology, security patrol routes, and safety-instrumented-system parameters are outside publication scope. ^S02S05

2. Why the Regulatory Timing Matters Now

PHMSA's November 3, 2026 proposal introduces a concrete opportunity for operators to evaluate how existing documented controls may correspond to a future rule. The proposal would modernize much of Part 193 by incorporating the 2026 edition of NFPA 59A in place of older incorporated editions, although it also proposes specific additions and exceptions. Among its subjects are fire-protection performance, management of change, facility design, operations and maintenance, security procedures, personnel training, and the possible treatment of documented compliance with other federal physical-security regimes. The comment window ends January 4, 2027. ^S01

This deadline is important to engineering management, general counsel, corporate security, and port operators because public comments can address feasibility, conflicting obligations, cost assumptions, and the evidence operators would be expected to retain. Filing a comment is voluntary; the notice does not establish a universal new physical-security certification deadline for mid-2027. A final rule could differ substantially from the proposal, and implementation dates may be phased or modified. Each facility should preserve a regulatory change log rather than quietly treating every proposed NFPA 59A-2026 provision as already enforceable federal law.

The separate Coast Guard Marine Transportation System cybersecurity rule creates a genuine 2027 milestone for owners and operators required to maintain a security plan under applicable maritime rules. For those covered facilities, 33 CFR 101.650(e)(1) addresses the Cybersecurity Assessment and 33 CFR 101.655 addresses Cybersecurity Plan submission by July 16, 2027. This requirement has an IT/OT security dimension, whereas the PHMSA proposal covers much broader LNG safety and facility design matters. A combined management program may share evidence, but one regulatory filing should not be represented as satisfying every other agency's obligations. ^S03S04

3. The Gulf Coast Asset System and Exposure Geography

Louisiana and Texas host multiple existing and developing LNG export facilities, associated pipelines, marine loading infrastructure, construction logistics, and vessel traffic. The facilities should be evaluated as individual operating systems. A project described as approved, under construction, in commissioning, or operating may have materially different activities and jurisdictional obligations. FERC's LNG resources and map archives provide a dated project inventory; an archived project designation must be checked before it is repeated as a present operating status. ^S07

The concentration of activity creates several categories of common dependence. Access routes may serve construction crews, terminal operators, maintenance vendors, heavy equipment, and emergency responders. A terminal's marine loading operations depend on the compatibility of vessel arrivals, pilotage, tug availability, berth access, communications, and safe transfer procedures. Industrial process safety depends on instruments, electrical power, trained personnel, written procedures, and the timely discovery of degraded systems. Contractor management becomes particularly important when permanent operators and expansion contractors occupy overlapping spaces.

The U.S. Energy Information Administration reported that LNG exports averaged 17.4 billion cubic feet per day in the first six months of 2026, an increase of 23 percent from the corresponding period in 2025. Its October 2026 Short-Term Energy Outlook projected approximately 17.6 Bcf/d for 2026 and 18.6 Bcf/d for 2027. These are national figures and forecasts, not estimates of physical-security incidents. They support the relevance of sustained capital investment, operational transitions, and infrastructure reliability. ^S08S09

4. A Practical Map of Federal Responsibilities

The federal framework is deliberately divided. The Federal Energy Regulatory Commission generally authorizes the siting, construction, expansion, and operation of jurisdictional onshore or near-shore LNG export terminals under the Natural Gas Act and performs ongoing project inspections. PHMSA establishes and enforces federal safety standards for covered onshore LNG facilities under Part 193. The Coast Guard governs vessel and maritime transfer safety, port and waterway suitability, and MTSA facility security obligations in applicable waterfront environments. The Department of Energy exercises authority over the export transaction itself, including public-interest review for many non-free-trade-agreement destinations; its export authorization should not be described as a plant-level physical-security certification. ^S05S07S10

FERC's project conditions can also impose particular engineering, hazard analysis, management of change, training, fire response, or inspection commitments. A facility may therefore face obligations beyond general CFR language. Coast Guard-approved Facility Security Plans govern maritime security measures and often describe security for more than the immediate transfer area. For a given terminal, legal counsel and the facility's designated security leadership should reconcile FERC orders, PHMSA requirements, Coast Guard plans, state law, and local fire authority directions with the actual asset register. ^S02S05S11

