{"text_format":"3","workbook":"xlsx","n_sheets":14,"sheets":["SSI Cover Sheet","Scoring Guidance","Profile Sheet","Checklist","Additional Information","Scoring Summary","Charting","Gold Standard Award","Baseline Security Measures","SSO","Technical","Weights","Pivot Stats","Dropdown Menus"],"not_rendered":{"charts":2,"images":2,"macros":1,"defined_names":5,"comments":6},"read":"whole","date_system":"1900"}

{"sheet":"SSI Cover Sheet","index":0,"n_rows":0,"n_cols":0,"rows_kept":0}

{"sheet":"Scoring Guidance","index":1,"n_rows":1020,"n_cols":8,"rows_kept":1020,"merged":[[1,1,1,7],[2,1,2,2],[2,6,2,7],[3,0,145,0],[3,1,3,7],[4,1,4,7],[5,1,9,1],[5,2,9,2],[5,3,9,3],[5,4,9,4],[5,5,9,5],[10,1,14,1],[10,2,14,2],[10,3,14,3],[10,4,14,4],[10,5,14,5],[11,6,12,6],[11,7,12,7],[15,1,19,1],[15,2,19,2],[15,3,19,3],[15,4,19,4],[15,5,19,5],[16,6,17,6],[16,7,17,7],[20,1,24,1],[20,2,24,2],[20,3,24,3],[20,4,24,4],[20,5,24,5],[20,6,22,6],[20,7,22,7],[23,6,24,6],[23,7,24,7],[25,1,29,1],[25,2,29,2],[25,3,29,3],[25,4,29,4],[25,5,29,5],[26,6,28,6],[26,7,28,7],[30,1,34,1],[30,2,34,2],[30,3,34,3],[30,4,34,4],[30,5,34,5],[35,1,39,1],[35,2,39,2],[35,3,39,3],[35,4,39,4],[35,5,39,5],[36,6,38,6],[36,7,38,7],[40,1,44,1],[40,2,44,2],[40,3,44,3],[40,4,44,4],[40,5,44,5],[41,6,43,6],[41,7,43,7],[45,1,49,1],[45,2,49,2],[45,3,49,3],[45,4,49,4],[45,5,49,5],[46,6,47,6],[46,7,47,7],[50,1,54,1],[50,2,54,2],[50,3,54,3],[50,4,54,4],[50,5,54,5],[55,1,59,1],[55,2,59,2],[55,3,59,3],[55,4,59,4],[55,5,59,5],[60,1,64,1],[60,2,64,2],[60,3,64,3],[60,4,64,4],[60,5,64,5],[61,6,62,6],[61,7,62,7],[65,1,69,1],[65,2,69,2],[65,3,69,3],[65,4,69,4],[65,5,69,5],[70,1,74,1],[70,2,74,2],[70,3,74,3],[70,4,74,4],[70,5,74,5],[70,6,71,6],[70,7,71,7],[72,6,73,6],[72,7,73,7],[75,1,79,1],[75,2,79,2],[75,3,79,3],[75,4,79,4],[75,5,79,5],[75,6,77,6],[75,7,77,7],[78,6,79,6],[78,7,79,7],[80,1,84,1],[80,2,84,2],[80,3,84,3],[80,4,84,4],[80,5,84,5],[80,6,81,6],[80,7,81,7],[82,6,83,6],[82,7,83,7],[85,1,85,7],[86,1,90,1],[86,2,90,2],[86,3,90,3],[86,4,90,4],[86,5,90,5],[91,1,95,1],[91,2,95,2],[91,3,95,3],[91,4,95,4],[91,5,95,5],[96,1,100,1],[96,2,100,2],[96,3,100,3],[96,4,100,4],[96,5,100,5],[97,6,98,6],[97,7,98,7],[101,1,105,1],[101,2,105,2],[101,3,105,3],[101,4,105,4],[101,5,105,5],[101,6,102,6],[101,7,102,7],[103,6,104,6],[103,7,104,7],[106,1,110,1],[106,2,110,2],[106,3,110,3],[106,4,110,4],[106,5,110,5],[111,1,115,1],[111,2,115,2],[111,3,115,3],[111,4,115,4],[111,5,115,5],[111,6,112,6],[111,7,112,7],[113,6,114,6],[113,7,114,7],[116,1,120,1],[116,2,120,2],[116,3,120,3],[116,4,120,4],[116,5,120,5],[117,6,119,6],[117,7,119,7],[121,1,125,1],[121,2,125,2],[121,3,125,3],[121,4,125,4],[121,5,125,5],[126,1,130,1],[126,2,130,2],[126,3,130,3],[126,4,130,4],[126,5,130,5],[126,6,127,6],[126,7,127,7],[128,6,129,6],[128,7,129,7],[131,1,135,1],[131,2,135,2],[131,3,135,3],[131,4,135,4],[131,5,135,5],[136,1,140,1],[136,2,140,2],[136,3,140,3],[136,4,140,4],[136,5,140,5],[141,1,145,1],[141,2,145,2],[141,3,145,3],[141,4,145,4],[141,5,145,5],[141,6,142,6],[141,7,142,7],[143,6,144,6],[143,7,144,7],[146,0,229,0],[146,1,146,7],[147,1,147,7],[148,1,152,1],[148,2,152,2],[148,3,152,3],[148,4,152,4],[148,5,152,5],[153,1,157,1],[153,2,157,2],[153,3,157,3],[153,4,157,4],[153,5,157,5],[158,1,162,1],[158,2,162,2],[158,3,162,3],[158,4,162,4],[158,5,162,5],[163,1,167,1],[163,2,167,2],[163,3,167,3],[163,4,167,4],[163,5,167,5],[168,1,170,1],[168,2,170,2],[168,4,170,4],[168,5,170,5],[171,1,175,1],[171,4,175,4],[176,1,180,1],[176,4,180,4],[181,1,185,1],[181,4,185,4],[186,2,188,2],[186,4,188,4],[189,2,193,2],[189,3,193,3],[189,4,193,4],[194,1,194,7],[195,1,199,1],[195,2,199,2],[195,3,199,3],[195,4,199,4],[195,5,199,5],[200,1,204,1],[200,2,204,2],[200,4,204,4],[200,5,204,5],[205,1,209,1],[205,2,209,2],[205,4,209,4],[205,5,209,5],[210,1,214,1],[210,4,214,4],[210,5,214,5],[215,1,219,1],[215,2,219,2],[215,4,219,4],[220,1,224,1],[220,4,224,4],[225,4,229,4],[225,5,229,5],[230,0,250,0],[231,2,235,2],[231,3,235,3],[231,4,235,4],[231,5,235,5],[236,2,240,2],[236,3,240,3],[236,4,240,4],[236,5,240,5],[241,2,245,2],[241,3,245,3],[241,4,245,4],[241,5,245,5],[246,2,250,2],[246,3,250,3],[246,4,250,4],[246,5,250,5],[251,0,303,0],[251,1,251,7],[252,2,256,2],[252,3,256,3],[252,4,256,4],[252,5,256,5],[257,1,261,1],[257,3,261,3],[257,4,261,4],[257,7,258,7],[259,6,261,6],[259,7,261,7],[262,1,266,1],[262,4,266,4],[267,1,271,1],[267,4,271,4],[267,6,268,6],[267,7,268,7],[272,1,276,1],[272,4,276,4],[277,1,281,1],[277,3,281,3],[277,5,281,5],[282,1,285,1],[282,3,285,3],[282,5,285,5],[286,1,290,1],[286,2,290,2],[286,3,290,3],[286,5,290,5],[291,2,295,2],[291,3,295,3],[291,5,295,5],[296,2,300,2],[296,3,300,3],[296,4,300,4],[296,5,300,5],[301,2,303,2],[301,3,303,3],[301,5,303,5],[304,0,464,0],[305,2,309,2],[305,3,309,3],[305,4,309,4],[305,5,309,5],[306,7,308,7],[310,2,314,2],[310,3,314,3],[310,5,314,5],[311,6,313,6],[311,7,313,7],[315,2,319,2],[315,5,319,5],[316,7,318,7],[320,2,324,2],[320,4,324,4],[320,5,324,5],[321,7,323,7],[325,2,329,2],[325,3,329,3],[325,4,329,4],[325,5,329,5],[326,6,328,6],[326,7,328,7],[330,2,334,2],[330,3,334,3],[330,4,334,4],[330,5,334,5],[331,6,333,6],[331,7,333,7],[335,2,339,2],[335,3,339,3],[335,4,339,4],[335,5,339,5],[336,6,338,6],[336,7,338,7],[340,2,344,2],[340,3,344,3],[340,4,344,4],[341,6,343,6],[341,7,343,7],[345,2,349,2],[345,3,349,3],[345,4,349,4],[346,6,348,6],[346,7,348,7],[350,2,354,2],[350,3,354,3],[350,4,354,4],[351,6,353,6],[351,7,353,7],[355,2,359,2],[355,3,359,3],[355,4,359,4],[356,6,358,6],[356,7,358,7],[360,2,364,2],[360,3,364,3],[361,6,363,6],[361,7,363,7],[365,2,369,2],[365,3,369,3],[366,6,368,6],[366,7,368,7],[370,2,374,2],[370,3,374,3],[371,6,373,6],[371,7,373,7],[375,2,379,2],[375,3,379,3],[376,6,378,6],[376,7,378,7],[380,2,384,2],[380,3,384,3],[381,6,383,6],[381,7,383,7],[385,2,389,2],[385,3,389,3],[385,4,389,4],[386,6,388,6],[386,7,388,7],[390,3,394,3],[390,4,394,4],[391,6,393,6],[391,7,393,7],[395,2,399,2],[395,3,399,3],[395,4,399,4],[396,6,398,6],[396,7,398,7],[400,2,404,2],[400,3,404,3],[400,4,404,4],[401,6,403,6],[401,7,403,7],[406,6,408,6],[406,7,408,7],[411,6,413,6],[411,7,413,7],[416,6,418,6],[416,7,418,7],[420,2,424,2],[420,3,424,3],[421,7,423,7],[425,2,429,2],[425,3,429,3],[426,7,428,7],[430,1,434,1],[430,2,434,2],[430,3,434,3],[430,5,434,5],[431,7,433,7],[435,1,439,1],[435,2,439,2],[435,3,439,3],[435,5,439,5],[436,6,438,6],[436,7,438,7],[440,1,444,1],[440,2,444,2],[440,3,444,3],[440,5,444,5],[445,1,449,1],[445,2,449,2],[445,3,449,3],[445,4,449,4],[445,5,449,5],[446,6,448,6],[446,7,448,7],[450,1,454,1],[450,2,454,2],[450,3,454,3],[450,4,454,4],[450,5,454,5],[451,6,453,6],[451,7,453,7],[455,1,459,1],[455,2,459,2],[455,3,459,3],[455,5,459,5],[456,7,458,7],[460,1,464,1],[460,2,464,2],[460,3,464,3],[460,5,464,5],[461,7,463,7],[465,0,480,0],[465,1,465,7],[466,2,470,2],[466,4,470,4],[466,5,470,5],[467,7,469,7],[471,2,475,2],[471,4,475,4],[471,5,475,5],[472,7,474,7],[476,2,480,2],[476,4,480,4],[476,5,480,5],[477,7,478,7],[481,0,541,0],[482,2,486,2],[482,5,486,5],[487,2,491,2],[487,5,491,5],[488,7,490,7],[492,2,496,2],[492,6,493,6],[492,7,493,7],[494,6,496,6],[494,7,496,7],[497,2,501,2],[497,3,501,3],[497,5,501,5],[502,2,506,2],[502,3,506,3],[502,5,506,5],[503,7,505,7],[507,2,511,2],[507,3,511,3],[507,4,511,4],[507,5,511,5],[508,7,510,7],[512,2,516,2],[512,3,516,3],[512,4,516,4],[512,5,516,5],[512,6,513,6],[514,6,516,6],[517,2,521,2],[517,3,521,3],[517,4,521,4],[517,5,521,5],[517,6,518,6],[517,7,518,7],[519,6,521,6],[519,7,521,7],[522,2,526,2],[522,3,526,3],[522,4,526,4],[522,5,526,5],[523,7,525,7],[527,2,531,2],[527,3,531,3],[527,4,531,4],[527,5,531,5],[528,7,530,7],[532,2,536,2],[532,3,536,3],[532,5,536,5],[533,6,535,6],[533,7,535,7],[537,2,541,2],[537,3,541,3],[537,5,541,5],[538,6,540,6],[538,7,540,7],[542,0,577,0],[543,2,547,2],[543,3,547,3],[543,4,547,4],[543,5,547,5],[544,6,546,6],[544,7,546,7],[548,2,552,2],[548,3,552,3],[548,4,552,4],[548,5,552,5],[549,6,551,6],[549,7,551,7],[553,2,557,2],[553,3,557,3],[553,4,557,4],[553,5,557,5],[553,6,554,6],[553,7,554,7],[555,6,556,6],[555,7,556,7],[558,2,562,2],[558,3,562,3],[558,4,562,4],[558,5,562,5],[559,6,561,6],[559,7,561,7],[563,2,567,2],[563,3,567,3],[563,4,567,4],[563,5,567,5],[564,6,566,6],[564,7,566,7],[568,2,572,2],[568,3,572,3],[568,4,572,4],[568,5,572,5],[569,6,571,6],[569,7,571,7],[573,1,577,1],[573,2,577,2],[573,3,577,3],[573,4,577,4],[573,5,577,5],[573,6,574,6],[573,7,574,7],[575,6,577,6],[575,7,577,7],[578,0,603,0],[578,1,578,7],[579,2,583,2],[579,3,583,3],[579,4,583,4],[579,5,583,5],[580,7,582,7],[584,2,588,2],[584,3,588,3],[584,4,588,4],[584,5,588,5],[584,6,585,6],[584,7,585,7],[586,6,588,6],[586,7,588,7],[589,2,593,2],[589,3,593,3],[589,4,593,4],[589,5,593,5],[591,7,592,7],[594,2,598,2],[594,3,598,3],[594,4,598,4],[594,5,598,5],[599,2,603,2],[599,3,603,3],[599,4,603,4],[599,5,603,5],[599,6,600,6],[599,7,600,7],[601,6,603,6],[601,7,603,7],[604,0,669,0],[605,2,609,2],[605,3,609,3],[605,4,609,4],[605,5,609,5],[606,7,608,7],[610,2,614,2],[610,3,614,3],[610,4,614,4],[610,5,614,5],[611,7,613,7],[615,2,619,2],[615,3,619,3],[615,4,619,4],[615,5,619,5],[615,6,616,6],[615,7,616,7],[617,6,619,6],[617,7,619,7],[620,2,624,2],[620,3,624,3],[620,4,624,4],[620,5,624,5],[620,6,621,6],[620,7,621,7],[622,7,624,7],[625,1,629,1],[625,2,629,2],[625,3,629,3],[625,4,629,4],[625,5,629,5],[625,6,626,6],[625,7,626,7],[627,6,629,6],[627,7,629,7],[630,1,634,1],[630,2,634,2],[630,3,634,3],[630,4,634,4],[630,5,634,5],[630,6,631,6],[630,7,631,7],[632,6,634,6],[632,7,634,7],[635,1,639,1],[635,2,639,2],[635,3,639,3],[635,4,639,4],[635,7,636,7],[637,7,639,7],[640,2,644,2],[640,3,644,3],[640,4,644,4],[640,5,644,5],[641,6,643,6],[645,2,649,2],[645,3,649,3],[645,5,649,5],[646,6,648,6],[650,2,654,2],[650,3,654,3],[650,5,654,5],[650,6,651,6],[650,7,651,7],[652,6,654,6],[652,7,654,7],[655,2,659,2],[655,3,659,3],[655,5,659,5],[656,7,658,7],[660,2,664,2],[660,3,664,3],[660,5,664,5],[661,6,663,6],[661,7,663,7],[665,2,669,2],[665,3,669,3],[665,4,669,4],[665,5,669,5],[666,6,668,6],[666,7,668,7],[670,0,705,0],[670,1,670,7],[671,1,675,1],[671,2,675,2],[671,3,675,3],[671,5,675,5],[672,6,674,6],[672,7,674,7],[676,1,680,1],[676,2,680,2],[676,3,680,3],[676,4,680,4],[676,5,680,5],[677,6,679,6],[677,7,679,7],[681,1,685,1],[681,2,685,2],[681,3,685,3],[681,4,685,4],[681,5,685,5],[682,6,684,6],[682,7,684,7],[686,1,690,1],[686,2,690,2],[686,3,690,3],[686,4,690,4],[686,5,690,5],[691,1,695,1],[691,2,695,2],[691,3,695,3],[691,4,695,4],[691,5,695,5],[692,6,694,6],[692,7,694,7],[696,1,700,1],[696,3,700,3],[696,4,700,4],[696,5,700,5],[697,6,699,6],[697,7,699,7],[701,1,705,1],[701,2,705,2],[701,3,705,3],[701,4,705,4],[701,5,705,5],[701,7,702,7],[703,7,705,7],[706,0,841,0],[706,1,706,7],[707,1,711,1],[707,2,711,2],[707,3,711,3],[707,4,711,4],[707,5,711,5],[708,6,710,6],[708,7,710,7],[712,1,716,1],[712,2,716,2],[712,3,716,3],[712,4,716,4],[712,5,716,5],[713,6,715,6],[713,7,715,7],[717,1,721,1],[717,2,721,2],[717,3,721,3],[717,4,721,4],[717,5,721,5],[718,7,720,7],[722,1,726,1],[722,2,726,2],[722,3,726,3],[722,4,726,4],[722,5,726,5],[723,6,725,6],[723,7,725,7],[727,1,731,1],[727,2,731,2],[727,3,731,3],[727,4,731,4],[727,5,731,5],[728,6,730,6],[728,7,730,7],[732,1,736,1],[732,2,736,2],[732,3,736,3],[732,4,736,4],[732,5,736,5],[733,6,735,6],[733,7,735,7],[737,1,741,1],[737,2,741,2],[737,3,741,3],[737,4,741,4],[737,5,741,5],[738,6,740,6],[738,7,740,7],[742,1,746,1],[742,2,746,2],[742,3,746,3],[742,4,746,4],[742,5,746,5],[743,6,745,6],[743,7,745,7],[747,1,751,1],[747,2,751,2],[747,3,751,3],[747,4,751,4],[747,5,751,5],[748,6,750,6],[748,7,750,7],[752,1,756,1],[752,2,756,2],[752,3,756,3],[752,5,756,5],[753,6,755,6],[753,7,755,7],[757,2,761,2],[757,3,761,3],[757,5,761,5],[758,6,760,6],[758,7,760,7],[762,2,766,2],[762,3,766,3],[762,5,766,5],[767,2,771,2],[767,3,771,3],[767,5,771,5],[768,6,770,6],[768,7,770,7],[772,1,776,1],[772,2,776,2],[772,3,776,3],[772,5,776,5],[777,2,781,2],[777,3,781,3],[778,6,779,6],[778,7,779,7],[782,5,786,5],[783,7,785,7],[787,2,791,2],[787,5,791,5],[787,6,788,6],[789,6,791,6],[792,2,796,2],[792,3,796,3],[792,5,796,5],[793,6,795,6],[797,2,801,2],[797,3,801,3],[797,5,801,5],[798,6,800,6],[802,1,806,1],[802,2,806,2],[802,3,806,3],[803,6,805,6],[807,2,811,2],[807,3,811,3],[807,5,811,5],[808,6,810,6],[808,7,810,7],[812,2,816,2],[812,3,816,3],[812,5,816,5],[813,6,815,6],[813,7,815,7],[817,2,821,2],[817,5,821,5],[818,6,819,6],[818,7,819,7],[822,2,826,2],[822,5,826,5],[827,2,831,2],[827,5,831,5],[827,6,828,6],[827,7,828,7],[829,6,831,6],[832,2,836,2],[837,3,841,3],[842,0,877,0],[843,2,847,2],[843,5,847,5],[844,7,846,7],[848,5,852,5],[850,6,852,6],[853,2,857,2],[853,5,857,5],[853,6,854,6],[855,6,857,6],[855,7,857,7],[858,5,862,5],[858,6,859,6],[860,6,862,6],[863,5,867,5],[868,5,872,5],[873,5,877,5],[878,3,882,3],[879,7,881,7],[883,3,887,3],[884,7,886,7],[888,0,913,0],[889,5,893,5],[894,5,898,5],[899,4,903,4],[899,5,903,5],[899,7,900,7],[904,4,908,4],[905,6,907,6],[909,2,913,2],[909,3,913,3],[910,6,912,6],[914,0,929,0],[915,2,919,2],[915,3,919,3],[915,4,919,4],[916,6,918,6],[920,2,924,2],[920,3,924,3],[920,5,924,5],[920,6,921,6],[920,7,921,7],[922,6,924,6],[922,7,924,7],[925,2,929,2],[925,3,929,3],[925,5,929,5],[926,6,928,6],[926,7,928,7],[930,0,950,0],[931,2,935,2],[931,5,935,5],[932,6,934,6],[932,7,934,7],[936,2,940,2],[936,3,940,3],[937,6,939,6],[937,7,939,7],[941,2,945,2],[942,7,944,7],[946,2,950,2],[947,6,949,6],[947,7,949,7],[951,0,1021,0],[952,2,956,2],[952,5,956,5],[953,6,955,6],[953,7,955,7],[957,2,961,2],[957,5,961,5],[958,6,960,6],[958,7,960,7],[962,2,966,2],[962,3,966,3],[962,5,966,5],[963,6,965,6],[963,7,964,7],[967,2,971,2],[967,3,971,3],[967,5,971,5],[967,6,968,6],[967,7,968,7],[969,6,971,6],[969,7,971,7],[973,6,975,6],[973,7,975,7],[978,6,980,6],[978,7,980,7],[982,6,983,6],[982,7,983,7],[984,6,986,6],[984,7,986,7],[987,1,991,1],[987,3,991,3],[987,6,988,6],[987,7,988,7],[989,6,991,6],[989,7,991,7],[992,3,996,3],[992,6,993,6],[992,7,993,7],[994,6,996,6],[994,7,996,7],[997,6,998,6],[997,7,998,7],[999,6,1001,6],[999,7,1001,7],[1002,5,1006,5],[1002,6,1003,6],[1002,7,1003,7],[1004,6,1006,6],[1004,7,1006,7],[1007,5,1011,5],[1007,6,1009,6],[1007,7,1009,7],[1010,6,1011,6],[1010,7,1011,7],[1012,5,1016,5],[1012,6,1013,6],[1012,7,1013,7],[1014,6,1016,6],[1014,7,1016,7],[1017,5,1021,5],[1017,6,1018,6],[1017,7,1018,7],[1019,6,1021,6],[1019,7,1021,7]],"merged_total":1446,"flags":["merged_cut"]}
[null,"Mass Transit BASE Scoring Guidance - Appendix IX"]
[null,"As general guidance , scores are to be assigned on a scale of 0-4 as follows:  \n“0” Security element should be in place but does not exist. (Equates to total non-adherence – 0%)\n“1” Security element exists, but does not include all essential recommended components. (Equates to minimal adherence – 25-50%)\n “2” Security element is in place with all essential components but not fully implemented or practiced. (Equates to partial adherence or implementation – 50-75%)\n “3” Security element is in place and practiced but not monitored or periodically reviewed. (Equates to strong adherence, but not full implementation – 75-99%)\n “4” Security element is in place, fully implemented and regularly reviewed/verified. (Equates to full implementation – 100%)  Also assigned to “yes/no” question having a “Yes” response.  \n“N/A” Checked - Security element is not applicable and rational must be given to support the N/A rating.  "]
[null,"Line Element",null,"SIDoT","Comments","Items of Interest","Scoring Example"]
["Security Action Item 1 ","Establish Written System Security Plans (SSPs) and Emergency Response Plans (ERPs)"]
[null,"System Security Plan (SSP)"]
[null,1.101,"Does the transit agency have a System Security Plan (SSP)?","Document Review","Inspectors should refer to the MT BASE Guidance, Pg12.      ","Policies and procedures related to security--including personnel security, vehicle security, facility security, and threat/vulnerability management.",4,"SSP is a well developed plan, complete with detailed policies and procedures related to personnel security, facility security, vehicle security, and threat/vulnerability management. SSP is missing no key elements and has been completely implemented by the agency."]
[{"$nulls":6},3,"SSP is a complete document with polices and procedures that have been appropriately implemented by the agency. Only a few minor security elements are missing. Key concepts are detailed with minimal exceptions. "]
[{"$nulls":6},2,"Generic policies and procedures are documented and implemented adequately. Key concepts are documented, but lacking any depth. In fact, the plan simply appears to be a commonly available \"template.\"  "]
[{"$nulls":6},1,"SSP is a generalized document that is lacking any detailed, agency-specific security elements. Key concepts are missing or not adequately implemented by the agency."]
[{"$nulls":6},0,"There is no SSP in place."]
[null,1.102,"Does the SSP identify the goals and objectives for the security program?","Document Review",null,"Documented method of effectively assessing and monitoring security program's purpose and progress.",4,"Goals and objectives are identified, documented and actively monitored to ensure the SSP is fulfilling its purpose. "]
[{"$nulls":6},2,"Goals and objectives are identified and documented, but not monitored. Items may be missing or ineffective."]
[]
[{"$nulls":6},1,"Goals and objectives are minimal, lacking any specifics or depth. These items do not effectively assess and monitor the SSP's purpose and progress, respectively."]
[{"$nulls":6},0,"The SSP does not address goals or objectives of the security program."]
[null,1.103,"Does a written policy statement exist that endorses and adopts the policies and procedures of the SSP that is approved and signed by top management, including the agency's chief executive? ","Document Review","Justification should include at least two management and implementation statements","Policy statement including: endorsement statement/signature, applicability, and authority/background of the plan.",4,"Policy statement is a well developed written statement (memo, mission statement, etc.) that includes all elements: endorsement statement, applicability, authority establishing the plan, and approval signature from the agencies chief executive."]
[{"$nulls":6},2,"Policy statement a brief endorsement statement by chief executive and a signature."]
[]
[{"$nulls":6},1,"Policy statement only includes a brief endorsement statement. No endorsement signature."]
[{"$nulls":6},0,"There is no policy statement of any sort in place."]
[null,1.104,"Is the SSP separate from the agency’s System Safety Program Plan (SSPP)?","Document Review",null,"\"Yes\" or \"No.\"",4,"SSP is a stand-alone document, separate from the System Safety Plan. "]
[]
[]
[{"$nulls":6},0,"System Security Plan is part of another document. (Note: In the past, railroads/agencies would incorporate the Security Plan into the Safety Plan - using the APTA SSPP template, element 17: Security)"]
[]
[null,"1.105\nT1","Do the Security and Emergency Response Plans address protection and response for critical underwater tunnels, underground stations/ tunnels and other critical systems, where applicable?","Document Review","In addition to underwater tunnels, underground stations/ tunnels, this question also applies to other critical systems.","Review SSP to determine if items are address effectively.                   ",4,"Security plans address specific policies and procedures related to security and emergency response for underwater / underground infrastructure (if system has any) and/or other critical systems."]
[{"$nulls":6},2,"Security plans address policies and procedures with varying degrees of implementation."]
[]
[]
[{"$nulls":6},0,"Security plans do not address items."]
[null,1.106,"Does the SSP contain or reference other documents establishing procedures for the management of security incidents by the operations control center (or dispatch center)?","Document Review",null,"Operation Control Center: managing incidents",4,"Procedures for the management of security incidents by the OCC (or dispatch center) is identified in the Security Plan. Specific procedures are in place and documented in the SSP. If documented elsewhere, such as in a stand-alone Emergency Response Plan, the SSP references that document."]
[{"$nulls":6},3,"Plans and procedures are in place and function appropriately. However, minor aspects are missing. SSP includes--or references documents that contain--the procedures."]
[{"$nulls":6},2,"Well organized procedures are in place and contained as part of another document with no reference in the SSP. "]
[{"$nulls":6},1,"Procedures are lacking any depth or clarity, plans are scattered between multiple documents with no reference in SSP, or responsibilities are otherwise ineffectively assigned."]
[{"$nulls":6},0,"Procedures are not in place or documented."]
[null,1.107,"Does the SSP contain or reference other documents establishing plans, procedures, or protocols for responding to security events with external agencies (such as law enforcement, local EMA, fire departments, etc.)?","Document Review","In Justification, describe plans, procedures or protocols.","Documented plans for coordinating with external agencies.",4,"Well-developed, specific procedures are in place and documented in the SSP or as part of another document and referenced in the SSP."]
[{"$nulls":6},2,"Procedures are in place with varying degrees of implementation or documentation."]
[]
[]
[{"$nulls":6},0,"Procedures are not in place or documented."]
[null,1.108,"Does the SSP contain or reference other documents that establish protocols addressing specific threats from (i) Improvised Explosive Devices (IED) and (ii) Weapons of Mass Destruction (chemical, biological, radiological hazards)?","Document Review",null,"Protocols for IED and WMD",4,"Well-developed, specific protocols are in place that address IED and WMD. These protocols are documented in the SSP or as part of another document, such as a stand-alone Emergency Response Plan, and referenced in the SSP."]
[{"$nulls":6},2,"Protocols are developed with varying degrees of implementation or documentation."]
[]
[]
[{"$nulls":6},0,"Protocols have not been developed."]
[null,"1.109\nT3","Are visible, random security measures integrated into security plans to introduce unpredictability into security activities for deterrent effect?   ","Document Review","Agency should strive to implement and document their own unpredictable security measures using their own resources.","Random or unpredictable security measures that are documented in security plans.",4,"Random, unpredictable measures are well-documented with specific measures assigned by employee-type. Includes both security and non-security personnel."]
[{"$nulls":6},2,"Random, unpredictable measures are documented. Measures are simply general guidance lacking specifics."]
[]
[{"$nulls":6},1,"The agency relies on outside entities to provide random, unpredictable measures. Agency only participates in VIPR or other similar outreach. Participation in program is documented in the SSP."]
[{"$nulls":6},0,"Random, visible measures are not documented in the SSP."]
[null,{"v":1.11,"d":"1.110"},"Does the SSP include provisions requiring that security be addressed in extensions, major projects, new vehicles and equipment procurement and other capital projects, and including integration with the transit agency’s safety certification process?","Document Review",null,"Project/procurement planning, engineering, design, construction, and testing.",4,"Security plays a role in all new projects and procurements and is part of the safety certification process. This is required by the agency and documented in the SSP. There is a formal process in place for planning and implementing a project with security playing a role in various phases, including: planning, engineering, construction, testing, and final implementation."]
[{"$nulls":6},3,"Security plays a role in all new projects and procurements and is part of the safety certification process.  There is a formal process in place for planning and implementing a project with security playing a role in various phases, including: planning, engineering, construction, testing, and final implementation. This is required by the agency and documented in the agency's Safety plan--not the SSP."]
[{"$nulls":6},2,"Specific security concerns are considered for all new projects, but implementation is an informal process and not required (recommended as opposed to required). Process is documented."]
[{"$nulls":6},1,"Security is addressed on an informal basis with only general security guidance considered. Process is documented."]
[{"$nulls":6},0,"There is no documented evidence in place that suggest security is addressed with new projects or procurements."]
[null,1.111,"Does the SSP include or reference other documents adopting Crime Prevention Through Environmental Design (CPTED) principles as part of the agency's engineering practices?","Document Review",null,"Project design, engineering, and construction.",4,"CPTED principles are addressed in all facilities and fully implemented. These principles are documented in the SSP or other documents (which are referenced in the SSP). "]
[{"$nulls":6},3,"CPTED principles are addressed and implemented in a majority of facilities. This is documented in the SSP or other documents (which are referenced in the SSP). Vulnerabilities have been identified."]
[{"$nulls":6},2,"CPTED principles are addressed with minimal implementation. Principles are documented in the SSP or other documents (which are referenced in the SSP). "]
[{"$nulls":6},1,"CPTED adoption is merely a general acknowledgement contained in the SSP or other document (that is referenced in the SSP)."]
[{"$nulls":6},0,"CPTED is not adopted by the agency."]
[null,1.112,"Does the SSP require an annual review?","Document Review","Reference date of last review in justification.","Annual review requirement. A review is focused on written policy and ensuring policies are sufficient. ",4,"Annual review is a written requirement with verification measures in place (signed and dated)"]
[{"$nulls":6},2,"Annual review is a \"commonly known\" requirement (not documented) or a written requirement with no verification measure in place."]
[]
[{"$nulls":6},1,"SSP is reviewed on an \"as-needed\" basis, but at least every two years."]
[{"$nulls":6},0,"There are no review requirements in place, and the SSP is not regularly reviewed."]
[null,1.113,"Does the transit agency produce periodic reports reviewing its progress in meeting its SSP goals and objectives?","Document Review",null,"An example of periodic reports reviewing SSP progress",4,"Reports are produced once per year at a minimum and are detailed and developed regularly to track the agency's progress in meeting the goals and objectives identified in the SSP. "]
[{"$nulls":6},3,"Periodic reports are detailed and developed once in a two-year cycle OR periodic reports are developed once per year but are lacking in detail."]
[{"$nulls":6},2,"Informal reports are developed on an \"as-needed\" basis."]
[{"$nulls":6},1,"Reports are not documented, per se, but the agency does have an informal, verbal system in place to monitor the agency's progress in fulfilling its goals and objectives."]
[{"$nulls":6},0,"The agency does not monitor its progress in any way."]
[null,1.114,"Has an annual review of the SSP been performed and documented in the preceding 12 months?","Document Review",null,"Documented evidence of a annual review. A review is focused on written policy and ensuring policies are sufficient. ",4,"Annual review is verifiable by document review."]
[]
[{"$nulls":6},2,"Annual review is only verifiable by interview."]
[]
[{"$nulls":6},0,"SSP has not been reviewed."]
[null,1.115,"Does the SSP outline a process for securing SSO agency review and approval of updates to the SSP?","Document Review","49 CFR PART 659 SSO Only Question","\"Yes\" or \"No.\" Documented process for SSO approval. N/A for entities not regulated under 49 CFR § 659.",4,"Documented process for securing SSO review and approval of SSP is included in writing, or directly referenced, in the SSP. "]
[]
[]
[{"$nulls":6},0,"Documented process does not exist."]
[]
[null,1.116,"Has the transit agency submitted and received documentation from the SSO confirming its review and approval of the SSP currently in effect?","Document Review","49 CFR PART 659 SSO Only Question \nIf yes, indicate the approval date in evidence. ","Current SSP has been approved by SSO. N/A for entities not regulated under 49 CFR § 659.",4,"Approval (including date of approved) is verifiable through document review."]
[]
[{"$nulls":6},2,"SSP has been submitted to the SSO agency, but approval is pending."]
[]
[{"$nulls":6},0,"SSP has not been approved."]
[null,"Emergency Response Plan (ERP)"]
[null,1.201,"Does the transit agency have an Emergency Response Plan (ERP)?","Document Review","Inspectors should refer to the MT BASE Guidance, Pg13.  ","Emergency response procedures",4,"ERP is a well developed plan, complete with detailed policies and procedures related to emergency response. ERP is missing no key elements and has been completely implemented by the agency."]
[{"$nulls":6},3,"ERP is a complete document with polices and procedures that have been appropriately implemented by the agency. Only a few minor elements are missing. Key concepts are detailed with minimal exceptions. "]
[{"$nulls":6},2,"Generic policies and procedures are documented and implemented adequately. Key concepts are documented, but lacking any depth. In fact, the plan simply appears to be a commonly available \"template.\"  "]
[{"$nulls":6},1,"ERP is a generalized document that is lacking any detailed, agency-specific security elements. Key concepts are missing or not adequately implemented by the agency."]
[{"$nulls":6},0,"There is no ERP in place."]
[null,1.202,"Does a written policy statement exist that endorses and adopts the policies and procedures of the ERP that is approved and signed by top management, including the agency's chief executive? ","Document Review",null,"Policy statement including: endorsement statement/signature, applicability, and authority/background of the plan.",4,"Policy statement is well developed and includes all elements: endorsement statement, applicability, authority establishing the plan, and approval signature from the agencies chief executive."]
[{"$nulls":6},3,"Includes a brief endorsement statement by chief executive and a signature."]
[{"$nulls":6},2,"Policy statement only includes an endorsement signature."]
[{"$nulls":6},1,"Policy statement only includes a brief endorsement statement. No endorsement signature."]
[{"$nulls":6},0,"There is no policy statement of any sort in place."]
[null,1.203,"Does the ERP require an annual review to determine if it needs to be updated?","Document Review",null,"Documented requirement for annual review.",4,"Annual review is a written requirement with verification measures in place (signed and dated)."]
[{"$nulls":6},2,"Annual review is a \"commonly known\" requirement (not documented) or a written requirement with no verification measure in place."]
[]
[{"$nulls":6},1,"ERP is reviewed on an \"as-needed\" basis, but at least every two years."]
[{"$nulls":6},0,"There are no review requirements in place, and the ERP is not regularly reviewed."]
[null,1.204,"Has an annual review of the ERP been performed and documented in the preceding 12 months?","Document Review","Reference date of last review in justification.","Documented evidence of a annual review.",4,"Annual review is verifiable by document review."]
[]
[{"$nulls":6},2,"Annual review is only verifiable by interview."]
[]
[{"$nulls":6},0,"ERP has not been reviewed."]
[null,1.205,"Does the ERP include a process or review provision to ensure coordination with the rail transit agency’s SSPP and SSP?","Document Review",null,"Emergency response procedures coordinated with security and safety procedures. (Emergency procedures do not hinder safety or security.)",4,"ERP includes documented provisions that ensure its coordination with the agency's safety and security plans."]
[{"$nulls":6},3,"ERP includes documented provisions that ensure its coordination with either the agency's security plans or the agency's safety plans--not both."]
[{"$nulls":6},2,"Provisions are in place and clearly implemented, but no documentation established."]
[{"$nulls":6},1,"Coordination is very informal with no specific provisions in place. Documentation includes only vague general statements (\"Safety and security should be addressed during emergency situations\")."]
[{"$nulls":6},0,"There is no coordination between the ERP and SSP/SSPP."]
[null,1.206,"Has the transit agency received documentation from the SSO confirming its review and approval of the ERP currently in effect?","Document Review","49 CFR PART 659 SSO Only Question","SSO approval of current ERP. N/A for entities not regulated under 49 CFR § 659.",4,"Approval (including date of approval) is verifiable."]
[]
[{"$nulls":6},2,"ERP has been approved, but approval is not verifiable."]
[]
[{"$nulls":6},0,"ERP has not been approved."]
[null,1.207,"Does the ERP contain or reference other documents establishing plans, procedures, or protocols for responding to emergency events with external agencies (such as law enforcement, local EMA, fire departments, etc.)?","Document Review",null,"Documented plans for coordinating with external agencies.",4,"Well-developed, specific procedures are in place and documented in the ERP or as part of another document and referenced in the ERP."]
[{"$nulls":6},2,"Procedures are in place with varying degrees of implementation or documentation."]
[]
[]
[{"$nulls":6},0,"Procedures are not in place or documented."]
[null,1.208,"Does the ERP contain or reference other documents that establish procedures for the management of emergency events, including those to be employed by the operations control center (or dispatch center)?","Document Review",null,"Management of emergency events",4,"The responsibility for the management of security incidents has been assigned to the Operations Control Center (or dispatch center). Specific procedures are in place and documented in the ERP. If documented elsewhere, the ERP references that document."]
[{"$nulls":6},3,"Plans and procedures are in place and function appropriately. However, minor aspects are missing. ERP includes--or references documents that contains--the procedures."]
[{"$nulls":6},2,"Well organized procedures are in place and contained as part of another document with no reference in the ERP. "]
[{"$nulls":6},1,"Procedures are lacking any depth or clarity, plans are scattered between multiple documents with no reference in ERP, or responsibilities are otherwise ineffectively assigned."]
[{"$nulls":6},0,"Procedures are not in place or documented."]
[null,1.209,"Does the ERP contain or reference other documents to provide for Continuity of Operations while responding to emergency events?","Document Review","Verify COOP addresses 5 main goals outlined in the MT BASE Guidance, Pg13. ","Continuity of Operations plan.",4,"Continuity of Operations plans exist and are included as part of the ERP (or in another document that is referenced in the ERP)."]
[]
[{"$nulls":6},2,"Continuity of Operations plans exist but are not included as part of the ERP or referenced in the ERP."]
[]
[{"$nulls":6},0,"No Continuity of Operations plans exist."]
[null,{"v":1.21,"d":"1.210"},"Does the agency have a written Business Recovery Plan to guide restoration of facilities and services following an emergency event?","Document Review",null,"Procedures to recover from an event and resume normal operations.",4,"Business Recovery Plan is a comprehensive plan. Essential business functions (HR, IT, etc.) have been identified , and the agency has taken steps to protect vital business information (records, data, etc.). The plan outlines steps to be taken to return the agency to a \"normal\" operational status in a timely manner. Policies and procedures (including who activates the plan and how the agency transitions from emergency operations to business recovery) are detailed."]
[{"$nulls":6},3,"Business Recovery Plan is a well-developed document, missing only a few elements or details. "]
[{"$nulls":6},2,"Business Recovery Plan is a generic plan that appears to be a commonly available \"template\" with only general procedures."]
[{"$nulls":6},1,"Business Recovery Plan is lacking details and appears incomplete. "]
[{"$nulls":6},0,"There is no plan in place to achieve a timely and orderly recovery and resumption of full service."]
[null,1.211,"Does the agency have a written Business Continuity Plan and COOP to guide restoration of facilities and services following an emergency event?","Document Review",null,"Procedures to continue essential operations during emergency.",4,"Business Continuity Plan is a comprehensive plan. Essential operations functions (bus operations, security infrastructure) and key facilities have been identified. Policies and procedures are detailed and effective in mitigating any disruption to operations. Continuity responsibilities are identified (including who is responsible for activating the plan). Any resulting SOP changes are documented."]
[{"$nulls":6},3,"Business Continuity Plan is a well-developed document, missing only a few elements or details. "]
[{"$nulls":6},2,"Business Continuity Plan is a generic plan that appears to be a commonly available \"template\" with only general procedures."]
[{"$nulls":6},1,"Business Continuity Plan is lacking details and appears incomplete. "]
[{"$nulls":6},0,"There is no plan in place to ensure the continuity of operations."]
[null,1.212,"Does the agency have a back-up operations control center capability?","Document Review","indicate last time this was tested (if applicable) in Justification.","Secondary site of Operations Control.",4,"The agency has identified a back-up location for operations control. This secondary location can quickly become fully operational and is equipped to function in the same capacity as the primary Operation Control Center."]
[]
[{"$nulls":6},2,"There is a back up operations control center, but it cannot fully replicate the primary operations center capabilities.  "]
[]
[{"$nulls":6},0,"There is no back-up capabilities for the Operations Control Center."]
["Security Action Item 2","Define Roles and Responsibilities for Security and Emergency Management"]
[null,"System Security Plan (SSP)"]
[null,2.101,"Does the SSP establish and assign responsibility for implementation of the security program to a Senior Manager who is a \"direct report\" to the agency's Chief Executive Officer?","Document Review","Inspectors should refer to the MT BASE Guidance, Pg14.  ","Documented evidence assigning implementation of security program in the SSP.",4,"The implementation of the security program has been assigned to a Senior Manager who is a \"direct report\" to the CEO. This responsibility is documented in the SSP."]
[{"$nulls":6},3,"The implementation of the security program has been assigned to a Senior Manager who is a \"direct report\" to the CEO. This responsibility is not documented in the SSP, but it is a commonly known assignment that is documented elsewhere."]
[{"$nulls":6},2,"The implementation of the security program has been assigned to a manager or leadership position that is not a \"direct report\" to the CEO. The responsibility is documented in the SSP."]
[{"$nulls":6},1,"The implementation of the security program has been ineffectively assigned to a position that cannot act independently. The responsibility is documented in the SSP."]
[{"$nulls":6},0,"The implementation of the security program is not assigned, or there is no documentation establishing the responsibility of implementation."]
[null,2.102,"Has the agency established lines of delegated authority/succession of security responsibilities and, if so, has that information been distributed to agency managers?","Document Review",null,"Chain of Command and Lines of Succession for security responsibilities.",4,"The agency has established comprehensive policies and procedures related to \"chain of command\" and \"lines of succession\" for security responsibilities. The policy is well documented, and lines of succession include multiple individuals based on the importance of responsibilities (more important roles have longer, multi-personnel lines of succession). This policy is shared with agency managers."]