Jurisdiction diagram — conceptual, not a literal property-line map

DOE export authorization --------------------> LNG commodity export transaction
FERC authorizations/conditions --------------> Jurisdictional facility siting and operation
PHMSA / 49 CFR Part 193 ---------------------> Covered onshore LNG safety and security baseline
USCG / 33 CFR Part 127 ---------------------> Waterfront transfer and waterway suitability
USCG / 33 CFR Part 105 ---------------------> MTSA Facility Security Assessment and FSP
USCG / 33 CFR Part 101 Subpart F -----------> Covered maritime cybersecurity obligations
OSHA + state/local authorities -------------> Applicable worker, hot-work and fire safeguards

            OPERATOR / OWNER: RECONCILE CONCURRENT OBLIGATIONS

5. Federal Boundary Matrix: 33 CFR Versus 49 CFR

A meaningful boundary matrix must separate physical geography, covered activity, and the agency's legal powers. The waterfront and onshore facility regimes can overlap in their practical effect. PHMSA's 2026 proposed rule expressly discusses Coast Guard security oversight of waterfront LNG facilities and proposes ways for documented Coast Guard or DHS compliance to receive recognition under revised PHMSA rules. That future coordination mechanism has not yet replaced the current requirements. ^S01S02

The brief's suggestion that 33 CFR always mandates biometric boarding gates, or that 49 CFR requires biometric industrial turnstiles at every LNG plant, is not supported as a universal requirement by the cited provisions. Technology choices should be evaluated against what the relevant rule and approved facility plan require. Similarly, a thermal camera, marine radar, or patrol boat may be an effective authorized control, but the public regulatory record does not establish that every facility must use a particular commercial surveillance architecture. ^S12S13S14

6. Existing PHMSA Security Duties: Procedures, Enclosures and Monitoring

Part 193, Subpart J is already a substantial physical-security framework. Section 193.2903 requires each covered LNG plant operator to maintain written security procedures including inspection and patrol schedules, security positions and duties, breach response instructions, access determinations, positive identification of people entering or present at the plant, and liaison with local law enforcement. A contractor's post order should be derived from the operator's approved operating procedures and contractual allocation of duties. A generic security company's checklist cannot replace the legally responsible operator's records. ^S12

Section 193.2905 identifies equipment and systems requiring protective enclosures, including storage tanks, cargo transfer systems, process and liquefaction equipment, control rooms, fire control equipment, security communications, and alternative power. Sections 193.2909 through 193.2915 address security communications, lighting, monitoring, and alternative power under specified conditions. Section 193.2913 permits monitoring through scheduled visual observation or continuously reporting warning systems to an attended location; it does not mandate a full-time human patrol at every individual asset. A site's actual control design should follow the text and operating assumptions. ^S13S14S15

The practical question for a security director is whether there is a verified chain from regulation to a real operational control. Written access rules should match badge issuance, visitor escort practices, and contractor shift schedules. A documented enclosure should be assessed for unauthorized access without obstructing emergency escape. Monitoring evidence should show that events reached a staffed location and that the assigned personnel had reliable communications and escalation authority. These are factual questions with records that can be tested, rather than slogans about uncompromising security.

7. Coast Guard Facility Security Assessments and Plans

For an MTSA-covered LNG facility, 33 CFR 105.305 requires the Facility Security Assessment (FSA) to examine facility layout, access points, restricted areas, utilities, emergency equipment, relevant transportation infrastructure, vulnerabilities in personnel assignments, and waterside and shoreside exposure. It specifically includes assessment of existing private security agreements and possible conflicts between safety and security duties. These provisions make third-party guard management a legitimate part of the assessment, even though the regulatory responsibility remains with the owner or operator. ^S16

The Facility Security Plan under 33 CFR 105.405 provides the operational implementation structure: security organization, training, records, MARSEC level changes, vessel interface, declarations of security, communications, equipment maintenance, access control, restricted-area measures, and incident response. A site should be able to demonstrate which positions execute each duty during normal operations, maintenance surges, adverse weather, and a security-level change. Security-sensitive plans and vulnerability findings must be protected from unauthorized disclosure. ^S17

A risk analysis published for general readers should describe these management questions without exposing a real facility's restricted-area layout, security-system vulnerabilities, timing of patrols, or sensitive FSP content. The operator can maintain a more detailed private control assurance register under its own access restrictions. Public research and protected site evidence serve different purposes.