[{"$nulls":6},3,"The agency has established basic--yet fully developed--procedures related to \"chain of command\" and \"lines of succession\" for security responsibilities.  Minor elements are missing or needing further development. Lines of succession may not be in-depth, only identifying one successor for security-critical roles. The policy is documented and shared with agency manager."]
[{"$nulls":6},2,"The agency has established and documented a \"chain of command.\" Informal (or \"generally understood\") \"lines of succession\" are in place but not documented. "]
[{"$nulls":6},1,"The agency has an informal (not documented) \"chain of command\" only. "]
[{"$nulls":6},0,"The agency has no established \"chain of command\""]
[null,2.103,"Are roles and responsibilities for security and/or law enforcement personnel assigned by title and/or position established in the SSP or other documents?","Document Review",null,"Security roles and responsibilities of Security Personnel. ",4,"Roles and responsibilities of security personnel are assigned by position and documented in the SSP or other documents. Roles are comprehensive and detailed for all position-types, from security managers to supervisors to front-line security personnel."]
[{"$nulls":6},3,"Roles and responsibilities of security personnel are assigned by position and documented in the SSP or other documents; however, minor elements are missing or require minor additions. "]
[{"$nulls":6},2,"General roles and responsibilities are assigned by position and documented in the SSP or other documents. While assigned by position type, the roles and responsibilities are vague. Position types identified may also be vague or missing key positions."]
[{"$nulls":6},1,"General security roles and responsibilities are documented in the SSP or other documents. These roles and responsibilities are not assigned by position. "]
[{"$nulls":6},0,"Roles and responsibilities are not documented."]
[null,2.104,"Are security-related roles and responsibilities for non-security and/or law enforcement personnel  (i.e., operators, conductors, maintenance workers and station attendants) established in the SSP or other documents?","Document Review",null,"Security roles and responsibilities of non-security personnel.",4,"Specific security-related responsibilities have been established for non-security personnel and assigned based on job function for all (or a majority of) employees. Roles and responsibilities are comprehensive and clearly identify the role non-security personnel play in regards to security. These responsibilities are documented in the SSP or other documents."]
[{"$nulls":6},3,"Security-related responsibilities have been established for non-security personnel. Specific responsibilities are identified and assigned to all non-security personnel, regardless of job function (\"blanket statement\"). Responsibilities are documented in the SSP or other documents."]
[{"$nulls":6},2,"Specific security responsibilities for non-security personnel encompasses less than half of the applicable workforce, but the responsibilities in place are adequately developed. Responsibilities are documented."]
[{"$nulls":6},1,"Only general security-related responsibilities are documented."]
[{"$nulls":6},0,"No security-related roles have been established or documented for non-security personnel."]
[null,"2.105\nTSF 2","Do senior staff and middle management conduct security meetings to review recommendations for changes to plans and processes?  ","Interview / Document Review","Security should be the primary focus of these meetings and briefings  ","Management meetings for security recommendations. Operational.",4,"Senior staff and management conduct security meetings on a quarterly basis, at minimum, to review recommendations for changes to plans and processes. Verified by both interview and document review."]
[{"$nulls":6},2,"Senior staff and management conduct security meetings infrequently, but at least annually, to review recommendations for changes to plans and processes. Only verifided through interview."]
[{"$nulls":6},0,"Senior staff and management meet on an infrequent basis, if ever, or meetings related to security are not conducted."]
[null,2.106,"Does a Security Review Committee (or other designated group) regularly review security incident reports, trends, and program audit findings?","Interview","Security should be the primary focus of these meetings and briefings  ","Security Review Committee",4,"A formal security committee or working group has been established. This group meets multiple times per year at predictable intervals (at least once per quarter) to review security incident reports, trends, and program audit findings. All applicable security items are addressed."]
[{"$nulls":6},3,"A formal security committee or working group has been established. This group meets at least twice per year to review security incident reports, trends, and program audit findings. All applicable security items are addressed."]
[{"$nulls":6},2,"A formal security committee or working group has been established, but it only meets once per year or on an \"as needed\" basis. This score also applies if the group meets at a higher frequency but doesn't effectively address all applicable security items. "]
[{"$nulls":6},1,"Security items are discussed and addressed by a Safety committee."]
[{"$nulls":6},0,"Security review committee does not exist or meets on an infrequent basis."]
[null,2.107,"Are informational briefings with appropriate personnel held whenever security protocols, threat levels, or protective measures  are updated or as security conditions warrant?","Interview",null,"Security Briefings (written or verbal), means of acknowledgement. Operational.",4,"Policies and procedures are in place to ensure that frontline personnel are made aware of anything relevant to the security of their transit system. Agency utilizes a variety of message delivery systems for security messages based on message importance: face-to-face verbal, electronic dispersal, written-memo system, and bulletin board postings. The agency has also developed a means of tracking/monitoring who has (or has not) received high-importance informational briefings (acknowledgement/signature sheet, email receipt, etc.). "]
[{"$nulls":6},3,"Entity has procedures in place to ensure that frontline personnel are made aware of anything relevant to the security of their transit system. Method of delivery is, for the most part, effective, with very little (but possible) chance of employees not receiving critical information. Agency has not developed a means of monitoring or tracking who receives informational briefings. "]
[{"$nulls":6},2,"Briefings are only delivered through written-memos or other ineffective means of personal dispersal. For a score of 2, the delivery method might reach a high number of employees, but the message itself is not guaranteed (employees may not understand a message, employees may not actually read the message, and the agency may not be able to accurately gauge who has received the message)."]
[{"$nulls":6},1,"Entity only utilizes bulletin board-style briefings."]
[{"$nulls":6},0,"No briefings."]
[null,2.108,"Have appropriate reference guides or other written instructions or procedures been distributed to transit employees to implement the requirements of the SSP?","Document Review",null,"Reference guides for transit personnel",4,"Individual written guides or reference material based on job function have been provided to employees to assist employees with the implementation of security procedures. (Example: Driver's manual, SOP, etc.)"]
[{"$nulls":6},3,"Individual written guides or reference material with generalized guidance have been provided to employees to assist employees with the implementation of security procedures."]
[{"$nulls":6},2,"Written guides or other written materials have been provided to every department and are available to employees if needed. "]
[{"$nulls":6},1,"Written guides or other written materials exist but are not conveniently available to employees."]
[{"$nulls":6},0,"Written materials are not readily available to employees."]
[null,2.109,"Has the agency appointed a Primary and Alternate Security Coordinator to serve as its primary and immediate 24-hr contact for intelligence and security-related contact with TSA and are the names of those Coordinators on file with TSA OSPIE office correct?","Document Review / Interview","This question applies to both Regulated and Non-Regulated entities.","Security Coordinator ",4,"The agency has appointed a Primary and Alternate Security Coordinator that meet all criteria established by TSA and provided TSA the names of these individuals.  "]
[{"$nulls":6},2,"The agency has a Primary and or Alternate Security Coordinator, but their roles are not clearly defined (may not be documented) and/or do not meet all criteria established by TSA (not available 24/7, etc.)."]
[{"$nulls":6},0,"The agency has not identified any Security Coordinators. "]
[null,{"v":2.11,"d":"2.110"},"Does the agency maintain a record of security related incidents that are reported within the agency? ","Document Review",null,"Incident recording (may be document retention or summary archives)",4,"Agency maintains a record of security related incidents that are reported within the agency. Agency has the ability to review incidents that have occurred over one year earlier."]
[{"$nulls":6},3,"Agency has the ability to review incidents that have occurred up to one year earlier."]
[{"$nulls":6},2,"Agency has the ability to review incidents that have occurred up to six months earlier."]
[{"$nulls":6},1,"Agency has the ability to review incidents that have occurred up to three months earlier."]
[{"$nulls":6},0,"Agency does not maintain a record of security related incidents."]
[null,"Emergency Response Plan (ERP)"]
[null,2.201,"Does the ERP establish and assign responsibility for implementation of the security program to a Senior Manager who is a \"direct report\" to the agency's Chief Executive Officer?","Document Review","Inspectors should refer to the MT BASE Guidance, Pg14.  ","Documented evidence assigning implementation of security program in the ERP.",4,"The implementation of the security program has been assigned to a Senior Manager who is a \"direct report\" to the CEO. This responsibility is documented in the ERP."]
[{"$nulls":6},3,"The implementation of the security program has been assigned to a Senior Manager who is a \"direct report\" to the CEO. This responsibility is not documented in the ERP, but it is a commonly known assignment that is documented elsewhere."]
[{"$nulls":6},2,"The implementation of the security program has been assigned to a manager or leadership position that is not a \"direct report\" to the CEO. The responsibility is documented in the ERP."]
[{"$nulls":6},1,"The implementation of the security program has been ineffectively assigned to a position that cannot act independently. The responsibility is documented in the ERP."]
[{"$nulls":6},0,"The implementation of the security program is not assigned, or there is no documentation establishing the responsibility of implementation."]
[null,2.202,"Are emergency response roles and responsibilities for all departments identified in the ERP or other supporting documents?","Document Review",null,"Documented emergency response responsibilities.",4,"The agency takes an all-inclusive, system-wide approach to emergency preparedness. Emergency response roles and responsibilities have been developed and are assigned for all departments. Roles are comprehensive, detailed, and documented."]
[{"$nulls":6},3,"Emergency response roles and responsibilities have been developed and assigned to most departments. Not all departments have an assigned role in emergency response. Roles and responsibilities are well-developed and assigned effectively, but there is room for improvement. This is documented."]
[{"$nulls":6},2,"Documented roles and responsibilities have been only assigned to critical departments (security, etc.), may be generalized in nature, or a combination thereof."]
[{"$nulls":6},1,"Documented roles and responsibilities have been assigned as a blanket-statement. Roles may be vague or ineffectively developed."]
[{"$nulls":6},0,"Roles and responsibilities are not documented."]
[null,"2.203\nTSF 5","Are roles and responsibilities for front-line personnel (i.e. system law enforcement, system security officials, train or vehicle operators, conductors, station attendants, maintenance workers) described in the system's Emergency Response Plan (ERP)?","Document Review",null,"Frontline Personnel Responsibilities.",4,"Roles and responsibilities of frontline personnel are assigned by position and documented in the ERP. Roles are comprehensive and detailed."]
[{"$nulls":6},3,"Roles and responsibilities of frontline personnel are assigned and documented in the ERP.  Roles are relatively detailed and effectively assigned, but may be missing minor details."]
[{"$nulls":6},2,"Roles and responsibilities of frontline personnel are developed and documented in the ERP.  Roles are general and lack specific details based on job function."]
[{"$nulls":6},1,"General security roles and responsibilities are documented in the SSP or other documents. These roles and responsibilities are not assigned by position. "]
[{"$nulls":6},0,"Roles and responsibilities are not documented."]
[null,2.204,"Has the ERP been distributed to appropriate departments in the organization?","Interview",null,"ERP Distribution",4,"The agency takes a total approach to emergency response, including all departments in the process. All departments have been provided a copy of the ERP."]
[{"$nulls":6},3,"The agency is proactive with emergency response. The ERP has been provided to departments that are critical to emergency response as well as some departments that would serve a secondary support role during emergency response."]
[{"$nulls":6},2,"The agency has only provided the ERP to departments that are critical to emergency response. Upon request, the ERP is readily available to other departments."]
[{"$nulls":6},1,"ERP distribution is very limited. Departments do not have easy access to the document. "]
[{"$nulls":6},0,"The ERP is not distributed."]
[null,2.205,"Have appropriate reference guides or other written instructions or procedures been distributed to transit employees to implement the requirements of the ERP?","Document Review",null,"Reference guides for transit personnel",4,"Individual written guides or reference material based on job function have been provided to all employees to assist employees with the implementation of emergency procedures."]
[{"$nulls":6},3,"Individual written guides or reference material with generalized guidance have been provided to all employees to assist employees with the implementation of emergency procedures."]
[{"$nulls":6},2,"Written guides or other written materials have been provided to every department and are available to employees if needed. "]
[{"$nulls":6},1,"Written guides or other written materials exist but are not conveniently available to employees."]
[{"$nulls":6},0,"Written materials are not readily available to employees."]
[null,2.206,"Are senior staff and middle management ERP coordination meetings held on a regular basis?","Interview","Emergency response should be the primary focus of these meetings and briefings","Management meetings for ERP coordination. Operational.",4,"Senior staff and management conduct ERP coordination meetings on a monthly basis."]
[{"$nulls":6},3,"Senior staff and management conduct ERP coordination meetings on a quarterly basis."]
[{"$nulls":6},2,"Senior staff and management conduct ERP coordination meetings twice per year."]
[{"$nulls":6},1,"Senior staff and management conduct ERP coordination meetings annually or on an \"as needed\" basis."]
[{"$nulls":6},0,"Senior staff and management meet on an infrequent basis, if ever, or meetings related to ERP coordination are not conducted."]
[null,2.207,"Are informational briefings with appropriate personnel held whenever emergency response protocols are substantially changed or updated?","Interview",null,"Briefings related to emergency response. Operational.",4,"Policies and procedures are in place to ensure that frontline personnel are made aware of anything relevant to the emergency response plan. Agency utilizes a variety of message delivery systems for security messages based on message importance: face-to-face verbal, electronic dispersal, written-memo system, and bulletin board postings. The agency has also developed a means of tracking/monitoring who has (or has not) received high-importance informational briefings (acknowledgement/signature sheet, email receipt, etc.). "]
[{"$nulls":6},3,"Entity has procedures in place to ensure that frontline personnel are made aware of anything relevant to the emergency response. Method of delivery is, for the most part, effective, with very little (but possible) chance of employees not receiving critical information. Agency has not developed a means of monitoring or tracking who receives informational briefings. "]
[{"$nulls":6},2,"Briefings are only delivered through written-memos or other ineffective means of personal dispersal. For a score of 2, the delivery method might reach a high number of employees, but the message itself is not guaranteed (employees may not understand a message, employees may not actually read the message, and the agency may not be able to accurately gauge who has received the message)."]
[{"$nulls":6},1,"Entity only utilizes bulletin board-style briefings."]
[{"$nulls":6},0,"No briefings."]
["Security Action Item 3","Ensure that operations and maintenance supervisors, forepersons and managers are held accountable for security issues under their control"]
[null,3.101,"Do managers and supervisors routinely provide information to front-line personnel regarding security and emergency response issues?","Interview, Frontline Verification, \nDocument Review","Inspectors should refer to the MT BASE Guidance, Pg16.  ","Frontline Personnel Briefings",4,"Frontline employees receive a weekly briefing from their immediate supervisor regarding security and emergency preparedness. Security and emergency response issues are the primary focus of briefings (or equal to that of safety).  Verified by Interview, Document review and Frontline employee's"]
[{"$nulls":6},3,"Frontline employees receive a monthly briefing from their immediate supervisor regarding security, and emergency preparedness. Security and emergency response issues are the primary focus of briefings (or equal to that of safety). "]
[{"$nulls":6},2,"Frontline employees receive a quarterly briefing from their immediate supervisor regarding security, and emergency preparedness. Security and emergency response issues are the primary focus of briefings (or equal to that of safety). "]
[{"$nulls":6},1,"Frontline employees are provided information regarding security and emergency response issues on an infrequent or \"as needed\" basis."]
[{"$nulls":6},0,"Frontline employees are not provided information regarding security and emergency response issues."]
[null,3.102,"Are regular supervisor, manager, and/or foreperson security review and coordination briefings held?  If so, detail frequency and subjects covered in the justification.","Interview",null,"Supervisor Briefings",4,"Supervisor/management security review and coordination meetings are held on a monthly basis. "]
[{"$nulls":6},3,"Supervisor/management security review and coordination meetings are held on a bimonthly basis."]
[{"$nulls":6},2,"Supervisor/management security review and coordination meetings are held on a  quarterly basis."]
[{"$nulls":6},1,"Supervisor/management security review and coordination meetings are held on an infrequent or \"as-needed\" basis."]
[{"$nulls":6},0,"Meetings are not held or do not focus on security."]
[null,3.103,"Does the agency have a program for confirming that personnel have a working knowledge of security protocols?  If so, summarize program in the justification.","Interview / Document Review","Possible follow-up questions needed. Summarize program in justification.","Internal verification of knowledge",4,"The agency actively engages its workforce to ensure a high rate of security knowledge. Agency utilizes a formal, measurable and on-going system of verification, such as internal audits, challenge procedures, or qualification testing. The program--or procedures/responsibilities related to it--is documented. Verified by both  Interview and Document Review"]
[{"$nulls":6},3,"The agency has an on-going, informal system of measuring its workforce's knowledge of security elements. The program may not be documented, but the agency can articulate specific measures it takes to ensure its personnel retain a working knowledge of security. Examples include informal (undocumented or unmeasured) internal testing or auditing."]
[{"$nulls":6},2,"Employees are tested after training, and Supervisors are tasked with ensuring protocols are followed and knowledge is retained."]
[{"$nulls":6},1,"Direct supervision is the only method of ensuring that security knowledge is retained."]
[{"$nulls":6},0,"The agency does not have a program of confirming that personnel have a working knowledge of security protocols."]
[null,3.104,"Are managers and/or supervisors required to debrief front-line employees regarding their involvement in or management of any security or emergency incidents?","Interview / Document Review",null,"Debriefing Requirement",4,"There is a written policy that requires leadership to debrief frontline personnel regarding their involvement in or management of any security or emergency incidents. Verified by both  Interview and Document Review"]
[{"$nulls":6},3,"There isn't a written requirement, but leadership is expected to debrief frontline personnel regarding their involvement in or management of any security or emergency incidents. This expectation is widely known. Verified by both  Interview and Document Review."]
[{"$nulls":6},2,"Leadership is expected to debrief frontline personnel only after major incidents regarding their involvement in or management of security or emergency incidents."]
[{"$nulls":6},1,"Debriefing are being held, but the policy is very insufficient and inconsistent."]
[{"$nulls":6},0,"There are no debriefing measures in place."]
["Security Action Item 4","Coordinate Security and Emergency Management Plan(s) with local and regional agencies"]
[null,4.101,"Have Mutual Aid agreements been established between the transit agency and entities in the area that would be called upon to supplement the agency's resources in the event of an emergency event? ","Interview / Document Review","Inspectors should refer to the MT BASE Guidance, Pg16.  ","MOUs involving law enforcement, other transit agencies, and first responders",4,"The agency has taken a comprehensive approach to emergency preparedness and has established mutual aid agreements with all outside entities that the agency may need to coordinate with during an emergency situation. This includes: law enforcement entities, other transit agencies that operate in the same area, and first responders. Verified by both Interview and Document Review"]
[{"$nulls":6},3,"The agency has taken a proactive approach to emergency preparedness and has established mutual aid agreements with multiple types of outside entities. "]
[{"$nulls":6},2,"The agency has taken a limited approach to emergency preparedness and has established mutual aid agreements with only all local law enforcement entities that operate with the geographical scope of their system."]
[{"$nulls":6},1,"The agency has taken the first steps of establishing mutual aid agreements. Agreements are actively being pursued."]
[{"$nulls":6},0,"Mutual aid agreements are non-existent and not being pursued."]
[null,4.102,"Does the agency participate in a regional Emergency Management Working Group or similar regional coordinating body for emergency preparedness and response?","Interview",null,"Regional Emergency Management Group. \"Yes\" or \"No.\"",4,"The agency participates in a regional security and emergency preparedness/management working group or committee (this is not the same as participation in drills or exercises)."]
[]
[{"$nulls":6},0,"The agency does not participate in a security and emergency preparedness/management working group or committee."]
[]
[]
[null,4.103,"Have regional incident management protocols been shared with the agency and incorporated into the agency's ERP/SSP/SEPP?","Document Review / Interview",null,"Regional Incident Management Protocols",4,"The agency has received--and is knowledgeable of--regional incident management protocols. These protocols have been completely incorporated into the agency's ERP/SSP/SEPP. Verified by both Interview and Document Review."]
[{"$nulls":6},3,"The agency has received--and is knowledgeable of--regional incident management protocols. These protocols are partially incorporated (or in the process of being incorporated) into the agency's ERP/SSP/SEPP. Verified by both Interview and Document Review."]
[{"$nulls":6},2,"The agency has received--and is knowledgeable of--regional incident management protocols. These protocols are not part of the agency's ERP."]
[{"$nulls":6},1,"The agency is aware of regional protocols and understands how they may obtain them."]
[{"$nulls":6},0,"The agency  is completely unfamiliar with regional protocols."]
[null,4.104,"Have agency resources been appropriately identified and provided to the regional EMA?","Interview",null,"Agency Resources. \"Yes\" or \"No.\"",4,"The agency has provided the regional EMA with a detailed list of  resources (vehicles, facilities, etc.) that may be utilized in the event of an emergency."]
[]
[{"$nulls":6},0,"Agency resource inventory has not been provided to the regional EMA"]
[]
[]
[null,4.105,"Does the agency have a designated point-of-contact or liaison with the local/regional Emergency Operations Center (EOC)?","Interview / Document Review",null,"POC identified from EOC. \"Yes\" or \"No.\"",4,"Agency has established a point-of-contact at the Emergency Operations Center. Must be verified by Document Review."]
[]
[{"$nulls":6},0,"Agency has no identified POC at the EOC."]
[]
[]
[null,4.106,"Does the agency send a representative to the local/regional EOC, should it be activated?","Interview / Document Review",null,"Agency Representative sent to EOC. \"Yes\" or \"No.\"",4,"Agency has officially designated a representative to be sent to the EOC, upon activation. This is documented in SSP/ERP/SEPP. Must be verified by Document Review."]
[{"$nulls":6},2,"The agency has designated a representative to be sent to the EOC, upon activation, although formal policies are not in place.  "]
[{"$nulls":6},0,"Agency has not designated a representative."]
[]
[]
[null,4.107,"Does the agency have information sharing capabilities with the regional/local EOC (i.e., contacts, procedures, resource inventories, etc.)?","Interview / Document Review",null,"Information Sharing Capabilities",4,"The agency has developed a formal method of effectively sharing information with the EOC, information flow is two-way (information can be shared and received), and the method of sharing is known by both entities. Capabilities are documented.  Must be verified by Document Review."]
[{"$nulls":6},2,"The agency has developed an informal method of effectively sharing with the EOC, information flow is two-way (information can be shared and received), and the method of sharing is known by both entities. It is clear that the agency has planned for information sharing, but the capabilities are not documented. "]
[{"$nulls":6},"1","Information sharing procedures and capabilities exist, but are vague and have received little attention or planning. "]
[{"$nulls":6},0,"The agency has no information sharing capabilities or procedures and is not actively pursuing the development of any."]
[null,4.108,"Has the agency developed internal incident management protocols that comply with the National Response Plan and the National Incident Management System (NIMS)?","Document Review / Interview",null,"Internal Incident Management Protocols. \"Yes\" or \"No.\"",4,"The agency's internal emergency response procedures follow the NRP and the NIMS. Must be verified by Document Review."]
[]
[{"$nulls":6},0,"The agency's internal emergency response procedures do not follow the NRP and the NIMS."]
[]
[]
[null,4.109,"Have the agency's emergency response protocols been shared with the EMA and appropriate first responder agencies?","Interview",null,"Internal Emergency Response Protocols. \"Yes\" or \"No.\"",4,"The agency has shared its internal emergency response protocols with the regional EMA and appropriate first response agencies."]
[]
[{"$nulls":6},2,"The agency has shared its internal emergency response protocols with only the regional EMA or only first response agencies."]
[]
[{"$nulls":6},0,"The agency has not shared its emergency response protocols."]
[null,"4.110\nTSF 5","Has the transit system tested its communications systems for interoperability with appropriate emergency response agencies? ","Interview",null,"Interoperability",4,"The agency is very proactive in regards to interoperable communication and ensures that its communication systems can communicate with appropriate external agencies across jurisdictional lines. The agency uses compatible radio systems (800mHz, UHF, VHF, etc.), has developed a plan (either documented or trained personnel) for interoperable communication, and has tested its system for compatibility with appropriate external agencies."]
[{"$nulls":6},3,"The agency has an effective interoperable communications system (800mHz, UHF, VHF, interoperable CAD system), but minor elements are missing. Planning (training or documentation) is missing or the agency has not tested its system for compatibility."]
[{"$nulls":6},2,"The agency has an effective interoperable communications system (800mHz, UHF, VHF, interoperable CAD system). Neither planning (training or documentation) or compatibility testing is in place.  "]
[{"$nulls":6},1,"The agency's systems are not interoperable, but is in the process of actively implementing such a system (plans established, funds identified)."]
[{"$nulls":6},0,"The agency's systems are not interoperable, nor is such a system being currently implemented."]
[null,4.111,"If the agency's communications systems are NOT inter-operable with appropriate emergency response agencies, have alternate communication protocols been established?  Describe the alternate communication protocols in the justification.","Interview / Document Review",null,"Interoperability Substitute",4,"The agency has developed effective alternatives to interoperable communication (beyond the reliance of standard communication, like telephone). These procedures are documented and shared with appropriate first responder agencies. Must be verified by Document Review."]
[{"$nulls":6},2,"The agency has developed partially effective alternatives to interoperable communication (beyond the reliance of standard communication, like telephone). The procedures are informal and may not be documented and/or shared with first responder agencies. "]
[{"$nulls":6},0,"The agency has identified no alternatives for interoperable communication."]
["Security Action Item 5","Establish and Maintain a Security and Emergency Training Program"]
[null,"5.101\nTSF 4","Is initial training provided to all new agency employees regarding security orientation/awareness?","Document Review /Frontline Verification","Inspectors should refer to the MT BASE Guidance, Pg18.  ","Training records, training material",4,"All new employees, regardless of job function, receive initial training, which is focused on general security awareness and orientation. The agency has a well-developed program with an official curriculum and training is provided in a formal environment (classroom or computer-based). Must be verified by Document Review and Frontline Employee's."]
[{"$nulls":6},2,"Initial training is provided with varying degrees of implementation."]
[]
[]
[{"$nulls":6},0,"Security is not addressed in initial training."]
[null,"5.102\nTSF 4","Is annual refresher training provided regarding security orientation/awareness to Senior Management staff, managers and supervisors?","Interview / Document Review",null,"Training records, training material",4,"Annual refresher training is well-developed with an official curriculum, focused on the appropriate subject, and provided in a formal manner (classroom or computer-based). Must be verified by Document Review."]
[{"$nulls":6},2,"Training is provided with varying degrees of implementation."]
[]
[]
[{"$nulls":6},0,"Refresher training is not provided annually or does not focus on the appropriate subject."]
[null,"5.103\nTSF 4","Is annual refresher training provided regarding security orientation/awareness to managers and supervisors? ","Interview / Document Review",null,"Training records, training material",4,"Annual refresher training is well-developed with an official curriculum, focused on the appropriate subject, and provided in a formal manner (classroom or computer-based). Must be verified by Document Review."]
[{"$nulls":6},2,"Training is provided with varying degrees of implementation."]
[]
[]
[{"$nulls":6},0,"Refresher training is not provided annually or does not focus on the appropriate subject."]
[null,"5.104\nTSF 4","Is annual refresher training provided regarding security orientation/awareness  to front-line employees? ","Document Review  / Frontline                                                   Verification",null,"Training records, training material",4,"Annual refresher training is well-developed with an official curriculum, focused on the appropriate subject, and provided in a formal manner (classroom or computer-based). Must be verified by Document Review and Frontline Employee's."]
[{"$nulls":6},2,"Training is provided with varying degrees of implementation."]
[]
[]
[{"$nulls":6},0,"Refresher training is not provided annually or does not focus on the appropriate subject."]
[null,5.105,"Is ongoing advanced security training focused on job function provided at least annually?","Interview / Frontline                                                              Verification",null,"Training records, training material",4,"Advanced security training is provided in an ongoing manner, with classes/courses being provided at least once per year. Agency has established an official training curriculum, training is specifically designed based on job function, and training is provided in a formal environment (classroom or computer-based). Must be verified by Document Review and Frontline Employee's."]
[{"$nulls":6},2,"Ongoing advanced security training based on job function is provided with varying degrees of implementation and frequency."]
[]
[]
[{"$nulls":6},0,"Ongoing security training based on job function is not provided."]
[null,"5.106\nTSF 4","Is initial training provided to all new transit employees regarding emergency response?","Interview / Frontline Verification","General emergency response / awareness training","Training records, training material",4,"All new employees, regardless of job function, receive initial training, which is focused on emergency response. The agency has a well-developed program with an official curriculum and training is provided in a formal environment (classroom or computer-based).  Must be verified by Document Review and Frontline Employee's."]
[{"$nulls":6},2,"Initial training is provided with varying degrees of implementation."]
[]
[]
[{"$nulls":6},0,"Emergency response is not addressed in initial training."]
[null,5.107," Is annual refresher training provided regarding emergency response to Senior Management staff, supervisors, and managers?","Interview / Document Review",null,"Training records, training material",4,"Annual refresher training is well-developed with an official curriculum, focused on the appropriate subject, and provided in a formal manner (classroom or computer-based).  Must be verified by Document Review."]
[{"$nulls":6},2,"Training is provided with varying degrees of implementation."]
[]
[]
[{"$nulls":6},0,"Refresher training is not provided annually or does not focus on the appropriate subject."]
[null,"5.108\nTSF 4","Is annual refresher training provided regarding emergency response to Managers and Supervisors?","Interview / Document Review",null,"Training records, training material",4,"Annual refresher training is well-developed with an official curriculum, focused on the appropriate subject, and provided in a formal manner (classroom or computer-based). Must be verified by Document Review."]
[{"$nulls":6},2,"Training is provided with varying degrees of implementation."]
[]
[]
[{"$nulls":6},0,"Refresher training is not provided annually or does not focus on the appropriate subject."]
[null,"5.109\nTSF 4","Is annual refresher training provided regarding emergency response to front-line Employees?","Interview / Frontline Verification",null,"Training records, training material",4,"Annual refresher training is well-developed with an official curriculum, focused on the appropriate subject, and provided in a formal manner (classroom or computer-based). Must be verified by Document Review and Frontline Employee's."]
[{"$nulls":6},2,"Training is provided with varying degrees of implementation."]
[]
[]
[{"$nulls":6},0,"Refresher training is not provided annually or does not focus on the appropriate subject."]
[null,"5.110\nTSF 4","Have agency employees received general training on Incident Command System (ICS) procedures in accordance with National Incident Management System at least annually?","Interview / Frontline                                      Verification",null,"Training records, training material",4,"All employees who may have a role in emergency response--frontline personnel and leadership--have received ICS training in accordance with the NIMS. The agency has a well-developed program with an official curriculum and training is provided annually in a formal environment (classroom or computer-based). Must be verified by Document Review and Frontline Employee's."]
[{"$nulls":6},2,"Training is provided with varying degrees of implementation."]
[]
[]
[{"$nulls":6},0,"ICS training is not provided."]
[null,5.111," Has ICS and NIMS training appropriate to the position been provided to Senior Management staff, supervisors, and managers at least annually?  ","Interview / Document Review",null,"Training records, training material",4,"Annual ICS and NIMS training based on job function is provided by the agency to all senior leadership. Must be verified by Document Review."]
[{"$nulls":6},2,"Training appropriate to the position has been provided with varying degrees of implementation."]
[]
[]
[{"$nulls":6},0,"Senior leadership only receives basic ICS/NIMS training, or ICS/NIMS training is not provided."]
[null,5.112,"Has ICS and NIMS training appropriate to the position been provided to managers and supervisors at least annually? ","Interview / Document Review",null,"Training records, training material",4,"Annual ICS and NIMS training based on job function is provided by the agency to all supervisors and managers. Must be verified by Document Review."]
[{"$nulls":6},2,"Training appropriate to the position has been provided with varying degrees of implementation."]
[]
[]
[{"$nulls":6},0,"Supervisors and managers only receive basic ICS/NIMS training, or ICS/NIMS training is not provided."]
[null,5.113,"Has ICS and NIMS training appropriate to the position been provided to front-line employees at least annually?","Interview / Frontline                                  Verification",null,"Training records, training material",4,"Annual ICS and NIMS training based on job function is provided by the agency to all frontline personnel.  Must be verified by Document Review."]
[{"$nulls":6},2,"Training appropriate to the position has been provided with varying degrees of implementation."]
[]
[]
[{"$nulls":6},0,"ICS/NIMS training is not provided."]
[null,5.114,"Has the agency developed a program and provided annual training on its own incident response protocols?","Document Review / Interview",null,"Training records, training material",4,"The agency has developed internal procedures for incident response and a comprehensive training program to support these procedures. Training has an established curriculum, official training materials, and is provided in a formal environment (classroom or computer-based). Training is provided annually. Must be verified by Document Review. "]
[{"$nulls":6},2,"Training is provided with varying degrees of implementation."]
[]
[]
[{"$nulls":6},0,"The agency has not established training for its internal incident response procedures."]
[null,"5.115\nTSF 4","Has training on the agency's incident response protocols appropriate to the position been provided to Senior Management staff, managers and supervisors at least annually?                                      ","Interview / Document Review",null,"Training records, training material",4,"Annual training based on job function is provided by the agency to all senior leadership. Must be verified by Document Review."]
[{"$nulls":6},2,"Training appropriate to the position has been provided with varying degrees of implementation."]
[]
[]
[{"$nulls":6},0,"Senior leadership only receives basic training, training appropriate for frontline personnel, or training is not provided."]
[null,"5.116\nTSF 4","Has training on the agency's incident response protocols appropriate to the position been provided to managers and supervisors? ","Interview / Document Review",null,"Training records, training material",4,"Annual training based on job function is provided by the agency to all supervisors and managers. Must be verified by Document Review."]
[{"$nulls":6},2,"Training appropriate to the position has been provided with varying degrees of implementation."]
[]
[]
[{"$nulls":6},0,"Supervisors and managers only receive basic training, training that is appropriate to frontline personnel, or training is not provided."]
[null,"5.117\nTSF 4"," Has training on the agency's incident response protocols appropriate to the position been provided to front-line employees at least annually?","Document Review / Frontline                                               Verification",null,"Training records, training material",4,"Annual training based on job function is provided by the agency to all frontline personnel.  Must be verified by Document Review and Frontline Employee's."]
[{"$nulls":6},2,"Training appropriate to the position has been provided with varying degrees of implementation."]
[]
[]
[{"$nulls":6},0,"Training is not provided."]
[null,"5.118\nTSF 4","Has the transit system implemented an annual training program for personnel regarding response to terrorism, including (i) Improvised Explosive Devices and ii) Weapons of Mass Destruction (chemical, biological, radiological, nuclear)?  If so, summarize the relevant programs in the justification?","Document Review / Interview",null,"Training records, training material",4,"Annual training provided regarding response to IEDs and WMD. This is part of an official curriculum, uses effective training materials, and is provided in a formal environment (classroom or computer-based). Must be verified by Document Review."]
[{"$nulls":6},2,"Training  has been developed and provided with varying degrees of implementation."]
[]
[]
[{"$nulls":6},0,"The agency has not developed a relevant training program."]
[null,5.119,"Has training focused on IEDs and WMDs appropriate to the position been provided to Senior Management staff, managers, and supervisors at least annually?                                                ","Document Review / Interview",null,"Training records, training material",4,"Annual training based on job function is provided by the agency to all senior leadership. Must be verified by Document Review."]
[{"$nulls":6},2,"Training appropriate to the position has been provided with varying degrees of implementation."]
[]
[]
[{"$nulls":6},0,"Senior leadership only receives basic training, training is appropriate for frontline personnel, or training is not provided."]
[null,{"v":5.12,"d":"5.120"},"Has training focused on IEDs and WMDs appropriate to the position been provided to manager and supervisors?","Document Review / Interview",null,"Training records, training material",4,"Annual training based on job function is provided by the agency to all supervisors and managers. Must be verified by Document Review."]
[{"$nulls":6},2,"Training appropriate to the position has been provided with varying degrees of implementation."]
[]
[]
[{"$nulls":6},0,"Supervisors and managers only receive basic training, training is appropriate to frontline personnel, or training is not provided."]
[null,5.121,"Has training focused on IEDs and WMDs appropriate to the position been provided to front-line employees at least annually? ","Document Review / Frontline Verification",null,"Training records, training material",4,"Annual training based on job function is provided by the agency to all frontline personnel.  Must be verified by Document Review and Frontline Employee's."]
[{"$nulls":6},2,"Training appropriate to the position has been provided with varying degrees of implementation."]
[]
[]
[{"$nulls":6},0,"Training is not provided."]
[null,5.122,"Do law enforcement/security department personnel at the agency receive specialized training in counter-terrorism annually? Summarize program in the justification.","Document Review / Interview","in justification, provide description of specialized training or provider.","Training records, training material",4,"All personnel in security-related positions receive annual specialized training focused on counter-terrorism. Training is in addition to general training, with materials developed by or instruction led by subject matter experts. Training is part of an established curriculum and provided in a formal environment (classroom or computer-based).  Must be verified by Document Review."]
[{"$nulls":6},2,"Specialized counter-terrorism training is provided with varying degrees of implementation."]
[]
[]
[{"$nulls":6},0,"Specialized counter-terrorism training is provided with varying degrees of implementation."]
[null,5.123,"Do law enforcement/security department personnel at the agency receive specialized training supporting their incident management and emergency response roles at least annually? Summarize program in the justification. ","Document Review / Interview","in justification, provide description of specialized training or provider.","Training records, training material",4,"All personnel in security-related positions receive annual specialized training supporting incident response. Training is in addition to general training, with materials developed by or instruction led by subject matter experts. Training is part of an established curriculum and provided in a formal environment (classroom or computer-based). Must be verified by Document Review."]
[{"$nulls":6},2,"Specialized incident response training is provided with varying degrees of implementation."]
[]
[]
[{"$nulls":6},0,"Specialized incident response training is provided with varying degrees of implementation."]
[null,"5.124\n","Does the agency have an established program to monitor employee training and to schedule employees for training?","Document Review","General training review.  This does not have to revolve around Security Training but establishes if they have an active system.  ","Training Scheduling (General) ",4,"The agency has developed a formal system of monitoring employee training and scheduling employee training as needed. This includes retaining training records, having the ability of easily determining employee training status, and having the ability to effectively schedule employee training in an effective manner."]
[{"$nulls":6},2,"A program for monitoring and scheduling training exists with varying degrees of implementation."]
[]
[]
[{"$nulls":6},0,"Such a program does not exist."]
[null,"5.125\n","Does the agency have a system that records and tracks personnel training for all security-related courses (including initial, annual, periodic and other)?","Document Review","This question asks specifically about security-related courses.","Training Recording (Security) (ex. 30-day file)",4,"The agency has a formal system to record and track personnel training for all security-related training, including initial, annual, and periodic. Records for all employees contain the following: employee name/identifier, training/course identifier, and date of course completion. Must be verified by Document Review."]
[{"$nulls":6},2,"The agency employs a system with varying degrees of implementation."]
[]
[]
[{"$nulls":6},0,"Such a system does not exist, or security training is not specifically addressed."]
[null,5.126,"Does the transit agency have a system that records and tracks personnel training for emergency response courses (including initial, periodic and other)?","Document Review","This question asks specifically about emergency response related courses.","Training Recording (Emergency Response) (ex. 30-day file)",4,"The agency has a formal system to record and track personnel training for all emergency response-related training, including initial, annual, and periodic. Records for all employees contain the following: employee name/identifier, training/course identifier, and date of course completion."]
[{"$nulls":6},2,"The agency employs a system with varying degrees of implementation."]
[]
[]
[{"$nulls":6},0,"Such a system does not exist, or emergency response training is not specifically addressed."]
[null,5.127,"Does the agency have a program to regularly review and update security awareness and emergency response training materials?","Interview / Document Review",null,"Security Review and Updating",4,"The agency has developed a formal program of reviewing and updating security and emergency response training materials to ensure they are up-to-date, this program is documented (generally or as a \"role/responsibility\"), and the program ensures materials are reviewed at least annually. Must be verified by Document Review."]
[{"$nulls":6},2,"The agency has developed a program with varying degrees of implementation."]
[]
[]
[{"$nulls":6},0,"The agency has no established program of reviewing and updating security and emergency response training materials."]
[null,"5.128\nTSF 4","Are all appropriate personnel notified via briefings, email, voicemail, or signage of changes in threat condition, protective measures or the employee watch programs?","Interview",null,"Operational Changes",4,"Appropriate personnel are notified of operational changes--including those related to threat levels and protective measures. Individuals with a \"need to know\" have been formally identified, and measures are in place to effectively reach all appropriate employees."]
[{"$nulls":6},3,"Appropriate personnel are notified of operational changes--including those related to threat levels and protective measures. Individuals with a \"need to know\" have been formally identified, and measures are in place for the agency to confidently reach most of those employees in timely manner.."]
[{"$nulls":6},2,"Appropriate personnel are notified of operational changes. Individuals with a \"need to know\" are informally identified, but measures of communicating information is lacking consistency."]
[{"$nulls":6},1,"The agency notification measures are inconsistent with little to no planning involved whatsoever. Individuals with a \"need to know\" have not been identified."]
[{"$nulls":6},0,"Operational changes are rarely--if ever--communicated to employees, or no policy exists to support the recommendation."]
[null,"5.129 \nTSF 1","Do the agency's security awareness and emergency response training programs cover response and recovery operations in critical facilities and infrastructure?  If so, summarize relevant provisions of program in the justification.","Document Review",null,"Response and recovery operations in critical facilities and infrastructure. ",4,"The agency's security and emergency response training covers response and recovery operations in critical facilities and infrastructure (including COOP-related procedures). Training is part of an official curriculum, utilizes effective training materials, and is provided in a formal environment (classroom or computer-based)."]
[{"$nulls":6},2,"Security and emergency response training covers response and recovery operations in critical facilities and infrastructure with varying degrees of implementation."]
[]
[]
[{"$nulls":6},0,"Training does not cover response and recovery operations."]
[null,"5.130\nTSF1","Has the agency provided training to regional first responders (law enforcement agencies, firefighters, and emergency medical response teams) to enable them to operate in critical facilities and infrastructure?","Interview","During interview, dates or frequency of training should be documented to receive full score. Also, describe scope of training.","Training program for external agencies.",4,"The agency has provided training to regional first responders to enable them to operate in critical facilities and infrastructure. The training is well-developed, and the agency has actively offered it to outside entities."]
[{"$nulls":6},2,"The agency has provided training with varying degrees of implementation."]
[]
[]
[{"$nulls":6},0,"The agency has not provided training to external agencies to enable them to operate effectively in critical facilities and infrastructure."]
[null,"5.131\nTSF 3","Does training of transit system law enforcement and/or security personnel integrate the concept and employment of visible, random security measures? ","Interview / Document Review",null,"Training program featuring concepts of random and highly visible countermeasures. ",4,"The concept and employment of visible, unpredictable, and random security measures is included as part of the training curriculum for all personnel in security-related positions. This is documented in training materials. Must be verified by Document Review."]
[{"$nulls":6},2,"Training covers the concept of visible and random security measures with varying degrees of implementation."]
[]
[]
[{"$nulls":6},0,"Training does not cover the concept visible or random security measures."]
[null,"5.132\nTSF 4","Has the agency implemented a program to train or orient first responders (law enforcement, firefighters, emergency medical teams) and other potential supporting assets (e.g., TSA regional personnel for VIPR exercises) on their system vehicle familiarization?","Interview / Document Review","During interview, dates or frequency of training should be documented to receive full score. Also, describe scope of training.","Training program for external agencies.",4,"The agency has developed and implemented a program to annually train or orient first responders and other supporting agencies (TSA VIPR teams) on their system vehicle familiarization. Training is well-developed, and the agency has actively offered it to outside entities. Must be verified by Document Review."]
[{"$nulls":6},2,"The program has been developed with varying degrees of implementation."]
[]
[]
[{"$nulls":6},0,"Such a program does not exist."]
["Security Action Item 6","Establish plans and protocols to respond to the DHS National Terrorism Advisory System (NTAS)."]
[null,6.101,"Does the SSP contain or reference other documents identifying incremental actions (imminent or elevated) to be implemented for a NTAS threat?","Document Review","Inspectors should refer to the MT BASE Guidance, Pg19.  ","Incremental actions based on NTAS threat",4,"The agency has identified incremental actions that correlate with NTAS threat level increases. Incremental actions are identified for all threat conditions, well-developed, effective, and documented."]
[{"$nulls":6},2,"Incremental actions are identified with varying degrees of implementation or documentation."]
[]
[]
[{"$nulls":6},0,"Incremental actions are not documented."]
[null,"6.102\nTSF 2","Does the agency have actionable operational response protocols for the specific threat scenarios from NTAS?","Document Review",null,"Response protocols for specific threat scenarios  based on NTAS",4,"The agency has identified possible NTAS alert scenarios and established detailed procedures and protocols to respond to these scenarios. These procedures are well-developed and documented."]