8. LNG Marine Transfer, the Waterway Suitability Assessment and the COTP

The Coast Guard's 33 CFR 127.007 establishes a Letter of Intent and Waterway Suitability Assessment process for qualifying new or expanded LNG waterfront operations where vessel traffic may increase. The process considers port characteristics, vessel routes, maritime safety and security risks, risk-management strategies, and resource needs. Under §127.009 the Captain of the Port issues a Letter of Recommendation concerning waterway suitability to the relevant siting authorities. The timing of these submissions depends on the type of activity and FERC process; an operator should use the actual regulatory schedule rather than a universal assumption. ^S18S19

During LNG transfer, §127.319 imposes specific operational conditions. A designated shoreside person in charge must maintain continuous communication with the vessel's transfer lead; certain inspections must occur for each transfer; and transfers must cease under specified dangerous conditions. Guard staff, waterside patrols, and marine supervisors should understand the boundaries of their assignments. A private patrol's reporting role is distinguishable from the COTP's authority to establish or enforce safety and security measures on navigable waters. ^S20

Practical planning should review vessel arrival windows, safe points for exchanging information, access for emergency services, marine-radio continuity, nearby commercial traffic, contractor access to the transfer area, and shutdown coordination. The purpose is to anticipate failures in responsibility or communication before an event makes those failures operationally significant.

9. The November 2026 PHMSA Proposal: Technical and Institutional Significance

PHMSA's proposal would reorganize parts of the LNG regulatory architecture while incorporating NFPA 59A-2026 subject to specific exclusions and additions. The agency explains that existing federal references rely heavily on older NFPA 59A editions and that newer plant designs, materials, and operating arrangements have outgrown some regulatory assumptions. It also proposes pathways for risk-based siting and, for qualifying FERC-jurisdictional facilities, operations and maintenance alternatives. These are proposals to be evaluated against the published text, rather than design permissions available immediately. ^S01

The fire and physical-security portions deserve special attention because the new referenced standard addresses emergency shutdown systems, continuous gas monitoring, fire detection, water-based protection, security enclosures, procedures, and training. The proposed requirement at §193.411 would call for fire-protection control systems to be inspected and tested at intervals not exceeding six months. The proposal's discussion of NFPA 59A-2026 Chapter 16 and related procedures provides a serious opportunity to improve documentation across plant engineering and physical security teams. The final scope, exceptions, and effective dates remain open. ^S01

10. Proposed §193.413 and the Evidence of Cross-Agency Compliance

One of the most significant technical details in the November 2026 proposal is its treatment of duplicate security requirements. Proposed §193.413 would permit specified documentation of Coast Guard Facility Security Assessment and Facility Security Plan compliance for FERC-jurisdictional import and export facilities to satisfy designated PHMSA physical-security duties under the revised structure. Another provision contemplates documentation of applicable DHS or TSA security requirements. PHMSA describes this as a way to recognize substantial security oversight already occurring through another federal channel. The precise future legal effect must be determined from any final regulation. ^S01

For practical readiness, operators should create a requirement-by-requirement evidence table. Each row should identify the protected asset, the applicable regulatory control, approved facility plan paragraph, equipment or personnel responsible, most recent evidence, exceptions, deficiencies, and decision owner. Records demonstrating another agency's compliance should be genuine and applicable to the specific facility; a contractor invoice or generic certificate cannot demonstrate that an entire FSP was implemented.

This approach also reveals areas where an apparent regulatory equivalence may conceal an operating gap. A waterside patrol documented in the FSP may meet an MTSA objective but leave a plant's backup power verification unresolved. A land-side protective enclosure may satisfy a PHMSA requirement while the marine transfer emergency communication chain remains dependent on an untested interface. The matrix should document how each control works across operating conditions, not simply which regulator mentioned it.

11. Fire Protection at LNG Facilities: What a Fire Watch Can and Cannot Do

The supplied research brief describes a universal rule under which a failed gas detector, flame scanner, or deluge system triggers an immediate shutdown unless a certified, dedicated fire watch is deployed. The official sources reviewed do not establish that blanket tradeoff. Federal LNG fire protection is governed through 49 CFR 193.2801 and its incorporated provisions, applicable FERC conditions, Coast Guard marine transfer rules, worker safety requirements, local codes, and approved procedures. A facility's safety case may depend on rapid detection, shutdown logic, process isolation, or water delivery that human observation cannot replicate. ^S21S20

A fire watch can serve specific functions: observing permitted hot work, monitoring an area when approved by the responsible authority, identifying visible hazards, notifying the control room, initiating an alarm, and maintaining a contemporaneous record. These tasks must be limited by competence, training, location, hazard assessment, and the operator's authorization. A patrol worker should never be represented as capable of restoring a gas-detection instrument, compensating for missing emergency shutdown logic, or guaranteeing the containment of a cryogenic release. Where adequate substitute protection cannot be established, the facility may need to suspend work, isolate equipment, reduce operating conditions, or take another action required by its approved safety procedures.