[{"$nulls":6},2,"Actionable operational response protocols for specific threat scenarios from NTAS have been developed with varying degrees of implementation."]
[]
[]
[{"$nulls":6},0,"Actionable operational response protocols have not been developed or specific threat scenarios haven't been identified."]
[null,6.103,"Has the agency provided annual training and/or instruction focused on job function regarding the incremental activities to be performed by employees?","Interview / Document Review",null,"Job-specific NTAS training",4,"Job-specific NTAS training that focuses on incremental activities to be performed by employees has been provided annually by the agency. Training is a well-developed part of an official curriculum, focuses on appropriate individual roles in response to NTAS threats, and is provided in a formal environment (classroom or computer-based). Must be verified by Document Review."]
[{"$nulls":6},2,"Job-specific NTAS training is provided with varying degrees of implementation."]
[]
[{"$nulls":6},1,"General NTAS training is provided to appropriate personnel."]
[{"$nulls":6},0,"The agency does not provide NTAS training."]
["Security Action Item 7","Implement and reinforce a Public Security and Emergency Awareness program:       "]
[null,7.101,"Has the transit agency developed and implemented a public security and emergency awareness program?","Interview","Inspectors should refer to the MT BASE Guidance, P20.               In justification, provide description of agency’s emergency awareness program.","Outreach program ",4,"Agency has implemented a well-developed public awareness program that addresses specific issues of both security and emergency response. "]
[{"$nulls":6},3,"Agency has implemented a well-developed public awareness program that addresses specific issues of security. Emergency response material is generalized or missing."]
[{"$nulls":6},2,"Agency has implemented a well-developed public awareness program that address specific issues of emergency response and safety. Security material is generalized or missing."]
[{"$nulls":6},1,"Agency has a public awareness program, but the program is vague or otherwise ineffective."]
[{"$nulls":6},0,"The agency has no public awareness program in place."]
[null,"7.102\nTSF 6","Does the agency provide active public outreach for security awareness and emergency preparedness (e.g., Transit Watch, “If You See Something, Say Something”, message boards, brochures, channel cards, posters, fliers)?","Document Review / Onsite Observation",null,"Active outreach, utilizes program materials",4,"The agency's public awareness program covers security and emergency response and is communicated effectively. Program materials--brochures, posters, fliers--are widely distributed and highly visible.  Must be verified by Document Review and Onsite Observation."]
[{"$nulls":6},2,"Public awareness materials and outreach have been developed and deployed with varying degrees of implementation.  Verified by Document Review only."]
[]
[]
[{"$nulls":6},0,"Public awareness materials and outreach have not been developed and/or deployed."]
[null,"7.103\nTSF 6","Is the above consistent with agency's overall announcement program?","Document Review / Onsite Observation",null,"Appropriate outreach material. \"Yes\" or \"no.\"",4,"Public awareness material is consistent with the agency's overall announcement program. All information/instruction/guidance is the same.   Must be verified by Document Review and Onsite Observation."]
[]
[{"$nulls":6},0,"Public awareness material conflicts with the agency's overall announcement program. "]
[]
[]
[null,"7.104\nTSF 6","Are general security awareness and emergency preparedness messages included in public announcement messages at stations and on board vehicles?","Onsite Observation",null,"Public announcements (Pre-recorded voice announcements)",4,"The agency includes frequent mentions of general security and emergency preparedness items in its pre-recorded announcement messages at all appropriate areas, including at stations and onboard vehicles.  "]
[{"$nulls":6},3,"The agency includes frequent mentions of general security items (but no emergency preparedness items) in its pre-recorded announcement messages at all appropriate areas, including at stations and onboard vehicles. "]
[{"$nulls":6},2,"The agency includes frequent mentions of general emergency preparedness items and infrequent mentions of general security items in its pre-recorded announcement messages at all appropriate areas, including at stations and onboard vehicles; "]
[{"$nulls":6},1,"The agency includes infrequent mentions of general security and emergency preparedness items in its pre-recorded announcement messages at all appropriate areas, including at stations and onboard vehicles. "]
[{"$nulls":6},0,"Security and emergency preparedness items are not included in the agency's pre-recorded announcement messages."]
[null,"7.105\nTSF 6","Are passengers urged to report unattended property, suspicious behavior, and security concerns to uniformed crew members, law enforcement or security personnel, and/or a contact telephone number?  If so, summarize the type of materials used and content in the justification.","Document Review / Onsite                                                           Observation",null,"Materials specifically mention reporting unattended property, suspicious behavior and security concerns.",4,"Passengers are urged to report unattended property, suspicious behavior, and other security concerns to an identified agency representative (uniformed crew member, law enforcement, etc.) or identified contact number. This is documented in awareness material and readily observable. Must be verified by Document Review and Onsite Observation."]
[{"$nulls":6},2,"Passengers are urged to report unattended property, suspicious behavior, and other security concerns with varying degrees of implementation."]
[]
[]
[{"$nulls":6},0,"Passengers are not urged to report unattended property, suspicious behavior, and other security concerns with varying degrees of implementation."]
[null,"7.106\nTSF 6","Does the agency have an appropriate mechanism in place for passengers to communicate an (e.g., 1-800 number, smart phone applications, social media, etc.)  that can be called or used to report security concerns?  If so, is this information indicated in public awareness materials and messages?","    Document Review / Onsite                                                                          Observation",null,"Effective reporting mechanism",4,"The agency utilizes an effective mechanism in place that can be used by passengers to report security concerns (phone number, smart phone application, social media, etc.). This mechanism is actively monitored by the agency and widely distributed to passengers as part of the awareness program's materials. Must be verified by Document Review and Onsite Observation."]
[{"$nulls":6},2,"A mechanism is in place with varying degrees of implementation."]
[]
[]
[{"$nulls":6},0,"There is no mechanism in place."]
[null,7.107,"Does the agency issue public service announcements or press releases to social media (e.g. Twitter/ Facebook/etc., QRC codes, and/or apps for smart phones) regarding security and emergency protocols?","Interview / Document Review","In justification, provide description of social media utilized.","Social Media Announcements for Security and Emergency. \"Yes\" or \"No.\"",4,"The agency utilizes social media to issue public service announcements related to security or emergency response. This method is documented or readily observable."]
[]
[{"$nulls":6},0,"The agency does not issue security-related PSAs or press releases to local media."]
[]
[]
[null,"7.108\nTSF 6","Does the agency issue public service announcements or press releases to local media (e.g. newspaper, radio and/or television) regarding security or emergency protocols?","Interview / Document Review","In Justification, describe the most recent public announcement or press release to local media.","Local Media Announcements for Emergency Response. \"Yes\" or \"No.\"",4,"The agency issues security- and emergency response-related PSAs or press releases to local media. This method is documented or readily observable."]
[]
[{"$nulls":6},0,"The agency does not issue emergency response-related PSAs or press releases to local media."]
[]
[]
[null,7.109,"Does the transit agency conduct a volunteer training program for non-employees to aid with system evacuations and emergency response?","Interview / Document Review",null,"Training for non-employee volunteers  for emergency response",4,"The agency conducts training of non-employee volunteers to aid with system evacuations an emergency response. This training program has an official curriculum and provided on a semi-frequent basis.  Must be verified by Document Review."]
[{"$nulls":6},2,"Training is provided with varying degrees of implementation."]
[]
[]
[{"$nulls":6},0,"Training is not provided."]
[null,{"v":7.11,"d":"7.110"},"Does the transit agency conduct an outreach program to enlist members of the public as security awareness volunteers, similar to Neighborhood Watch programs?","Interview / Document Review",null,"Active volunteer program (not the same as \"See Something, Say Something\")",4,"The agency has established a volunteer program to enlist an active security awareness volunteer force. This program (including how passengers can get involved) is  documented. Must be verified by Document Review."]
[{"$nulls":6},2,"The agency has established an active volunteer program with varying degrees of implementation."]
[]
[]
[{"$nulls":6},0,"The agency has not established an active volunteer program."]
[null,"7.111\nTSF 1","Do public awareness materials and/or messages inform passengers on the means to evacuate safely from transit vehicles and underwater/underground facilities?","Interview / Document Review","If agency has no underwater/underground facilities question applies to transit vehicles.","Passenger evacuation guidance material",4,"The agency has developed awareness material to assist passengers on the means to evacuate safely from transit vehicles and underwater/underground facilities. These materials are readily available or readily visible to passengers. Must be verified by Document Review."]
[{"$nulls":6},2,"The agency has developed awareness material with varying degrees of implementation."]
[]
[]
[{"$nulls":6},0,"The agency has not developed awareness material to assist passengers on the means of safe evacuation."]
[null,7.112,"Does the agency track and monitor customer complaints reported by passengers?","Interview",null,"Customer complaint tracking system",4,"The agency has a system in place to actively and effectively monitor and follow up on customer reports."]
[{"$nulls":6},2,"The agency has developed a system with varying degrees of effectiveness or implementation."]
[]
[]
[{"$nulls":6},0,"The agency has not developed a system for tracking and following up on customer reports."]
["Security Action Item 8","Establish and use a Risk Management Process to assess and manage threats, vulnerabilities and consequences   "]
[null,"8.101\nTSF 2","Does the agency have a risk assessment process approved by its management, for managing threats and vulnerabilities?  If so, summarize the process in the justification.","Document Review / Interview","Inspectors should refer to the MT BASE Guidance, Pg20.  ","Process of Risk Assessment",4,"Risk assessment process is developed, documented, specifically addresses threats and vulnerabilities, and is approved by management. Must be verified by Document Review."]
[{"$nulls":6},2,"Risk assessment process is developed with varying degrees of implementation."]
[]
[]
[{"$nulls":6},0,"Risk assessment process has not been developed."]
[null,8.102,"Has the agency identified facilities and systems it considers to be its critical assets?","Interview / Document Review","In Justification, describe the critical assets identified by the agency.","Identification of Critical Assets",4,"The agency has identified facilities and systems it considers critical assets. This is documented (or clearly implied in documentation/procedures). Must be verified by Document Review."]
[{"$nulls":6},2,"The agency has identified critical assets with varying degrees of documentation or development."]
[]
[]
[{"$nulls":6},0,"The agency has not identified critical assets."]
[null,"8.103\nTSF 2","Has the agency had an internal or external vulnerability assessment on its critical assets within the past 3 years?  Specify the dates of the most recent assessments and the entity(ies) that conducted the assessment(s).  ","Interview / Document Review","Scoring Justification should list at a minimum: date of assessment, identify critical assets, who conducted the assessment, etc. ","Date of last vulnerability assessment (General). \"Yes\" or \"no.\"",4,"A vulnerability assessment focused on the agency's critical assets has been conducted within the last 3 years. Must also be verified by Document Review."]
[]
[{"$nulls":6},2,"A vulnerability assessment focused on the agency's critical assets has been conducted within the last 3 years. Only verified by Interview."]
[]
[{"$nulls":6},0,"A security assessment focused on the agency's critical assets has not been conducted within the last 3 years."]
[null,"8.104\nTSF 1","Has the agency had an internal or external Risk Assessment, analyzing threat, vulnerability, & consequence, for critical assets and infrastructure, and systems within the past 3 years?  Have management and staff responsible for the risk assessment process been properly trained to manage the process?","Interview / Document Review","Scoring Justification should list at a minimum: date of assessment, identify critical assets, who conducted the assessment, etc. ","Recent Risk Assessment (specifically threat, vulnerability, and consequence analyzed), appropriate personnel trained.",4,"A risk assessment focused on the agency's critical assets has been conducted within the last 3 years; focuses specifically on threats, vulnerabilities, and consequences; and is documented. The personnel tasked with conducting the assessment have been provided adequate training to effectively conduct such an assessment. Must be verified by Document Review."]
[{"$nulls":6},2,"A risk assessment has been conducted with varying degrees of implementation or training on completing such assessment.  Assessment is documented and available for review.  Must be verified by Document Review."]
[]
[]
[{"$nulls":6},0,"A risk assessment has not been conducted, or documentation does not exist."]
[null,"8.105\nTSF 2","Has the system implemented procedures to limit and monitor authorized access to underground and underwater tunnels?  If so, summarize procedures in the justification.","Interview / Document Review",null,"Access to underground and underwater tunnels. N/A if the system does not have underground/underwater tunnels.",4,"The system has well-developed, well-documented policies and procedures in place to limit and monitor access to underground and underwater tunnels.  Must be verified by Document Review."]
[{"$nulls":6},2,"Documented policies are in place with varying degrees of implementation.  Verified only by Interview."]
[]
[]
[{"$nulls":6},0,"Policies and procedures have not been developed or documented."]
[null,8.106,"Are security investments prioritized using information developed in the risk assessment process?","Interview","In justification, examples of improvements based off of risk assessment results should be provided.","Security Investments, examples of security investment prioritization",4,"Risk assessments play a large role in agency policy and procurement. Security investments are prioritized based on information obtained during risk assessments. This is evident based on the agency's recent security investments that corrected items identified in past risk assessments, or is part of a documented policy."]
[{"$nulls":6},2,"Security investments are prioritized based on information obtained during risk assessments; however, this has been implemented or documented with varying degrees of development."]
[]
[]
[{"$nulls":6},0,"Security investments are not prioritized based on information obtained during risk assessments or risk assessments play no role in financial decisions."]
[null,"8.107\nTSF 1","Upon request, has TSA been provided access to the agency's vulnerability assessments, Security Plan and related documents?","Document Review",null,"Inspector was able to review all requested documents, including assessments and Security Plans. \"Yes\" or \"no.\"",4,"The agency has provided TSA with all requested documents."]
[]
[{"$nulls":6},0,"The agency has not provided TSA with all requested documents."]
[]
[]
["Security Action Item 9","Establish and use an information sharing process for threat and intelligence information"]
[null,9.101,"Does the agency have a formalized process and procedures for reporting and exchange of threat and intelligence information with Federal, State, and/or local law enforcement agencies? ","Document Review","Inspectors should refer to the MT BASE Guidance, Pg22.  ","Formalized process of intelligence sharing with Federal, State, and local law enforcement agencies. ",4,"The entity is actively involved with intelligence sharing and has developed a formalized (documented) method of sharing threat/intel information with multiple entities representing local, State and Federal law enforcement."]
[{"$nulls":6},2,"The entity has a formalized method of sharing information with varying degrees of implementation."]
[]
[]
[{"$nulls":6},0,"The entity does not have a formalized method of sharing information with law enforcement entities."]
[null,"9.102\nTSF 2","Does the system report threat and intelligence information directly to FBI Joint Terrorism Task Force (JTTF) or other regional anti-terrorism task force?","Document Review / Interview",null,"Reporting directly to JTTF or regional anti-terrorism body. \"Yes\" or \"no.\"",4,"The agency reports threat/intel information directly to the JTTF or regional anti-terrorism task force.  Must be verified by Document Review."]
[]
[{"$nulls":6},0,"The agency does not report threat/intel information directly to the JTTF or regional anti-terrorism task force."]
[]
[]
[null,"9.103\nTSF2","Does the system have a protocol to report threats or significant security concerns to appropriate law enforcement authorities, and TSA's Transportation Security Operations Center (TSOC)?","Document Review / Interview","This question applies to both Regulated and Non-Regulated entities.","Reporting threats and significant security concerns to TSOC and local law enforcement.",4,"The agency has detailed policies and protocols in place to report real-time threats/significant security concerns to appropriate law enforcement and TSOC. These protocols are documented and include a \"time\" element (immediately, within \"X\" hours, etc.).  Must be verified by Document Review."]
[{"$nulls":6},2,"The agency has detailed policies and protocols in place to report real-time threats/significant security concerns to appropriate law enforcement or TSOC. These protocols are documented and include a \"time\" element (immediately, within \"X\" hours, etc.). "]
[{"$nulls":6},1,"General/vague policies and procedures are in place with varying degrees of implementation."]
[]
[{"$nulls":6},0,"Policies and procedures are not in place."]
[null,9.104,"Does the agency routinely receive threat and intelligence information directly from any Federal government agency, State Homeland Security Office, Regional or State Intelligence Fusion Center,  PT-ISAC, or other transit agencies?","Interview",null,"Documented evidence of intel receiving (Daily Report, etc.).",4,"The agency receives threat/intel information at least once per week."]
[{"$nulls":6},3,"The agency receives threat/intel information on an every-other-week basis."]
[{"$nulls":6},2,"The agency receives threat/intel information on a monthly basis."]
[{"$nulls":6},1,"The agency receives threat/intel information on a quarterly basis or information is not directly from an appropriate source."]
[{"$nulls":6},0,"The agency does not receive threat/intel information."]
[null,9.105,"Does the agency report their NTA security data to FTA as required by 49 CFR 659?","Interview","49 CFR PART 659 SSO Only Question","NTA Security Data (regulation)",4,"The agency reports NTA security data to FTA."]
[]
[{"$nulls":6},0,"The agency does not report NTA security data to FTA."]
[]
[]
["Security Action Item 10","Conduct Tabletop and Functional Drills "]
[null,10.101,"Does the agency’s System Safety Program Plan (SSPP) contain or reference a document describing the process used by the agency to develop an approved, coordinated schedule for all emergency management program activities, including local/regional emergency planning and participation in exercises and drills?","Document Review","Inspectors should refer to the MT BASE Guidance, P22.               In Justification, describe agencies approved coordinated schedule for all emergency management program activities","Process for developing/ coordinating/ scheduling emergency management activities.",4,"The agency has developed a detailed process of developing an approved, coordinated schedule for all emergency management program activities, including local/regional emergency planning and participation in exercises and drills. This is documented in the System Safety Program Plan (SSPP) or another document which is referenced in the SSPP."]
[{"$nulls":6},2,"The agency has developed a process with varying degrees of implementation or documentation."]
[]
[]
[{"$nulls":6},0,"The agency has not developed such a process."]
[null,10.102,"Does the agency’s SSPP or SSP describe or reference how the agency performs its emergency planning responsibilities and requirements regarding emergency drills and exercises?","Document Review",null,"Emergency planning responsibilities and drills/exercises general requirements",4,"The agency has documented roles and responsibilities that detail how it performs its emergency planning activities, including those related to drills and exercises. Furthermore, the agency has established written requirements for emergency drills and exercises (timelines, method of evaluation, personnel required to participate, etc.). All roles, responsibilities, and requirements are documented in the agency's SSPP or SSP--or another documented that is referenced in the SSPP or SSP."]
[{"$nulls":6},2,"Roles, responsibilities and requirements regarding emergency planning are developed with varying degrees of implementation or documentation."]
[]
[]
[{"$nulls":6},0,"Roles, responsibilities and requirements regarding emergency planning are not developed or documented."]
[null,"10.103\nTSF 5","Does the agency evaluate its emergency preparedness by using annual field exercises, tabletop exercises, and/or drills?  If so, please summarize the exercise events held in the past year.","Interview","Agency driven","Agency conducting functional drills and exercises. \"Yes\" or \"no.\"",4,"The agency conducts drills and exercises annually with the purpose of evaluating its emergency preparedness procedures."]
[]
[{"$nulls":6},0,"The agency does not conduct drills and exercises annually, or the agency does not use drills/exercises to evaluate emergency preparedness procedures."]
[]
[]
[null,10.104,"Does the agency's SSPP or a related document include a requirement for annual field exercises, tabletops and drills?","Document Review",null,"Annual Requirement. \"Yes\" or \"no.\"",4,"The agency has a documented requirement for drills/exercises to be conducted once per year at a minimum."]
[]
[{"$nulls":6},0,"The agency does not have a documented requirement for drills/exercises to be conducted once per year at a minimum."]
[]
[]
[null,10.105,"Does the agency’s SSPP or SSP describe or reference how the agency documents the results of its emergency preparedness evaluations (i.e., briefings, after action reports and implementation of findings)?","Document Review",null,"Results of drills/ exercises/ evaluations, documentation of results. \"Yes\" or \"no.\"",4,"The process of drill/exercise evaluation is described and documented in the SSPP, SSP, or another document that is referenced by the SSPP/SSP."]
[]
[{"$nulls":6},0,"The process of evaluation is not documented."]
[]
[]
[null,10.106,"Does the agency’s SSPP or a related document describe or reference its program for providing employee training on emergency response protocols and procedures?","Document Review",null,"Documented training. \"Yes\" or \"no.\"",4,"The program for providing employee training on emergency response protocols and procedures is documented."]
[]
[{"$nulls":6},0,"The training program is not documented."]
[]
[]
[null,10.107,"Does the agency participate as an active player in full-scale, regional exercises held at least annually?","Interview","Region driven","Active-player participation. \"Yes\" or \"no.\"",4,"The agency participates as an active player in full-scale, regional exercises held at least annually."]
[]
[{"$nulls":6},0,"The agency does not participate as an active player in full-scale, regional exercises held at least annually."]
[]
[]
[null,"10.108\nTSF 5","In the last year, has the agency conducted and/or participated in  a drill, tabletop exercise, and/or field exercise including scenarios involving (i) IED's and (ii) WMD (chemical, biological, radiological, nuclear) with other transit agencies and first responders (e.g., NTAS scenarios)? ","Interview","In Justification, describe the drill/exercise and include date.","Drills: Specific Focus. Participants: other transit agencies, first responders.",4,"In the last year, the agency has been involved in drills/exercises that specifically focus on IEDs and WMD with appropriate external entities, to include first responders and other transit agencies that operate in the same environment."]
[{"$nulls":6},2,"Terrorism-specific drills have been conducted/participated in with varying degrees of action."]
[]
[]
[{"$nulls":6},0,"Terrorism-specific drills have not been conducted or participated in."]
[null,"10.109\nTSF 5","In the last year, has the agency reviewed results and prepared after-action reports to assess performance and develop lessons learned for all drills, tabletop, and/or field exercises?","Interview / Document Review",null,"Evaluation of results",4,"In the last year, the agency has reviewed and prepared after-action reports (or other evaluating report) for all drills and exercises. All evaluations are documented.  Must be verified by Document Review."]
[{"$nulls":6},2,"The agency has evaluated drills with varying degrees of implementation or documentation."]
[]
[]
[{"$nulls":6},0,"The agency has not evaluated drills in the past year."]
[null,"10.110\nTSF 5","In the last 12 months, has the agency updated plans, protocols and processes to incorporate after-action report recommendations/findings and corrective actions?  If so, summarize the actions taken in the justification. ","Interview / Document Review","In Justification, summarize the actions taken in the justification. ","Evaluation of results, plan modifications. \"Yes\" or \"no.\"",4,"In the last year, the agency has updated plans, protocols, or processes to incorporate after-action report recommendations/findings.  Must be verified by Document Review."]