Fire-protection impairment decision chain — illustrative management workflow

IMPAIRMENT OR ALARM FAILURE DISCOVERED
                 |
                 v
Notify control room + named operational decision owner
                 |
                 v
Identify affected safeguard, process hazard and transfer state
                 |
                 v
Consult approved impairment / shutdown procedures and responsible AHJ
                 |
          +------+------+
          |             |
   Approved safe     Safe operation not
   compensating      demonstrable
   arrangements           |
          |               v
          v        Suspend / isolate /
Document approvals  change operating state
and boundaries              |
          +-------+--------+
                  v
      Repair, test, independent verification,
      formal authorization to restore service

12. Hot Work: Conditional Fire Watch, Permit Control and Prohibited Conditions

OSHA's 29 CFR 1910.252 imposes documented safeguards for welding and cutting. Fire watchers are required under the circumstances described in §1910.252(a)(2)(iii), including certain combustible exposures within 35 feet, concealed ignition paths, and locations where more than a minor fire could develop. The standard describes training, alerting and firefighting capabilities, and continued observation for at least a half hour after welding or cutting ends. A site's applicable version of NFPA 51B, fire code, permit requirements, and approved procedures may impose additional safeguards. ^S22

These provisions do not grant permission to perform hot work in an explosive atmosphere. OSHA expressly prohibits cutting and welding in specified unsafe conditions, including the presence or potential development of explosive atmospheres and sprinklered buildings while that protection is impaired. In LNG facilities, the work-permit process should verify isolation, gas testing, conditions around adjacent equipment, shielding, authorized personnel, and emergency communication. The fire watch is one part of that permit system, subject to its limitations. ^S22

A credible site program specifies the person authorizing work, the person testing atmospheric conditions, the watch's location and duties, alarm initiation method, conditions requiring immediate cessation, and who confirms the area is safe for return to normal operations. The record should be usable by supervisors across shift changes. The number of personnel and locations must follow the actual hazard and site authorization; the public source material does not justify a universal staffing ratio for all LNG terminal hot work.

13. Safety Instrumentation, Impairments and Restoration Decisions

Gas detectors, ultraviolet or infrared flame detectors, deluge valves, manual emergency shutdown devices, control-room alarms, and process isolation equipment form a layered engineering system. Their contributions differ by hazard. An alarm may make a deviation visible; an automatic shutdown may stop the process independently of human recognition; a deluge system can limit consequences under the assumptions of the approved design. Management should document which safeguard is impaired and whether remaining layers are independent enough to justify a revised operating state. ^S21S01

The report proposes an impairment control register that records equipment ID, function, discovery time, affected hazard, protective action, authorizing official, permitted operating limits, compensating safeguards, repair status, and restoration evidence. Sensitive equipment IDs and diagrams belong in the restricted site record, not the public edition. A degradation entry should automatically trigger reassessment when a shift changes, vessel transfer begins, construction boundaries move, or another safeguard becomes unavailable. This record serves audit, incident reconstruction, and practical operational discipline.

14. Industrial Perimeters: Physical Design and Operating Assurance

LNG terminals combine hazards that demand both exclusion and rapid emergency egress. PHMSA's requirements for protective enclosures, access, monitoring and emergency access should be considered together. Physical barriers designed to deter intruders must not create an unexamined escape problem, obstruct fire apparatus, or prevent designated personnel from reaching isolation equipment. The requirements for access control at an LNG plant are more nuanced than a demand to install every commercially available biometric, radar, and video system. ^S13S14

A useful security assessment reviews the purpose of each control boundary and the type of authorization used to cross it. Contractor ingress, delivery drivers, maintenance crews, marine pilots, vessel personnel, emergency responders, and audit visitors represent different operating cases. The system should establish identity and authorization while allowing legitimate work to proceed without bypassing protective measures. An access exception created to handle a construction surge can become a persistent exposure if no one owns its expiration.

Operational assurance can be evaluated through sampled badge records, visitor escort records, verified gate exceptions, alarm acknowledgment records, training and shift assignment evidence, and documented corrective actions. Published management metrics should be aggregated rather than revealing site-specific patterns that could support unauthorized access.

15. Waterside Security and the Limitations of Private Patrol Authority

An LNG berth occupies the seam between facility security, vessel operations, and Coast Guard waterway authority. Private waterside patrols may be appropriate under a facility's approved plan or contractual arrangements, but they operate within their legal and operational authorization. They should not be presented as exercising Captain of the Port powers to declare security zones or direct unrelated vessel traffic. The maritime security plan must identify communications channels, incident escalation, safe approach practices, and arrangements with the relevant COTP and public responders. ^S18S19S20

The principal management questions involve timely recognition, reliable attribution, and coordinated response. A private patrol may observe vessel movements, report unauthorized approaches, or support a secured berth area where lawful and specified. A vessel captain or marine superintendent controls distinct operational duties. When a serious incident occurs, there must be a coherent sequence for notifying the marine transfer person in charge, facility security leadership, Coast Guard, and emergency response as required by the situation. Adjacent commercial shipping and industrial traffic should be part of the analysis rather than treated as inherently hostile.

A waterside plan must also account for weather and communications failures. If a patrol cannot safely operate, the operator should know whether another approved measure maintains the necessary security objectives and who has authority to alter marine transfer conditions. The answer depends on the facility plan and actual conditions, not on a generic promise of around-the-clock patrol coverage.

16. Contractors, Maintenance Windows and Changing Control Ownership

Expansion projects create unusual overlaps among routine terminal operations and nonroutine construction or commissioning activities. Short-term contractors may require access to protected enclosures, networked controls, testing locations, or previously restricted utility corridors. The owner or operator remains responsible for coordinating site security with the applicable regulatory program, while specialized contractors retain responsibility for work within their qualifications and contract scope. ^S01S16

An effective control model requires at least four handoffs: verified identity and work authorization; hazard information before entry; named supervision while access persists; and closure that restores the prior approved condition. Security administration should coordinate with operations and maintenance rather than authorize entry solely because an individual possesses a valid company badge. Relevant permits, work orders, and change records need a common reference so an inspector can reconstruct why access was granted.

Contractor accountability should be measured through verified documentation rather than assumptions about uniform style, logos, or claimed previous assignments. Before assigning security personnel at a high-hazard site, confirm the agreed scope, licensing where applicable, required training, access privileges, communications, reporting and supervision. A qualified guard's observation role remains separate from process engineering, mechanical maintenance, emergency command, or regulatory interpretation unless separately authorized and trained.

17. TSCM in LNG Executive and Project Offices: Lawful Scope and Technical Limits

Sensitive LNG business activities may occur in project trailers, executive offices, legal meeting rooms, or communications centers. These settings can justify a properly scoped, authorized Technical Surveillance Countermeasures examination when an organization identifies a real confidentiality need. Public evidence reviewed for this paper does not establish a verified wave of clandestine bug installations at Gulf Coast LNG terminals or a federal requirement to conduct TSCM sweeps during every audit. The appropriate analytical posture is to recognize a plausible enterprise confidentiality exposure without inventing an incident rate or attacker. ^S01S16

A professional TSCM engagement begins with written property-owner authorization and a defined area. The assessment may include examination of approved equipment inventories, inspection for unexpected devices or wiring, review of access histories, and passive observations of radio-frequency conditions using lawful equipment. The assessor should record normal signal sources, uncertainty, limitations, and the exact time of the survey. A clean result is relevant to the surveyed location and conditions; later contractor access or equipment changes may require renewed assessment. The service must never be sold as proof that all eavesdropping is impossible.

Industrial facilities impose safety restrictions that ordinary office surveys may not encounter. The survey team must observe classified-area restrictions and facility-specific rules for electrical and electronic equipment. OSHA 29 CFR 1910.307 addresses equipment in hazardous classified locations; unapproved electronic instruments and invasive opening of powered cabinets can create a physical hazard or violate authorized maintenance procedures. A TSCM technician has no automatic authority to disassemble process equipment or enter a restricted control cabinet. ^S23

The supplied brief proposed active audio jamming. Devices that intentionally interfere with authorized radio services are generally prohibited under federal law, including for private business use. Because interference may compromise emergency communications, this publication recommends passive examination, appropriate physical privacy controls, sound isolation where lawful and technically justified, access management, and secure conference practices instead. Any acoustic measures must avoid interfering with alarms, emergency announcements, or operational communications. ^S24

18. Protecting Sensitive Meetings Without Interfering With Safety

Confidentiality and operational safety should be managed as parallel objectives. A room used for confidential financial or engineering discussions may also contain an emergency announcement speaker, fire alarm, radio repeater, or network port that supports another service. An intrusive survey that changes this equipment without approval could introduce more risk than it reduces. The facility should first establish which room systems are safety-relevant and which are legitimate communication endpoints.

A documented room release process can require authorized access, an agreed inspection time, a verified equipment inventory, confirmation of building-service integrity, closure of access exceptions, and custody of the survey report. The organization should define who may receive the findings and how confidential information is stored. Third-party vendors should return written evidence of the survey scope, limitations, and anomalies. For sensitive documents, established data-protection measures and controlled distribution remain necessary after a physical inspection.