[]
[{"$nulls":6},0,"The agency has not made any changes based on the results of drills/exercises."]
[]
[]
[null,10.111,"Has the agency established metrics to assess its performance during emergency exercises and to measure improvements?","Interview / Document Review",null,"Method of analysis",4,"The agency has developed a formal, objective system of evaluating drill performance. The agency has identified evaluation criteria, establishes drill/exercise goals, and analyzes the results appropriately. This system is documented.  Must be verified by Document Review."]
[{"$nulls":6},2,"The agency has established performance metrics with varying degrees of implementation."]
[]
[]
[{"$nulls":6},0,"The agency has not established metrics to  assess performance during emergency exercises. "]
[null,"10.112\nTSF 1","Does the system conduct drills and exercises of its security and emergency response plans to test capabilities of i.) employees and ii.) first responders to operate effectively in underwater/underground infrastructure and other critical systems?","Interview","In addition to underwater/underground infrastructure, this question applies to other critical systems as identified by the entity.","Drills in underwater/underground infrastructure and other critical systems. ",4,"The agency conducts exercises of its security and emergency response plans to test operational capabilities of employees and first responders in underwater/underground infrastructure and other critical systems."]
[{"$nulls":6},2,"The agency conducts exercises with a varying degree of implementation."]
[]
[]
[{"$nulls":6},0,"The agency does not conduct exercises related to underwater/underground infrastructure."]
[null,"10.113\nTSF 5","Does the transit system integrate local and regional first responders (law enforcement, firefighters, emergency medical teams) in drills, tabletop exercises, and/or field exercises?  If so, summarize each joint event and state when it took place.","Interview","In justification, summarize each joint event and state when it took place.","Drills with external agencies",4,"The agency actively reaches out to external emergency agencies (local and regional) when planning and conducting exercises. The agency integrates all appropriate entities: fire, medical, and law enforcement. "]
[{"$nulls":6},2,"Drills with external agencies have been conducted with varying degrees of inclusion or frequency."]
[]
[]
[{"$nulls":6},0,"Drills with external agencies have not been conducted."]
["Security Action Item 11","Developing a Comprehensive Cyber Security Strategy"]
[null,11.101,"Has the agency conducted a risk assessment to identify operational control and communication/business enterprise IT assets and potential vulnerabilities?","Document Review / Interview","Inspectors should refer to the MT BASE Guidance, Pg24.  ","Risk assessment focused on IT SECURITY",4,"The agency has conducted a risk assessment focused on IT systems as they relate to operational control, communication, and business enterprise. The assessment is documented and addresses threats, vulnerabilities, and consequences.   Must be verified by Document Review."]
[{"$nulls":6},2,"The agency has conducted an IT risk assessment with varying degrees of implementation or documentation."]
[]
[]
[{"$nulls":6},0,"The agency has not conducted an IT risk assessment."]
[null,11.102,"Has the agency implemented protocols to ensure that all IT facilities (e.g., data centers, server rooms, etc.) and equipment are properly secured to guard against internal or external threats or attacks?","Document Review / Interview",null,"Security measures for critical IT facilities/equipment",4,"The agency has identified all critical IT facilities/infrastructure and established procedures and protocols that ensure the security (physical and cyber) of these assets. Procedures are well-developed--specifically referencing IT-facilities/equipment and IT-security--and documented.  Must be verified by Document Review."]
[{"$nulls":6},2,"Protocols have been established with varying degrees of implementation or documentation."]
[]
[]
[{"$nulls":6},0,"Such security protocols have not been established."]
[null,11.103,"Has a written strategy been developed and integrated into the overall security program to mitigate the cyber risk identified?","Document Review",null,"Written IT security measures",4,"A written IT-security strategy--which includes countermeasures and personnel responsibilities--has been developed to mitigate cyber risk and is part of the overall security program (included as part of the  SSP or other appropriate document).  "]
[{"$nulls":6},2,"An IT-security strategy has been developed with varying degrees of implementation or documentation."]
[]
[]
[{"$nulls":6},0,"An IT-security strategy has not been developed."]
[null,11.104,"Does the agency have a designated representative to secure the internal network through appropriate access controls for employees, a strong authentication (i.e., password) policy, encrypting sensitive data, and employing network security infrastructure (example: firewalls, intrusion detection systems, IT security audits, antivirus, etc.)?","Interview",null,"IT Security Coordinator",4,"The agency has formally designated an individual responsible for securing the internal network through appropriate measures. This individual is knowledgeable of the agency's cybersecurity measures, and his/her responsibilities are documented."]
[{"$nulls":6},3,"The agency has formally designated an individual responsible for securing the internal network through appropriate measures. This individual is knowledgeable of the agency's cybersecurity measures, but his/her responsibilities are not documented (but widely known)."]
[{"$nulls":6},2,"The agency has formally designated an individual responsible for securing the internal network. This individual lacks a comprehensive knowledge of the agency's cybersecurity measures. "]
[{"$nulls":6},1,"An individual has been informally designated, and his/her responsibilities are not widely known."]
[{"$nulls":6},0,"An individual has not been designated."]
[null,11.105,"Does the agency ensure that recurring cyber security training reinforces security roles, responsibilities, and duties of employees at all levels to protect against and recognize cyber threats?","Interview",null,"Recurrent cybersecurity training",4,"The agency provides ongoing, recurrent cyber training that identifies cyber threats and addresses roles, responsibilities, and duties at all levels to mitigate these threats. Training is part of an official curriculum, utilizes well-developed materials, and is provided in a formal environment (classroom or computer-based)."]
[{"$nulls":6},2,"IT-security training is provided with varying degrees of implementation."]
[]
[]
[{"$nulls":6},0,"IT-security training is not provided."]
[null,11.106,"Has the agency established a cyber-incident response and reporting protocol?","Document Review / Interview",null,"Cyber-incident response and reporting protocols",4,"The agency has established cyber-incident response and reporting protocols. These procedures are detailed, documented, and address (a) employee actions to be taken in the event of a cyber-incident and (b) to whom cyber-incidents shall be reported.   Must be verified by Document Review."]
[{"$nulls":6},2,"Cyber-incident response and reporting protocols have been established with varying degrees of implementation or documentation."]
[]
[]
[{"$nulls":6},0,"Cyber-incident response and reporting protocols have not been established."]
[null,11.107,"Is the agency aware of and using available resources (e.g., standards, PT-ISAC, US CERT, National Cyber Security Communication and Integration Center, etc.)?","Interview","In Justification, describe resources used by agency. ","Available resources. \"Yes\" or \"no.\"",4,"The agency is aware of and makes use of available resources."]
[]
[{"$nulls":6},0,"The agency is not aware of available resources or the agency does not use available resources."]
[]
[]
["Security Action Item 12","Control Access to Security Critical Facilities "]
[null,12.101,"Have assets and facilities requiring restricted access been identified? ","Interview / Document Review","Inspectors should refer to the MT BASE Guidance, Pg26.  ","Restricted Areas",4,"Restricted areas are identified and documented. Agency personnel are familiar with their location and restricted status.  Must be verified by Document Review."]
[{"$nulls":6},2,"Restricted areas have been identified with varying degrees of implementation."]
[]
[]
[{"$nulls":6},0,"Restricted areas have not been identified."]
[null,12.102,"Are ID badges or other measures employed to restrict access to facilities not open to the public?","Frontline Observation / Interview",null,"ID Badges",4,"ID badges (or other effective measure) are issued to all employees with access to restricted areas, and the agency has policies in place requiring their use and/or display.  Must be verified by Frontline Observation."]
[{"$nulls":6},2,"ID badges (or other effective measure) are issued with varying degrees of implementation."]
[]
[]
[{"$nulls":6},0,"ID badges or similar measures are not employed by the agency."]
[null,"12.103\nTSF 2","Has the transit agency developed and implemented procedures to monitor, update and document access control (e.g. card key, ID badges, keys, safe combinations, etc.)?","Interview",null,"Access Control Monitoring/Updating",4,"The agency has implemented an access control system that is capable of all of the following: (1) monitoring access; (2) documenting access; and (3) updating access."]
[{"$nulls":6},2,"The agency utilizes an access control system with varying degrees of implementation of capability."]
[]
[]
[{"$nulls":6},0,"The agency's access control procedures is not capable of monitoring, documenting, and updating access."]
[null,12.104,"Does the agency have procedures to issue ID badges for visitors and contractors?","Interview / Frontline                                                 Observation",null,"ID Badges for contractors and visitors",4,"The agency has documented procedures in place to issue ID badges for visitors and contractors. These procedures are implemented perfectly. "]
[{"$nulls":6},2,"The agency has procedures in place to issue ID badges for visitors and contractors with varying degrees of implementation or documentation.  Must be verified by Frontline Observation."]
[]
[]
[{"$nulls":6},0,"The agency does not have procedures for issuing ID badges to visitors and contractors."]
[null,12.105,"Does the agency require escorts for visitors accessing non-public areas?","Interview",null,"Escorts Policy",4,"The agency has a documented policy that requires visitors to be escorted when accessing non-public areas. This policy is implemented perfectly."]
[{"$nulls":6},2,"The agency has policy In place with varying degrees of implementation or documentation."]
[]
[]
[{"$nulls":6},0,"The agency has no escort requirements for visitors."]
[null,12.106,"Is CCTV equipment installed in transit agency facilities?","Interview / Frontline Observation",null,"CCTV: Facilities",4,"Effective and capable CCTV systems are installed at all facilities. Must be verified by Frontline Observation."]
[{"$nulls":6},2,"Facilities are equipped with CCTV with varying degrees of installation or capability."]
[]
[]
[{"$nulls":6},0,"Facilities are equipped with CCTV with varying degrees of installation."]
[null,12.107,"Is CCTV equipment protecting critical assets interfaced with an access control system?","Interview",null,"CCTV: Access Control",4,"CCTV equipment protecting critical assets are completely integrated with other access control measures (door breach triggers automated CCTV functions, etc.)."]
[{"$nulls":6},2,"CCTV is interfaced with access control systems with varying degrees of integration."]
[]
[]
[{"$nulls":6},0,"CCTV is a stand-alone system, not interfaced with access control."]
[null,12.108,"Is CCTV equipment installed on transit vehicles?","Interview",null,"CCTV: Vehicles",4,"Effective and capable CCTV systems are installed on a vast majority of vehicle fleet."]
[{"$nulls":6},2,"CCTV is installed with varying degrees of implementation or capability."]
[]
[]
[{"$nulls":6},0,"CCTV is not installed on vehicles or CCTV is non-functional."]
[null,12.109,"Are Crime Prevention through Environmental Design (CPTED) and technology (e.g., CCTV, access control, intrusion detection, bollards, etc.) incorporated into design criteria for all new and/or existing capital projects?","Interview",null,"CPTED; Design/Engineering Representative interview",4,"CPTED is incorporated in the design of all projects. CPTED-related vulnerabilities are identified and corrected promptly using technological solutions or other solutions."]
[{"$nulls":6},2,"CPTED criteria is used with varying degrees of implementation."]
[]
[]
[{"$nulls":6},0,"CPTED criteria is not used."]
[null,{"v":12.11,"d":"12.110"},"Based on the risk assessment, does the agency use fencing, barriers, and/or intrusion detection to protect against unauthorized entry into stations, facilities, and other identified critical assets?","Interview",null,"Physical barriers",4,"The agency has installed physical barriers or intrusion detection systems to prevent unauthorized access at all appropriate stations, facilities, and critical infrastructure."]
[{"$nulls":6},2,"The agency uses barriers and intrusion detection systems with varying degrees of installation or capability."]
[]
[]
[{"$nulls":6},0,"The agency does not use physical barriers or intrusion detection systems at appropriate stations, facilities and/or critical infrastructure."]
[null,"12.111\nTSF 2 ","Has the system implemented protective measures to secure high risk/high consequence assets and systems identified in risk assessments?  Examples of protective measures include but are not limited to CCTV, intrusion detection systems, smart camera technology, fencing, enhanced lighting, access control, LE patrols, K-9s, protection of ventilation systems.    If protective measures for this infrastructure are employed, summarize type and location in in the justification.","Interview",null,"Additional measures for high-risk assets",4,"The agency has identified high risk/high consequence assets and has implemented additional security measures for all such assets. Additional measures are documented."]
[{"$nulls":6},2,"The agency has identified high risk/high consequence assets and developed additional security measures with varying degrees of implementation or documentation."]
[]
[]
[{"$nulls":6},0,"The agency has not identified high risk/high consequence assets and/or implemented additional security measures to protect such assets."]
[null,12.112,"Does the transit agency monitor a network of security, fire, duress, intrusion, utility and internal 911 alarm systems?","Interview",null,"Alarm monitoring",4,"The agency has a means of effectively monitoring a network of alarms, including intrusion, life-safety, and  other security-related alarms. The agency has plans and procedures in place for responding to such alarms."]
[{"$nulls":6},3,"The agency has a means of effectively monitoring a network of alarms."]
[{"$nulls":6},2,"The agency has a network of appropriate alarms that are not effectively monitored."]
[{"$nulls":6},1,"The agency utilizes an ineffective or insufficient network of alarms."]
[{"$nulls":6},0,"The agency has no alarm systems."]
[null,12.113,"Are emergency call boxes provided for passengers?","Physical Observation / Interview",null,"Call boxes",4,"Call boxes are installed at all stations, terminals, and appropriate facilities. Call boxes are fully functional."]
[{"$nulls":6},2,"Call boxes are installed at varying degrees. Must be verified by Physical Observation."]
[]
[]
[{"$nulls":6},0,"Call boxes are not used."]
[null,12.114,"Do transit agency personnel administer an automated employee access control system and perform corrective analysis of security breaches?","Interview",null,"Automated Access Control (employee-controlled badge/keycard entry)",4,"The agency uses an automated access control system and performs a corrective analysis of all security breaches to prevent future occurrences of a similar nature. This corrective analysis is documented as part of an overarching policy or as part of an identified employee's responsibilities."]
[{"$nulls":6},3,"The agency uses an automated access control system and performs a formal corrective analysis of all security breaches to prevent future occurrences of a similar nature. Corrective analysis is being performed, but this responsibility is not documented."]
[{"$nulls":6},2,"The agency uses an automated access control system and performs a corrective analysis of some security breaches, including those deemed \"important.\""]
[{"$nulls":6},1,"The agency uses an automated access control system, but has not developed procedures to perform corrective analysis of security breaches."]
[{"$nulls":6},0,"The agency does not use an automated access control system."]
[null,12.115,"Does the agency have policies and procedures for screening of mail and/or outside deliveries?","Interview",null,"Mail screening ",4,"The agency has documented policies and specific, well-developed procedures that address the screening of mail or outside deliveries. Procedures are completely implemented."]
[{"$nulls":6},2,"The agency has specific, well-developed procedures that are not documented. Procedures are completely implemented."]
[]
[{"$nulls":6},1,"The agency has general procedures in place with varying degrees of implementation."]
[{"$nulls":6},0,"The agency has policies or procedures for screening mail or outside deliveries."]
[null,12.116,"Have locks, bullet resistant materials and anti-fragmentation materials been installed/used at critical locations?","Interview",null,"Breach preparedness at critical location",4,"The agency uses multiple methods of breach prevention (locks, anti-frag materials, bullet resistant materials, etc) at all critical locations."]
[{"$nulls":6},2,"The agency utilizes methods of breach prevention at critical location with varying degrees of implementation."]
[]
[]
[{"$nulls":6},0,"The agency does not use locks, bullet-resistant materials, or anti-fragmentation materials at critical locations."]
[null,12.117,"Does the agency use National Fire Protection Association (NFPA) Standard 130 or equivalent to evaluate fire/life safety in station design or modification (including fire detection systems, firewalls and flame-resistant materials, back-up powered emergency lighting, defaults in turnstile and other systems supporting emergency exists, and pre-recorded public announcements)?","Interview",null,"Access Control does not interfere with Safety or Emergency Operations. \"Yes\" or \"no.\"",4,"NFPA 130 or equivalent is used in station design or modification criteria. Access Control systems do not interfere with safety or emergency operations."]
[]
[{"$nulls":6},0,"Access control systems interfere with safety or emergency operations."]
[]
[]
[null,12.118,"Is directional signage with adequate lighting provided in a consistent manner in all stations, both to provide orientation and to support emergency evacuation?","Physical Observation ",null,"Lighting ",4,"Directional signage and lighting is consistent at all stations and is installed in a manner that supports security, safety and emergency operations."]
[{"$nulls":6},2,"Directional signage and lighting is used with varying degrees of implementation or installation. Must be verified by Physical Observation."]
[]
[]
[{"$nulls":6},0,"Directional signage and lighting does not support security, safety, and emergency operations."]
[null,12.119,"Are gates and locks used on all facility doors to prevent unauthorized access? ","Interview / Physical Observation",null,"Methods of restricting access ",4,"The agency uses gates and locks to prevent unauthorized access at all facilities. Policies and procedures are in place to effectively utilize locks and gates."]
[{"$nulls":6},2,"Gates and locks are used with varying degrees of implementation. Must be verified by Physical Observation."]
[]
[]
[{"$nulls":6},0,"Gates and locks are not used to restrict access to facilities."]
[null,{"v":12.12,"d":"12.120"},"Are keys controlled through an established program managed by the security/police function? ","Interview",null,"Key control program",4,"The agency has a documented key control program that is managed by the security/internal police department."]
[{"$nulls":6},2,"The agency has a key control program with varying degrees of documentation or implementation."]
[]
[]
[{"$nulls":6},0,"The agency has no key control program."]
[null,12.121,"Are gates and locks also used to close down system facilities after operating hours?","Physical Observation / Interview",null,"Methods of securing facilities",4,"Gates and locks are used at all facilities that are closed down. Policies and procedures are in place to effectively utilize locks and gates. Must be verified by Physical Observation."]
[{"$nulls":6},2,"Gates and locks are used with varying degrees of implementation. Must be verified by Physical Observation."]
[]
[]
[{"$nulls":6},0,"Gates and locks are not used to secure facilities after operating hours."]
[null,12.122,"Do transit vehicles have radios, silent alarms, and/or passenger communication systems?","Interview",null,"Means of communication",4,"All (or the vast majority of) transit vehicles are equipped with radios, silent alarms, and/or passenger communication systems. Policies and procedures are in place to effectively utilize these measures."]
[{"$nulls":6},2,"Radios, silent alarms, and/or passenger communication systems are used with varying degrees of implementation."]
[]
[]
[{"$nulls":6},0,"Radios, silent alarms, and/or passenger communication systems are not used."]
[null,12.123,"Does the transit agency use graffiti-resistant/etch-resistant materials for walls, ceilings, and windows?","Interview",null,"\"Broken Windows Theory\"",4,"Graffiti-resistant/etch-resistant materials are used at all (or a vast majority of) facilities."]
[{"$nulls":6},2,"Materials are actively deployed at \"problematic\" areas prone to vandalism."]
[]
[{"$nulls":6},1,"Materials are rarely used."]
[{"$nulls":6},0,"Materials are not used."]
[null,12.124,"Are Uninterruptible Power Supply (UPS) or redundant power sources provided for safety and security of critical equipment, such as but not limited to: exit and platform lighting; parking lot lighting; ancillary space and shop lighting; intrusion detection (alarmed rooms and spaces, fare collection equipment, etc.); fire detection, alarm and suppression systems; public address (shop and public areas); call-for-aid telephones; CCTV; emergency trip stations; vital train control functions; etc.?","Interview",null,"Back-up power for critical safety and security equipment",4,"Uninterruptible Power Supplies are provided for all safety- and security-critical equipment."]
[{"$nulls":6},3,"A combination of UPS and other back-up power is provided for all safety- and security-critical equipment."]
[{"$nulls":6},2,"A combination of UPS and other back-up power is provided for a majority of safety- and security-critical equipment."]
[{"$nulls":6},1,"A combination of UPS and other back-up power is provided for main facilities."]
[{"$nulls":6},0,"The agency has no back-up power capabilities."]
[null,12.125,"At passenger stations at which a vulnerability assessment has identified a significant risk, and to the extent practicable, has the owner/operator removed trash receptacles and other non-essential receptacles or containers  (with the exception of bomb resistant receptacles or clear plastic containers) from the platform areas of passenger terminals and stations?","Interview",null,"Trash receptacles",4,"The agency has removed non-explosive resistant trash receptacles from platform areas of terminals and stations."]
[]
[{"$nulls":6},0,"The agency has not removed non-explosive resistant trash receptacles from platform areas of terminals and stations."]
[]
[]
[null,12.126,"Does the agency employ specific protective measures for all critical infrastructure  (e.g., tunnels, bridges, stations, control centers, etc) identified through the risk assessment particularly at access points and ventilation infrastructure in place and maintained in optimal condition? Examples of protective measures include, but are not limited to, CCTV, intrusion detection systems, smart camera technology, fencing, lighting, access control, law enforcement patrols, canine patrols, physical protection for ventilation systems.  If protective measures for this infrastructure are employed, summarize type and location in the justification.","Interview",null,"Protective Measures for Critical Infrastructure",4,"The agency has formally identified critical infrastructure and deployed specific, effective protective measures, which are maintained and implemented appropriately, at all identified areas. "]
[{"$nulls":6},2,"The agency has deployed protective measures with varying degrees of implementation or effectiveness."]
[]
[]
[{"$nulls":6},0,"Measures are not deployed to protect critical infrastructure or critical infrastructure has not been identified."]
[null,"12.127\nTSF 1","Does the agency have or utilize explosive detection canine teams, either maintained by the system or made available from other law enforcement agencies?  If so, has the system implemented procedures for reporting of and response to positive reactions by the canine?","Interview",null,"Explosive detection canine unit, Mutual Aid Agreements",4,"The agency utilizes explosive detection canine teams (with appropriate mutual aid agreements established, if necessary) and has established documented policies and procedures regarding their use."]
[{"$nulls":6},2,"The agency utilizes explosive detection canine teams with varying degrees of program development."]
[]
[]
[{"$nulls":6},0,"The agency does not use or have access to explosive detection canine teams."]
["Security Action Item 13","Conduct Physical Security Inspections"]
[null,"13.101\nTSF 1","Does the agency conduct frequent inspections of key facilities, stations, terminals, trains and vehicles, or other critical assets for persons, materials, and items that do not belong?","Document Review / Interview","Inspectors should refer to the MT BASE Guidance, Pg29.  ","Critical asset inspections (General)",4,"The agency has procedures in place to conduct security inspections of facilities and vehicles for suspicious items and persons at multiple times per day. These procedures are appropriately documented and implemented perfectly."]
[{"$nulls":6},2,"Security inspections are conducted with varying degrees of implementation or documentation. Must be verified by Document Review."]
[]
[]
[{"$nulls":6},0,"Security inspections are not conducted."]
[null,13.102,"Has the transit agency established procedures for inspecting/sweeping vehicles and stations to identify and manage suspicious items, based on HOT characteristics (hidden, obviously suspicious, not typical) or equivalent system?","Document Review / Frontline Verification","In justification, provide results of interview with Front Line employees.","Inspection procedures reflect \"HOT\" characteristics. \"Yes\" or \"no.\"",4,"Documented security procedures reflect HOT characteristics. Must be verified by Frontline Employee's."]
[]
[{"$nulls":6},0,"Documented security procedures do not reflect HOT characteristics."]
[]
[]
[null,13.103,"Has the transit agency developed a form or quick reference guide for operations and personnel to conduct pre-trip, post-trip, and within-trip inspections?","Document Review",null,"Vehicle inspection checklist. \"Yes\" or \"no.\"",4,"The agency utilizes a checklist or other widely distributed document that specifically addresses security to assist personnel conducting pre-, post-, and within-trip security inspections."]
[]
[{"$nulls":6},0,"The agency does not use a checklist/form for vehicle security inspections or the agency's checklist/form does not address security."]
[]
[]
[null,13.104,"Has the transit agency developed a form or quick reference guide for station attendants and others regarding station and facility inspections?","Document Review",null,"Facility inspection checklist. \"Yes\" or \"no.\" ",4,"The agency utilizes a checklist or other widely distributed document that specifically addresses security to assist personnel conducting station/facility inspections."]
[]
[{"$nulls":6},0,"The agency does not use a checklist/form for facility security inspections or the agency's checklist/form does not address security."]
[]
[]
[null,"13.105 TSF 2","Does the system document the results of inspections and implement any changes to policies and procedures or implement corrective actions, based on the findings?","Document Review",null,"Inspection results",4,"Inspection results are documented and the agency implements corrective actions or other modifications based on these results. This is readily observable in changes made by the agency or is a documented policy."]
[{"$nulls":6},2,"Results are documented and changes are made with varying degrees of implementation or documentation."]
[]
[]
[{"$nulls":6},0,"Results are not documented or inspection results are not a factor in the decision-making process."]
[null,"13.106\nTSF 2","Does the agency conduct frequent inspections of access points, ventilation systems, and the interior of underground/underwater assets and systems for indications of suspicious activity?","Document Review /interview",null,"Inspections of non-normal areas. N/A if the system has no underground/underwater tunnels.",4,"The agency conducts security inspections of non-normal areas (access points, ventilation systems, interior of underground/underwater assets) for indications of suspicious activity multiple times per week. These procedures are documented appropriately and implemented to perfection.  Must be verified by Document Review."]
[{"$nulls":6},2,"Security inspections are conducted with varying degrees of implementation or documentation."]
[]
[]
[{"$nulls":6},0,"Security inspections are not conducted."]
[null,13.107,"Does the system integrate randomness and unpredictability into its security activities to enhance deterrent effect?","Interview / Document Review","Agency should strive to implement and document their own unpredictable security measures using their own resources.","Randomness and unpredictability as it relates to inspections. \"Yes\" or \"no.\"",4,"Security activities are conducted at random times and at random intervals and these procedures are documented. Must be verified by Document Review."]
[]
[{"$nulls":6},0,"Security activities are conducted at set times."]
[]
[]
[null,13.108,"Is there a process in place, with necessary training provided to personnel, to ensure that in service vehicles are inspected at regular periodic intervals for suspicious or unattended items? Specify type and frequency of inspections.","Interview","In justification, specify type and frequency of inspections.","Security Inspections: Vehicles",4,"The agency has documented policies and procedures in place to ensure that all in-service rail cars are inspected at multiple times per day for suspicious or unattended items and personnel receive training to properly conduct these inspections."]
[{"$nulls":6},2,"Rail cars are inspected with varying degrees of implementation or documentation."]
[]
[]
[{"$nulls":6},0,"Rail cars are not inspected for suspicious or unattended items."]
[null,13.109,"Is there a process in place, with necessary training provided to personnel, to ensure that all critical infrastructure are inspected at regular periodic intervals for suspicious or unattended items? Specify type and frequency of inspections.","Interview","In justification, specify type and frequency of inspections.","Security Inspections: Critical Infrastructure",4,"The agency has documented policies and procedures in place to ensure that all critical infrastructure areas are inspected at multiple times per day for suspicious or unattended items and personnel receive training to properly conduct these inspections."]
[{"$nulls":6},2,"Critical infrastructure is inspected with varying degrees of implementation or documentation."]
[]
[]
[{"$nulls":6},0,"Critical infrastructure is not inspected for suspicious or unattended items."]
["Security Action Item 14","Conduct Background Investigations of Employees and Contractors"]
[null,"14.101\nTSF 2","Does the agency conduct background investigations (i.e., criminal history and motor vehicle records) on all new front-line operations and maintenance employees, and employees with access to sensitive security information, facilities and systems?","Interview","Inspectors should refer to the MT BASE Guidance, Pg30.  ","Background checks, HR Representative interview",4,"The agency conducts an appropriate level of background check on all frontline employees, maintenance employees, and employees with access to sensitive security information/facilities/systems."]
[{"$nulls":6},2,"The agency conducts an appropriate level of background check with varying degrees of implementation."]
[]
[]
[{"$nulls":6},0,"Agency-personnel are not subject to background investigation."]
[null,"14.102\nTSF 2","To the extent allowed by agency policy or law, does the agency conduct background investigations on contractors, including vendors, with access to critical facilities, sensitive security systems, and sensitive security information?  ","Interview",null,"Background checks, HR Representative interview",4,"The agency (a) conducts an appropriate level of background check on relevant contract employees or (b) the agency builds appropriate background check criteria into the bid process and has established a method of verifying/auditing background checks. "]
[{"$nulls":6},2,"The agency conducts (or requires) an appropriate level of background check with varying degrees of implementation."]
[]
[]
[{"$nulls":6},0,"Relevant contract employees are not subject to background investigation."]
[null,14.103,"Has counsel for the agency reviewed the process for conducting employee background investigations to confirm that procedures are consistent with applicable statutes and regulations?","Interview",null,"Background checks, HR Representative interview",4,"The agency's process for conducting background investigations has been reviewed by a legal professional."]
[]
[{"$nulls":6},0,"The agency's process for conducting background investigations has not been reviewed by a legal professional."]
[]
[]
[null,14.104,"Is the background investigation process documented?","Document Review",null,"Background check process, HR Representative interview",4,"The process for conducting background checks is documented. This includes the following: the method/type of background check utilized, positions that require background checks, who is responsible for conducting the investigation, and other factors of consideration (such as policies restricting the commencement of employment until after the investigation is complete)."]
[{"$nulls":6},2,"The background investigation process is documented with varying degrees of implementation."]
[]
[]
[{"$nulls":6},0,"The background investigation process is not documented."]
[null,14.105,"Is the criteria for background investigations based on employee type (senior management staff, law enforcement officers, managers/supervisors, operators, maintenance, safety/security sensitive, contractor, etc.) and/or responsibility and access documented?  ","Document Review",null,"Background check process, HR Representative interview",4,"Background screening criteria (disqualifying conditions) are based on job-function, required level of access, and/or responsibility. Criteria covers all functions that may require a background check. This is documented."]
[{"$nulls":6},2,"Background screening criteria (disqualifying conditions) is based on job-function, required level of access, and/or responsibility with varying degrees of implementation or documentation."]
[]
[]
[{"$nulls":6},0,"Background screening criteria is not documented."]
["Security Action Item 15","Control Access to documents of security critical systems and facilities"]
[null,"15.101\nTSF 2","Does the agency keep documentation of its security critical systems, such as tunnels, bridges, HVAC systems and intrusion alarm detection systems (i.e. plans, schematics, etc.) protected from unauthorized access?","Interview","Inspectors should refer to the MT BASE Guidance, Pg31.  ","Security-critical documentation, Engineering Representative interview ",4,"The agency has well-developed document control procedures that protect security-critical documentation from unauthorized access. All documents are appropriately protected: plans, schematics, etc."]
[{"$nulls":6},2,"The agency has developed document control procedures with varying degrees of implementation."]
[]
[]
[{"$nulls":6},0,"The agency does not protect security-critical documentation."]
[null,15.102,"Has the agency designated a department/person responsible for administering the access control policy with respect to agency documents?","Interview",null,"Document control authority. \"Yes\" or \"no\"",4,"A person or department has been formally tasked with administering the access control policy with respect to agency documents."]
[]
[{"$nulls":6},0,"A person or department has not been formally tasked with administering the access control policy with respect to agency documents."]
[]
[]
[null,15.103,"Does the security review committee (or other designated group) review document control practices, assess compliance applicable procedures, and identify discrepancies and necessary corrective action?","Interview",null,"Document control policy monitoring",4,"A security review committee actively reviews document control practices, assess compliance-applicable procedures, and identifies discrepancies and corrective action regularly."]
[{"$nulls":6},2,"A security review committee covers document control issues with varying degrees of action."]
[]
[]
[{"$nulls":6},0,"Document control issues are not addressed by the security review committee."]
["Security Action Item 16","Process for handling and access to Sensitive Security Information (SSI)"]
[null,16.101,"Does the agency have a documented policy for identifying and controlling the distribution of and access to documents  it considers to be Sensitive Security Information (SSI) pursuant to 49 CFR Part 15 or 1520?","Document Review","Inspectors should refer to the MT BASE Guidance, Pg32.  ","Documented SSI Policy",4,"The agency has a fully-developed policy for identifying and controlling the distribution of and access to SSI documents. This policy is documented and includes all of the following: (1) what materials are considered SSI; (2) how SSI is marked; (3) who has access to SSI; and (4) how SSI is shared or distributed."]
[{"$nulls":6},2,"The agency's SSI policy covers identification and distribution with varying degrees of implementation or documentation."]
[]
[]
[{"$nulls":6},0,"The SSI policy is not documented or documentation contains no mention of SSI identification and distribution."]
[null,16.102,"Does the agency have a documented policy for proper handling, control, and storage of documents labeled as or otherwise determined to be Sensitive Security Information (SSI) pursuant to 49 CFR Part 15 or 1520?","Document Review",null,"Documented SSI Policy",4,"The agency has a fully-developed policy for identifying and controlling the distribution of and access to SSI documents. This policy is documented and includes all of the following: (1) proper handling of SSI (how distribution is tracked, how SSI should be treated once received by employees, etc.); (2) how SSI is stored and secured (locked, encrypted, etc.); and (3) how SSI is destroyed/disposed of."]
[{"$nulls":6},2,"The agency's SSI policy covers handling and storage with varying degrees of implementation or documentation."]
[]
[]
[{"$nulls":6},0,"The SSI policy is not documented or documentation contains no mention of SSI handling or storage."]
[null,16.103,"Are employees who may be provided SSI materials per 49 CFR Part 15 or 1520) familiar with the documented policy for the proper handling of such materials? ","Frontline Verification",null,"Employee familiarization (requires frontline interviews)",4,"Based on a random sampling of frontline personnel interviews, all employees who may be provided SSI materials have a working knowledge of the agency's SSI policy--including (a) what constitutes SSI, (b) how it is controlled, (c) how it is handled, and (d) how it is stored. Must be verified."]
[{"$nulls":6},2,"Based on a random sampling of frontline interviews, employees who may be provided SSI materials have a working knowledge of the agency's SSI policy with varying degrees of familiarity. Must be verified."]
[]
[]
[{"$nulls":6},0,"Based on a random sampling of frontline interviews, employees who may be provided SSI materials are not familiar with the agency's SSI policy or such a policy does not exist."]
[null,16.104,"Have employees provided access to SSI material per 49 CFR Part 15 or 1520 received training on proper labeling, handling, dissemination, and storage (such as through the TSA on-line SSI training program)?","Frontline Verification",null,"SSI Training development and implementation (requires frontline interviews)",4,"The agency has established official SSI training (with appropriate materials), and based on a sampling of frontline personnel interviews, all employees who may be provided access to SSI have been provided the training.  Must be verified."]
[{"$nulls":6},2,"Based on a sampling of frontline interviews, SSI training has been provided with varying degrees of implementation or development. Must be verified."]
[]
[]
[{"$nulls":6},0,"SSI training has not been provided or has not been developed."]
["Security Action Item 17","Audit Program"]
[null,17.101,"Has the agency established a schedule for conducting  its internal security audit process?","Document Review","Inspectors should refer to the MT BASE Guidance, Pg32.  ","Established Schedule Internal Security Audit (self-assessment). An audit is focused on  practices identified in the SSP and ensuring these policies are implemented and followed effectively.",4,"The agency has a documented schedule for conducting internal security audits in an ongoing manner over a three-year period. "]
[{"$nulls":6},2,"The agency has developed a schedule for conducting internal security audits with varying degrees of documentation."]
[]
[]
[{"$nulls":6},0,"The agency has no documented schedule for conducting internal security audits."]
[null,17.102,"Does the SSP contain a description of the process used by the agency to audit its implementation of the SSP over the course of the agency's published schedule?","Document Review","In justification, provide description of process.","Process Description: Internal Security Audit (self-assessment). An audit is focused on  practices identified in the SSP and ensuring these policies are implemented and followed effectively.",4,"The agency has a detailed, well-documented process for conducting internal security reviews. This process is described in the SSP and includes the following: (1) what activities and documents are audited; (2) how these items are audited (methods of verification); and (3) the extent/depth/level of the audit."]
[{"$nulls":6},2,"The SSP contains a description of the internal security audit process with varying degrees of development or documentation."]
[]
[]
[{"$nulls":6},0,"The SSP does not contain a description of the internal security audit process."]
[null,17.103,"Has the transit agency established checklists and procedures to govern the conduct of its internal security audit process?","Document Review",null,"Checklists: Internal Security Audit (self-assessment). An audit is focused on  practices identified in the SSP and ensuring these policies are implemented and followed effectively.",4,"The agency has well-developed procedures for conducting internal security audits and uses checklists/forms to properly and consistently conduct audits."]
[{"$nulls":6},2,"The agency has developed procedures and checklists with varying degrees of development or implementation."]
[]
[{"$nulls":7},"The agency does not use checklists, but has documented procedures in place."]
[{"$nulls":6},0,"The agency has no documented procedures for "]
[null,17.104,"Is the transit agency complying with its internal security audit schedule? ","Interview / Document Review",null,"Implementation: Internal Security Audit (self-assessment). An audit is focused on  practices identified in the SSP and ensuring these policies are implemented and followed effectively. \"Yes\" or \"no.\"",4,"The agency is conducting internal security audits in a manner that reflects its established schedule. Must be verified by Document Review."]
[]
[{"$nulls":6},0,"The agency is not complying with it established schedule or such a schedule does not exist."]
[]
[]
[null,17.105,"Is each internal security audit documented in a written report, which includes evaluation of the adequacy and effectiveness of the SSP element and applicable implementing procedures audited, needed corrected actions, needed recommendations, an implementation schedule for corrective actions and status reporting?","Document Review",null,"Documentation: Internal Security Audit (self-assessment). An audit is focused on  practices identified in the SSP and ensuring these policies are implemented and followed effectively.",4,"All internal security audits are documented in a written report, which include all of the following: (1) evaluation of all audited items, including a policy and its implementation; and (2) corrective/recommended actions."]
[{"$nulls":6},2,"Internal security audits are documented with varying degrees of implementation."]
[]
[]
[{"$nulls":6},0,"Audits are not documented."]
[null,17.106,"In the last 12 months, has the Security Review Committee (or other designated group) addressed the findings and recommendations from the internal security audits, and updated plans, protocols and processes as necessary?","Interview",null,"Peer Review: Internal Security Audit (self-assessment). An audit is focused on  practices identified in the SSP and ensuring these policies are implemented and followed effectively.",4,"In the last 12 months, the Security Review Committee has reviewed audit reports, addressed findings, and updated plans and protocols as necessary."]
[{"$nulls":6},2,"In the last 12 months, the Security Review Committee has reviewed audit reports with varying degrees of action."]
[]
[]
[{"$nulls":6},0,"The Security Review Committee does not review audit reports or the committee has not reviewed audit reports within the last 12 months."]
[null,17.107,"Does the transit agency’s internal security audit process ensure that auditors are independent from those responsible for the activity being audited?","Interview",null,"Independent Auditors: Internal Security Audit (self-assessment). An audit is focused on  practices identified in the SSP and ensuring these policies are implemented and followed effectively. \"Yes\" or \"no.\"",4,"Auditors are independent from the individuals they are tasked with auditing to prevent any conflicts of interest."]
[]
[{"$nulls":6},0,"Auditors are not independent from the individuals they are tasked with auditing."]
[]
[]
[null,17.108,"Has the agency made its internal security audit schedule available to the SSO agency?","Interview","49 CFR PART 659 SSO Only Question","SSO: Internal Security Audit (self-assessment). An audit is focused on  practices identified in the SSP and ensuring these policies are implemented and followed effectively. \"Yes\" or \"no.\"",4,"The agency has made its internal security audit schedule available to the SSO agency."]
[]
[{"$nulls":6},0,"The agency has not made its internal security audit schedule available to the SSO agency."]
[]
[]
[null,17.109,"Has the agency made checklists and procedures used in its internal security audits available to the SSO agency?","Interview","49 CFR PART 659 SSO Only Question","SSO: Internal Security Audit (self-assessment). An audit is focused on  practices identified in the SSP and ensuring these policies are implemented and followed effectively. \"Yes\" or \"no.\"",4,"The agency has made checklists and procedures used in its internal security audits available to the SSO agency."]
[]
[{"$nulls":6},0,"The agency has not made checklists and procedures used in its internal security audits available to the SSO agency."]
[]
[]
[null,{"v":17.11,"d":"17.110"},"Has the agency notified the SSO agency 30 days prior to the conduct of an internal security audit?","Interview","49 CFR PART 659 SSO Only Question","SSO: Internal Security Audit (self-assessment). \"Yes\" or \"no.\"",4,"The agency has notified the SSO agency 30 days prior to the conduct of an internal security audit."]
[]
[{"$nulls":6},0,"The agency has not notified the SSO agency 30 days prior to the conduct of an internal security audit."]
[]
[]
[null,17.111,"Has a report documenting internal security audit process and the status of findings and corrective actions been made available to the SSO agency within the previous 12 months?","Interview","49 CFR PART 659 SSO Only Question","SSO: Internal Security Audit (self-assessment). \"Yes\" or \"no.\"",4,"A report documenting internal security audit process and the status of findings and corrective actions have been made available to the SSO agency within the previous 12 months."]
[]
[{"$nulls":6},0,"A report documenting internal security audit process and the status of findings and corrective actions have not been made available to the SSO agency within the previous 12 months."]
[]
[]
[null,17.112,"Has the agency's chief executive certified to the SSO agency that the agency is in compliance with its SSP? ","Interview","49 CFR PART 659 SSO Only Question","SSO: Internal Security Audit (self-assessment). \"Yes\" or \"no.\"",4,"The agency's chief executive has certified to the SSO agency that the agency is in compliance with its SSP."]
[]
[]
[{"$nulls":6},0,"The agency's chief executive has not certified to the SSO agency that the agency is in compliance with its SSP."]
[]
[null,17.113,"Was that certification included with the most recent annual report submitted to the SSO agency?","Interview","49 CFR PART 659 SSO Only Question","SSO: Internal Security Audit (self-assessment). \"Yes\" or \"no.\"",4,"The previously mentioned certification was included with the most recent annual report submitted to the SSO agency."]
[]
[{"$nulls":6},0,"The previously mentioned certification was not included with the most recent annual report submitted to the SSO agency."]