The same discipline applies to temporary offices used during expansions or regulatory inspections. More personnel moving through a space creates more opportunities for uncontrolled access, but mere volume does not establish espionage. An enterprise risk assessment should identify the specific information asset, its legitimate users, consequences of disclosure, and reasonable safeguards. The result is an auditable confidentiality program instead of a generalized allegation that every audit room is under surveillance.

19. Cyber-Physical Dependencies and the Maritime Cybersecurity Deadline

An industrial operating environment may connect business scheduling, equipment maintenance, identity management, security cameras, ship-to-shore reporting, and plant process control. Some dependencies are direct; others arise when administrators share communications, facilities, personnel, or power. The Coast Guard's Subpart F cybersecurity framework applies to covered maritime operators required to maintain security plans under the relevant maritime parts. Its assessment and plan deadlines call for documented treatment of critical information technology and operational technology systems, but they do not eliminate existing physical-security responsibilities. ^S03S04

The appropriate management model gives the cybersecurity officer, facility security officer, process safety lead, and marine transfer leader a common procedure for incident qualification and escalation. A network anomaly affecting access control may require a physical access workaround. Loss of security communications may impair both gate supervision and waterborne coordination. A disruption that affects a process safeguard should be referred promptly to the engineer or operations official responsible for the safe operating state. These are coordination duties, not proof that a particular adversary has penetrated a real plant.

Cross-system escalation — illustrative

Unusual signal / access alert / failed instrument / marine anomaly
                            |
                            v
      Triage: asset, impact, operating condition, evidence
                            |
                  +---------+---------+
                  |         |         |
             PHYSICAL     PROCESS    DIGITAL
             SECURITY     SAFETY     SYSTEM
                  |         |         |
                  +---------+---------+
                            v
         Named decision owner determines safe state
                            |
                            v
     Required regulator / COTP / emergency notifications
                            |
                            v
        Repair or control change -> test -> acceptance

20. Drones and Remote Observation: Evidence Before Attribution

Unmanned aircraft can present questions for facility security: unauthorized photography, airspace restrictions, disruption of critical operations, or misidentification of a lawful flight. The brief describes recent drone incursions around Gulf Coast LNG assets but supplies no independently verified incident records. The research therefore treats unauthorized aerial observation as a scenario for planning, not an established 2026 regional campaign. Facilities should consult applicable FAA rules and law enforcement or other authorities before making claims about aircraft intent or counter-drone powers.

A rational response sequence records the observation time, approximate location, what personnel actually saw, and whether operations or safety were affected. The site should avoid publishing specific detection blind spots, response timings, or sensitive infrastructure layouts. Personnel should be trained to notify the appropriate control point and authorities under their documented plan. Unauthorized interference with an aircraft or communications requires separate legal analysis and cannot be assumed permissible because the facility handles critical energy infrastructure.

If a facility has adopted authorized detection technology, the assessment should examine its accuracy, personnel training, and false-alert management. Commercial claims about perfect drone detection or universal permission to defeat aircraft should be rejected. The key is to maintain operating discipline in the presence of an uncertain observation and to avoid unsafe unilateral action.

21. Lessons From the 2022 Freeport LNG Incident

The June 8, 2022 incident at Freeport LNG on Quintana Island, Texas, is a documented example of why process safety and crisis response remain central even when the research subject is physical security. PHMSA's enforcement case and public safety-order record describe an explosion and fire at the LNG export facility and the resulting investigation and corrective process. The official case records identify the proceedings and their procedural history; they should be read directly when developing a more detailed forensic account. ^S25

That incident does not establish that a security guard, drone operator, or technical-surveillance device caused the release. It also cannot support an inference about the reliability of another terminal without an engineering assessment. Its appropriate use in a risk monograph is to illustrate the importance of process boundaries, equipment condition, reliable emergency information, documented corrective actions, and communication among the plant operator, regulators, and responding organizations.

For tabletop purposes, an operator can ask how a serious process event would affect perimeter gates, marine transfer operations, emergency routes, and the continuity of command communications. If the engineering and security teams maintain different incident logs, a unified chronology becomes harder to reconstruct. Exercises should test the handoff between incident commanders and the people accountable for returning the affected plant area to service. Each proposed action must respect the operator's actual emergency plan.

22. Legal Process: A Relevant LNG Siting Decision

Court proceedings affecting LNG projects can change timelines and approval obligations, but they must be kept distinct from a direct physical-security standard. In City of Port Isabel v. FERC, the U.S. Court of Appeals for the District of Columbia Circuit addressed deficiencies in FERC's environmental review associated with the Rio Grande LNG and Rio Bravo Pipeline proceedings. FERC's July 31, 2025 announcement describes its supplemental environmental impact statement responding to the court's findings, including issues concerning affected communities, air-quality data and a proposed carbon-capture arrangement. ^S26

The case illustrates a governance principle applicable to large energy projects: project authorization requires a defensible administrative record addressing the issues actually before the agency. It is not judicial authority for requiring every LNG facility to deploy a TSCM team, mandate a particular number of waterside patrols, or use biometric turnstiles. The regulatory obligations governing a specific operator must still be identified in applicable CFR provisions, conditions of authorization, and approved plans.

For publication, the litigation should be cited only for its actual holdings and procedural posture. The legal history may continue to develop, and counsel should verify the latest orders before using the case to support an active project's schedule or compliance obligations. The research does not provide legal advice or a determination of any named project's permits.

23. Four-Step Risk Register: Failure, Exposure, Control and Assurance

The following scenarios provide an editorially useful framework for security and engineering meetings. They are not findings about any named LNG facility. Ratings are qualitative planning priorities, not quantified probabilities. A site assessment would determine severity and likelihood using verified processes, occupancy, safeguards, fault history and stakeholder criteria.

Four-step analytical method: For each scenario, record the initiating condition, applicable exposure, proposed control, and actual assurance evidence. A completed checklist is a management record, not proof of reduced likelihood until the control has been tested in the operating context.

24. Compound Scenario A: Maintenance, Alarm Impairment and Marine Transfer

Consider a hypothetical facility conducting an authorized maintenance program while an LNG carrier is scheduled to berth. A safety instrument becomes unavailable during maintenance, and the contractor's return-to-service work is delayed. A security shift supervisor knows that more workers have temporary access to a controlled area, but the marine transfer lead has not received a current impairment summary. The industrial operator must first determine the applicable safe operating condition using approved procedures. Any decision concerning transfer activity belongs to the authorized plant and marine leaders, subject to the relevant Coast Guard requirements.

If the control room receives conflicting status reports, the incident becomes a problem of decision authority before it becomes an engineering failure. The tabletop should test how quickly the impairment is reported, who decides whether the transfer may proceed, how contractor access is curtailed when work stops, and who verifies restoration. A fire-watch assignment might be relevant for a separate, approved worksite hazard; it does not supersede the need to address the failed safety instrument.

The exercise should record decision points rather than imagined attacker techniques. A useful output is a single approved escalation matrix, reconciled work and impairment logs, and a repeatable signoff process at vessel-arrival and shift-change boundaries. The scenario does not imply any real facility currently operates with these deficiencies.

25. Compound Scenario B: Confidentiality Survey During Construction Expansion

Consider a second hypothetical case involving a commercial planning meeting held in a temporary office near an LNG expansion. The corporate team requests a TSCM examination after learning that outside contractors have accessed the meeting area. The initial assessment documents the room's normal electronic devices and finds an unidentified but lawful maintenance radio associated with nearby work. The appropriate response is to confirm ownership and authorization, rather than announce that an adversary has planted an interception device.

The team checks whether the survey equipment is permitted in the area, confirms that fire alarms and emergency communications are unaffected, and documents the time and physical scope of the inspection. After contractors finish their work, access permissions are reconciled and the space can be released for its intended meeting use. The organization maintains ordinary document and communications security throughout the process. If something suspicious remains unexplained, a competent investigator and counsel determine preservation and escalation procedures.

The management value lies in recognizing that a technical sweep has a finite evidence window and that uncontrolled access can reopen a previously assessed exposure. Contract language, room control, written findings, and maintenance coordination therefore matter as much as any particular detector. This is a prospective business continuity example, not a claim about verified espionage in the LNG sector.

26. An Evidence-Based Risk Prioritization Model

Risk matrices are useful as prioritization aids when the basis for assigning scores is transparent. For a real terminal, likelihood requires facility-specific incident data, operating conditions, equipment reliability, exposure hours, human performance, and technical safeguards. Consequence requires credible process-safety and continuity analysis. This publication does not supply those proprietary inputs and therefore avoids presenting unsupported numerical reductions such as a move from 'critical 20' to 'low 4' after hiring a contractor.

A practical approach starts by classifying a control gap according to its consequence pathway: life safety, process containment, marine traffic, regulatory compliance, continuity, or confidentiality. Management records whether the protective layer is required by law, relied upon in an engineering safety case, or recommended as additional defense. A single missing legally required safety component should not be hidden in a low average score created by unrelated strong controls. Prioritization should elevate time-sensitive safe-state decisions and assign a named person with authority to stop affected work.

27. Ninety-Day Operational Readiness Program

A realistic first-quarter program should produce evidence that can be inspected and maintained. It should not promise that every engineering change or regulator review can be completed within 90 days. The starting activity is to establish the true asset and regulatory boundary. Each later phase produces a defined record for the owner or operator and identifies unresolved issues that require professional engineering or legal review.

Separately, responsible staff should prepare any desired comments on PHMSA docket PHMSA-2019-0091 before January 4, 2027. Covered maritime facilities should also maintain their Coast Guard cybersecurity compliance schedule toward July 16, 2027. Future final rules, FERC orders, local permits, and operating changes may create additional milestones; these must be confirmed rather than inferred. ^S01S03

28. Assurance Metrics, Public Reporting and Executive Decisions

An effective executive dashboard reports how well required controls are documented and tested, and whether overdue issues have a responsible owner. Recommended indicators include the percentage of sampled access exceptions closed by their authorized expiration, the age of outstanding impairment records, timeliness of testing after repair, documented marine interface exercises, communications failures discovered during drills, and completion of legal applicability review. These measurements are internal controls requiring actual site data; they should not be published as industry averages or vendor performance guarantees.

The highest-value board question concerns decision reliability. Can the organization identify who may pause a vessel transfer, isolate equipment, authorize hot work, approve a temporary security alternative, or notify the Coast Guard? Is that authority usable during nights, construction peaks and emergency shift changes? Does the evidence for restoration remain accessible after the immediate incident ends? A national industrial facility may operate numerous technologies while still failing to preserve an unambiguous chain of authority at its interfaces.

A well-designed program can separate the commercial sourcing of security personnel from operational control. Professional guards and patrol staff can supply observation, access management, incident documentation, and appropriate communications. Engineers, facility security officers, terminal supervisors, marine personnel, and responsible regulators retain their defined functions. An independent technical review should confirm any assertion that a particular compensating measure permits continued operations when a process-safety layer is degraded.

29. Research Limitations, Legal Review and Update Protocol

This report is a public-source research framework as of November 6, 2026. It does not evaluate any specific LNG facility's approved FSP, FERC order, waterway assessment, process hazard analysis, electrical area classification, or fire code determination. It contains no verified incident series concerning drone incursions or electronic espionage at named Gulf Coast export terminals. No federal source reviewed establishes a universal mid-2027 LNG Physical Security Risk Assessment filing requirement or automatic permission to replace failed safety systems with private fire-watch staffing.

The 2026 PHMSA NPRM must be rechecked at the January 2027 public-comment milestone and after any final rule. The 2027 Coast Guard cybersecurity schedule must be verified against the applicable rule and facility scope. Agency staffing, export project status, and operating approvals may change. The source registry carries exact document identifiers and research links so the publisher can update a material claim without rewriting the entire analysis. Any case-law discussion should also be rechecked for further judicial or agency action.

Prior to publication, the operator or editorial publisher should obtain review of regulatory interpretations by qualified counsel and the engineering implications by competent LNG specialists. Proposed operational controls must be adapted to the operator's actual procedures and the instructions of the authority having jurisdiction. No named provider should be represented as federally endorsed or certified on the strength of this independent public research.

30. Conclusion: Governing the Interfaces

The Gulf Coast LNG sector offers a demanding test of integrated physical security because several protective regimes coexist at the same facility. PHMSA's November 2026 notice draws attention to the prospect of a modernized LNG safety framework, while Coast Guard requirements already govern waterfront security plans, transfer operations and defined cybersecurity duties. Facility operators retain responsibility for establishing how overlapping requirements work in the conditions present at their sites. ^S01S05

The practical gains arise from a disciplined inventory of obligations, clear authority when an asset or safeguard changes condition, and evidence that a control has been tested. Fire-watch personnel, private maritime patrols, TSCM specialists, and contract security officers can contribute within properly defined assignments. Their work is strongest when site leadership has already specified the hazards, expected observations, reporting channels, legal boundaries and limits of delegated authority.

A risk assessment worth using should explain the decision it supports. At an LNG terminal that decision may be whether a transfer can begin, whether a process area is safe for permitted maintenance, whether a temporary access exception remains valid, or whether the organization has enough reliable information to release a confidential meeting room. Once those decisions have an accountable owner and a verifiable record, the facility gains a stronger basis for both compliance and operational resilience.

Glossary

Authoritative Citation Registry