[]
[]
[null,17.114,"If the agency's chief executive was not able to certify to the SSO agency that the agency is in compliance with its SSP, was a corrective action plan developed and made available to the SSO?","Interview","49 CFR PART 659 SSO Only Question","SSO: Internal Security Audit (self-assessment). \"Yes\" or \"no.\"",4,"A corrective action plan was developed and made available to the SSO. "]
[]
[{"$nulls":6},0,"A corrective action plan was not developed and made available to the SSO. "]

{"sheet":"Profile Sheet","index":2,"n_rows":57,"n_cols":13,"rows_kept":57,"merged":[[0,0,0,12],[1,0,1,12],[2,0,2,12],[3,6,3,8],[3,9,3,11],[4,6,4,8],[4,9,4,11],[5,6,5,8],[5,9,5,12],[6,6,6,8],[6,9,6,12],[7,6,7,8],[7,9,7,12],[8,6,8,8],[8,9,8,12],[9,0,9,5],[9,6,9,12],[10,0,10,5],[10,6,10,12],[11,0,11,1],[11,2,11,5],[11,7,11,12],[12,0,12,1],[12,2,12,5],[12,7,12,8],[13,0,13,3],[13,4,13,5],[13,6,13,7],[13,8,13,12],[14,0,14,2],[14,3,14,5],[14,6,14,7],[14,8,14,12],[15,0,15,3],[15,4,15,5],[15,6,15,7],[15,8,15,12],[15,16,15,17],[16,0,16,3],[16,4,16,7],[16,8,16,10],[16,11,16,12],[17,1,17,9],[18,1,18,2],[18,4,18,5],[18,7,18,8],[19,1,19,2],[19,4,19,5],[19,7,19,8],[20,1,20,2],[20,4,20,5],[20,7,20,8],[21,1,21,2],[21,4,21,5],[21,7,21,8],[22,0,22,12],[23,0,23,2],[23,3,23,5],[23,6,23,7],[23,8,23,9],[23,10,23,12],[24,0,24,2],[24,3,24,5],[24,6,24,7],[24,8,24,9],[24,10,24,12],[25,0,25,2],[25,3,25,5],[25,6,25,7],[25,8,25,9],[25,10,25,12],[26,0,26,2],[26,3,26,5],[26,6,26,7],[26,8,26,9],[26,10,26,12],[27,0,27,2],[27,3,27,5],[27,6,27,7],[27,8,27,9],[27,10,27,12],[29,0,29,12],[30,0,30,2],[30,3,30,5],[30,6,30,7],[30,8,30,9],[30,10,30,12],[31,0,31,2],[31,3,31,5],[31,6,31,7],[31,8,31,9],[31,10,31,12],[32,0,32,2],[32,3,32,5],[32,6,32,7],[32,8,32,9],[32,10,32,12],[33,0,33,2],[33,3,33,5],[33,6,33,7],[33,8,33,9],[33,10,33,12],[34,0,34,2],[34,3,34,5],[34,6,34,7],[34,8,34,9],[34,10,34,12],[35,0,35,2],[35,3,35,5],[35,6,35,7],[35,8,35,9],[35,10,35,12],[37,0,37,12],[38,0,38,2],[38,3,38,5],[38,6,38,7],[38,8,38,9],[38,10,38,12],[39,0,39,2],[39,3,39,5],[39,6,39,7],[39,8,39,9],[39,10,39,12],[40,0,40,2],[40,3,40,5],[40,6,40,7],[40,8,40,9],[40,10,40,12],[41,0,41,2],[41,3,41,5],[41,6,41,7],[41,8,41,9],[41,10,41,12],[42,0,42,2],[42,3,42,5],[42,6,42,7],[42,8,42,9],[42,10,42,12],[43,0,43,2],[43,3,43,5],[43,6,43,7],[43,8,43,9],[43,10,43,12],[45,0,45,12],[46,0,46,2],[46,3,46,5],[46,6,46,7],[46,8,46,9],[46,10,46,12],[47,0,47,2],[47,3,47,5],[47,6,47,7],[47,8,47,9],[47,10,47,12],[48,0,48,2],[48,3,48,5],[48,6,48,7],[48,8,48,9],[48,10,48,12],[49,0,49,2],[49,3,49,5],[49,6,49,7],[49,8,49,9],[49,10,49,12],[50,0,50,2],[50,3,50,5],[50,6,50,7],[50,8,50,9],[50,10,50,12],[52,0,52,12],[53,0,53,2],[53,3,53,5],[53,6,53,7],[53,8,53,9],[53,10,53,12],[54,0,54,2],[54,3,54,5],[54,6,54,7],[54,8,54,9],[54,10,54,12],[55,0,55,2],[55,3,55,5],[55,6,55,7],[55,8,55,9],[55,10,55,12],[56,0,56,12]]}
["DEPARTMENT OF HOMELAND SECURITY"]
["Transportation Security Administration"]
["Mass Transit Baseline Assessment for Security Enhancements (MT-BASE)"]
[{"$nulls":6},"Date of Visit",null,null,"TSA Field Office",null,null,"Region #"]
[]
[{"$nulls":6},"FSD AOR Field Office (Optional):"]
[{"$nulls":6},"Assessment Started:"]
[{"$nulls":6},"Assessment Completed:"]
[{"$nulls":6},"Outbrief Conducted:"]
["TYPE OF VISIT",{"$nulls":5},"Agency"]
["Corporate Review"]
["Is This A Revisit?",null,"Date of Last Interview/Visit?",{"$nulls":3},"Street"]
[{"$nulls":6},"City",null,null,"State",null,"Zip Code"]
["Not Governed By 49 CFR Part 659?",{"$nulls":5},"Agency Website:"]
["Agency Size:",{"$nulls":5},"Company Chosen By:"]
["Agency Annual Ridership Amount:",{"$nulls":5},"HTUA Name:"]
["Grant Funding - Section 5311 of Title 49:",{"$nulls":7},"Most Recent Grant Received in:"]
[null,"Types of Service (Check all that apply)"]
[null,"Light Rail",null,null,"Inclined Plane",null,null,"Tourist / Scenic"]
[null,"Heavy Rail",null,null,"Funicular",null,null,"Commuter "]
[null,"Rapid Rail",null,null,"Trolley",null,null,"Intercity"]
[null,"Monorail",null,null,"Automated Guideway",null,null,"Transit Bus"]
["Security Personnel Interviewed"]
["Name",null,null,"Title",null,null,"Telephone",null,"Cell",null,"E-mail"]
[{"$nulls":3},"Security Coordinator"]
[{"$nulls":3},"Alternate Security Coordinator"]
[]
[]
[]
["Other Agency Points of Contact"]
["Name",null,null,"Title",null,null,"Telephone",null,"Cell",null,"E-mail"]
[]
[]
[]
[]
[]
[]
["TSI Inspector Information"]
["Name",null,null,"Title",null,null,"Airport Code",null,"Telephone",null,"E-mail"]
[{"$nulls":3},"Lead TSI"]
[{"$nulls":3},"Secondary TSI"]
[]
[]
[]
[]
["Supervisory Approval"]
["Name",null,null,"Title",null,null,"Airport Code",null,"Telephone",null,"E-mail"]
[{"$nulls":3},"STSI"]
[{"$nulls":3},"AFSD-I"]
[]
[]
[]
["Headquarters Approval"]
["Name",null,null,"Title",null,null,"Airport Code",null,"Telephone",null,"E-mail"]
[{"$nulls":6},"HQ"]
[{"$nulls":6},"HQ"]
["Paperwork Reduction Act Statement:  This is a voluntary collection of information.  TSA estimates that the total average burden per response associated with this collection is approximately 48 hours.  An agency may not conduct or sponsor, and a person is not required to respond to a collection of information unless it displays a valid OMB control number.  The control number assigned to this collection is OMB 1652-0062, which expires on 07/31/2015."]

{"sheet":"Checklist","index":3,"n_rows":244,"n_cols":10,"rows_kept":244,"merged":[[0,0,0,5],[1,0,1,5],[2,0,2,5],[3,0,3,5],[7,4,7,5]]}
["DEPARTMENT OF HOMELAND SECURITY"]
["Transportation Security Administration"]
["Mass Transit"]
["Baseline Assessment & Security Enhancement Review Checklist"]
[null,"Company Name:",null,null,"Lead Inspector:",{"$f":"'Profile Sheet'!A40","v":0}]
[null,{"$f":"'Profile Sheet'!G11","v":0},null,null,"Assessment Date:",{"$f":"'Profile Sheet'!G5","v":"00:00:00"}]
[]
[null,"Description",null,"Findings","Justification"]
["Section",null,"N/A","Score","Source","Score Rationale",null,null,"Line Sort","Re-sort"]
[null,"MANAGEMENT AND ACCOUNTABILITY",{"$nulls":6},1]
[{"v":1,"d":"1.000"},"Establish Written System Security Plans (SSPs) and Emergency Response Plans (ERPs)",{"$nulls":6},2]
[{"v":1.1,"d":"1.100"},"System Security Plan (SSP)",{"$nulls":6},3]
[1.101,"Does the transit agency have a System Security Plan (SSP)?",{"$nulls":6},4]
[1.102,"Does the SSP identify the goals and objectives for the security program?",{"$nulls":6},5]
[1.103,"Does a written policy statement exist that endorses and adopts the policies and procedures of the SSP that is approved and signed by top management, including the agency's chief executive? ",{"$nulls":6},6]
[1.104,"Is the SSP separate from the agency’s System Safety Program Plan (SSPP)?",{"$nulls":6},7]
["1.105 / T1","Do the Security and Emergency Response Plans address protection and response for critical underwater tunnels, underground stations/ tunnels and other critical systems, where applicable?",{"$nulls":6},8]
[1.106,"Does the SSP contain or reference other documents establishing procedures for the management of security incidents by the operations control center (or dispatch center)?",{"$nulls":6},9]
[1.107,"Does the SSP contain or reference other documents establishing plans, procedures, or protocols for responding to security events with external agencies (such as law enforcement, local EMA, fire departments, etc.)?",{"$nulls":6},10]
[1.108,"Does the SSP contain or reference other documents that establish protocols addressing specific threats from (i) Improvised Explosive Devices (IED) and (ii) Weapons of Mass Destruction (chemical, biological, radiological hazards)?",{"$nulls":6},11]
["1.109 / T3","Are visible, random security measures integrated into security plans to introduce unpredictability into security activities for deterrent effect?   ",{"$nulls":6},12]
[{"v":1.11,"d":"1.110"},"Does the SSP include provisions requiring that security be addressed in extensions, major projects, new vehicles and equipment procurement and other capital projects, and including integration with the transit agency’s safety certification process?",{"$nulls":6},13]
[1.111,"Does the SSP include or reference other documents adopting Crime Prevention Through Environmental Design (CPTED) principles as part of the agency's engineering practices?",{"$nulls":6},14]
[1.112,"Does the SSP require an annual review?",{"$nulls":6},15]
[1.113,"Does the transit agency produce periodic reports reviewing its progress in meeting its SSP goals and objectives?",{"$nulls":6},16]
[1.114,"Has an annual review of the SSP been performed and documented in the preceding 12 months?"]
[1.115,"Does the SSP outline a process for securing SSO agency review and approval of updates to the SSP?",{"$f":"IF('Profile Sheet'!$E$14=\"X\", \"X\",\"\")","v":""},null,{"$f":"IF('Profile Sheet'!$E$14=\"X\",\"N/A\",\" \")","v":" "},{"$f":"IF('Profile Sheet'!$E$14=\"X\",\"N/A\",\" \")","v":" "},null,null,18]
[1.116,"Has the transit agency submitted and received documentation from the SSO confirming its review and approval of the SSP currently in effect?",{"$f":"IF('Profile Sheet'!$E$14=\"X\", \"X\",\"\")","v":""},null,{"$f":"IF('Profile Sheet'!$E$14=\"X\",\"N/A\",\" \")","v":" "},{"$f":"IF('Profile Sheet'!$E$14=\"X\",\"N/A\",\" \")","v":" "},null,null,19]
[{"v":1.2,"d":"1.200"},"Emergency Response Plan (ERP)",{"$nulls":6},21]
[1.201,"Does the transit agency have an Emergency Response Plan (ERP)?",{"$nulls":6},22]
[1.202,"Does a written policy statement exist that endorses and adopts the policies and procedures of the ERP that is approved and signed by top management, including the agency's chief executive? ",{"$nulls":6},23]
[1.203,"Does the ERP require an annual review to determine if it needs to be updated?",{"$nulls":6},24]
[1.204,"Has an annual review of the ERP been performed and documented in the preceding 12 months?",{"$nulls":6},25]
[1.205,"Does the ERP include a process or review provision to ensure coordination with the transit agency’s SSPP and SSP?",{"$nulls":6},26]
[1.206,"Has the transit agency received documentation from the SSO confirming its review and approval of the ERP currently in effect?",null,null,{"$f":"IF('Profile Sheet'!$E$14=\"X\",\"N/A\",\" \")","v":" "},{"$f":"IF('Profile Sheet'!$E$14=\"X\",\"N/A\",\" \")","v":" "},null,null,27]
[1.207,"Does the ERP contain or reference other documents establishing plans, procedures, or protocols for responding to emergency events with external agencies (such as law enforcement, local EMA, fire departments, etc.)?",{"$nulls":6},28]
[1.208,"Does the ERP contain or reference other documents that establish procedures for the management of emergency events, including those to be employed by the operations control center (or dispatch center)?",{"$nulls":6},29]
[1.209,"Does the ERP contain or reference other documents to provide for Continuity of Operations (COOP) while responding to emergency events?",{"$nulls":6},30]
[{"v":1.21,"d":"1.210"},"Does the agency have a written Business Recovery Plan to guide restoration of facilities and services following an emergency event?"]
[1.211,"Does the agency have a written Business Continuity Plan and COOP to guide restoration of facilities and services following an emergency event?"]
[1.212,"Does the agency have a back-up operations control center capability?",{"$nulls":6},31]
[{"v":2,"d":"2.000"},"Define Roles and Responsibilities for Security and Emergency Management",{"$nulls":6},32]
[{"v":2.1,"d":"2.100"},"System Security Plan (SSP)",null,"a",{"$nulls":4},33]
[2.101,"Does the SSP establish and assign responsibility for implementation of the security program to a Senior Manager who is a \"direct report\" to the agency's Chief Executive Officer?",{"$nulls":6},34]
[2.102,"Has the agency established lines of delegated authority/succession of security responsibilities and, if so, has that information been distributed to agency managers?"]
[2.103,"Are roles and responsibilities for security and/or law enforcement personnel assigned by title and/or position established in the SSP or other documents?"]
[2.104,"Are security-related roles and responsibilities for non-security and/or law enforcement personnel  (i.e., operators, conductors, maintenance workers and station attendants) established in the SSP or other documents?",{"$nulls":6},35]
["2.105 / T2","Do senior staff and middle management conduct security meetings to review recommendations for changes to plans and processes?  ",{"$nulls":6},36]
[2.106,"Does a Security Review Committee (or other designated group) regularly review security incident reports, trends, and program audit findings?",{"$nulls":6},37]
[2.107,"Are informational briefings with appropriate personnel held whenever security protocols, threat levels, or protective measures  are updated or as security conditions warrant?",{"$nulls":6},38]
[2.108,"Have appropriate reference guides or other written instructions or procedures been distributed to transit employees to implement the requirements of the SSP?",{"$nulls":6},39]
[2.109,"Has the agency appointed a Primary and Alternate Security Coordinator to serve as its primary and immediate 24-hr contact for intelligence and security-related contact with TSA and are the names of those Coordinators on file with TSA OSPIE office correct?",{"$nulls":6},40]
[{"v":2.11,"d":"2.110"},"Does the agency maintain a record of security related incidents that are reported within the agency? ",{"$nulls":6},42]
[{"v":2.2,"d":"2.200"},"Emergency Response Plan (ERP):",null,"a",{"$nulls":4},43]
[2.201,"Does the ERP establish and assign responsibility for implementation of the security program to a Senior Manager who is a \"direct report\" to the agency's Chief Executive Officer?",{"$nulls":6},44]
[2.202,"Are emergency response roles and responsibilities for all departments identified in the ERP or other supporting documents?",{"$nulls":6},45]
["2.203 / T5","Are roles and responsibilities for front-line personnel (i.e. system law enforcement, system security officials, train or vehicle operators, conductors, station attendants, maintenance workers) described in the system's Emergency Response Plan (ERP)?",{"$nulls":6},46]
[2.204,"Has the ERP been distributed to appropriate departments in the organization?",{"$nulls":6},47]
[2.205,"Have appropriate reference guides or other written instructions or procedures been distributed to transit employees to implement the requirements of the ERP?",{"$nulls":6},48]
[2.206,"Are senior staff and middle management ERP coordination meetings held on a regular basis?",{"$nulls":6},49]
[2.207,"Are informational briefings with appropriate personnel held whenever emergency response protocols are substantially changed or updated?"]
[{"v":3,"d":"3.000"},"Ensure that operations and maintenance supervisors, forepersons and managers are held accountable for security issues under their control",{"$nulls":6},51]
[3.101,"Do managers and supervisors routinely provide information to front-line personnel regarding security and emergency response issues?",{"$nulls":6},52]
[3.102,"Are regular supervisor, manager, and/or foreperson security review and coordination briefings held?  If so, detail frequency and subjects covered in the justification.",{"$nulls":6},53]
[3.103,"Does the agency have a program for confirming that personnel have a working knowledge of security protocols?  If so, summarize program in the justification.",{"$nulls":6},54]
[3.104,"Are managers and/or supervisors required to debrief front-line employees regarding their involvement in or management of any security or emergency incidents?",{"$nulls":6},55]
[{"v":4,"d":"4.000"},"Coordinate Security and Emergency Management Plan(s) with local and regional agencies",{"$nulls":6},56]
[4.101,"Have Mutual Aid agreements been established between the transit agency and entities in the area that would be called upon to supplement the agency's resources in the event of an emergency event? ",{"$nulls":6},57]
[4.102,"Does the agency participate in a regional Emergency Management Working Group or similar regional coordinating body for emergency preparedness and response?",{"$nulls":6},58]
[4.103,"Have regional incident management protocols been shared with the agency and incorporated into the agency's ERP/SSP/SEPP?",{"$nulls":6},59]
[4.104,"Have agency resources been appropriately identified and provided to the regional EMA?",{"$nulls":6},60]
[4.105,"Does the agency have a designated point-of-contact or liaison with the local/regional Emergency Operations Center (EOC)?",{"$nulls":6},61]
[4.106,"Does the agency send a representative to the local/regional EOC, should it be activated?",{"$nulls":6},62]
[4.107,"Does the agency have information sharing capabilities with the regional/local EOC (i.e., contacts, procedures, resource inventories, etc.)?",{"$nulls":6},63]
[4.108,"Has the agency developed internal incident management protocols that comply with the National Response Plan and the National Incident Management System (NIMS)?",{"$nulls":6},64]
[4.109,"Have the agency's emergency response protocols been shared with the EMA and appropriate first responder agencies?",{"$nulls":6},65]
["4.110 / T5","Has the transit system tested its communications systems for interoperability with appropriate emergency response agencies? ",{"$nulls":6},66]
[4.111,"If the agency's communications systems are NOT inter-operable with appropriate emergency response agencies, have alternate communication protocols been established?  Describe the alternate communication protocols in the justification.",{"$nulls":6},67]
[null,"SECURITY AND EMERGENCY RESPONSE TRAINING",null,"a",{"$nulls":4},68]
[{"v":5,"d":"5.000"},"Establish and Maintain a Security and Emergency Training Program",{"$nulls":6},69]
["5.101 / T4","Is initial training provided to all new agency employees regarding security orientation/awareness?",{"$nulls":6},70]
["5.102 / T4","Is annual refresher training provided regarding security orientation/awareness to Senior Management staff, managers and supervisors?",{"$nulls":6},71]
["5.103 / T4","Is annual refresher training provided regarding security orientation/awareness to managers and supervisors? ",{"$nulls":6},72]
["5.104 / T4","Is annual refresher training provided regarding security orientation/awareness  to front-line employees? ",{"$nulls":6},73]
[5.105,"Is ongoing advanced security training focused on job function provided at least annually?",{"$nulls":6},74]
["5.106 / T4","Is initial training provided to all new transit employees regarding emergency response?",{"$nulls":6},75]
["5.107 / T4"," Is annual refresher training provided regarding emergency response to Senior Management staff, supervisors, and managers?",{"$nulls":6},76]
["5.108 / T4","Is annual refresher training provided regarding emergency response to Managers and Supervisors?"]
["5.109 / T4","Is annual refresher training provided regarding emergency response to front-line Employees?",{"$nulls":6},78]
["5.110 / T4","Have agency employees received general training on Incident Command System (ICS) procedures in accordance with National Incident Management System at least annually?",{"$nulls":6},79]
[5.111," Has ICS and NIMS training appropriate to the position been provided to Senior Management staff, supervisors, and managers at least annually?  ",{"$nulls":6},80]
[5.112,"Has ICS and NIMS training appropriate to the position been provided to managers and supervisors at least annually? ",{"$nulls":6},81]
[5.113,"Has ICS and NIMS training appropriate to the position been provided to front-line employees at least annually?",{"$nulls":6},82]
[5.114,"Has the agency developed a program and provided annual training on its own incident response protocols?",{"$nulls":6},83]
["5.115 / T4","Has training on the agency's incident response protocols appropriate to the position been provided to Senior Management staff, managers and supervisors at least annually?                                      ",{"$nulls":6},84]
["5.116 / T4","Has training on the agency's incident response protocols appropriate to the position been provided to managers and supervisors? ",{"$nulls":6},85]
["5.117 / T4"," Has training on the agency's incident response protocols appropriate to the position been provided to front-line employees at least annually?",{"$nulls":6},86]
["5.118 / T4","Has the transit system implemented an annual training program for personnel regarding response to terrorism, including (i) Improvised Explosive Devices and ii) Weapons of Mass Destruction (chemical, biological, radiological, nuclear)?  If so, summarize the relevant programs in the justification?",{"$nulls":6},87]
[5.119,"Has training focused on IEDs and WMDs appropriate to the position been provided to Senior Management staff, managers, and supervisors at least annually?                                                ",{"$nulls":6},88]
[{"v":5.12,"d":"5.120"},"Has training focused on IEDs and WMDs appropriate to the position been provided to manager and supervisors?",{"$nulls":6},89]
[5.121,"Has training focused on IEDs and WMDs appropriate to the position been provided to front-line employees at least annually? ",{"$nulls":6},90]
[5.122,"Do law enforcement/security department personnel at the agency receive specialized training in counter-terrorism annually? Summarize program in the justification.",{"$nulls":6},91]
[5.123,"Do law enforcement/security department personnel at the agency receive specialized training supporting their incident management and emergency response roles at least annually? Summarize program in the justification. ",{"$nulls":6},92]
[5.124," Does the agency have an established program to monitor employee training and to schedule employees for training?",{"$nulls":6},93]
[5.125,"Does the agency have a system that records and tracks personnel training for all security-related courses (including initial, annual, periodic and other)?",{"$nulls":6},94]
[5.126,"Does the transit agency have a system that records and tracks personnel training for emergency response courses (including initial, periodic and other)?",{"$nulls":6},95]
[5.127,"Does the agency have a program to regularly review and update security awareness and emergency response training materials?",{"$nulls":6},96]
["5.128 / T4","Are all appropriate personnel notified via briefings, email, voicemail, or signage of changes in threat condition, protective measures or the employee watch programs?"]
["5.129 / T1","Do the agency's security awareness and emergency response training programs cover response and recovery operations in critical facilities and infrastructure?  If so, summarize relevant provisions of program in the justification."]
["5.130 / T1","Has the agency provided training to regional first responders (law enforcement agencies, firefighters, and emergency medical response teams) to enable them to operate in critical facilities and infrastructure?",{"$nulls":6},97]
["5.131 / T3","Does training of transit system law enforcement and/or security personnel integrate the concept and employment of visible, random security measures? "]
["5.132 / T4","Has the agency implemented a program to train or orient first responders (law enforcement, firefighters, emergency medical teams) and other potential supporting assets (e.g., TSA regional personnel for VIPR exercises) on their system vehicle familiarization?",{"$nulls":6},97]
[null,"NATIONAL TERRORISM ADVISORY SYSTEM (NTAS)  ",{"$nulls":6},98]
[{"v":6,"d":"6.000"},"Establish plans and protocols to respond to the National Terrorism Advisory System (NTAS)",{"$nulls":6},99]
[6.101,"Does the SSP contain or reference other documents identifying incremental actions (imminent or elevated) to be implemented for a NTAS threat?",{"$nulls":6},100]
["6.102 / T2","Does the agency have actionable operational response protocols for the specific threat scenarios from NTAS?",{"$nulls":6},101]
[6.103,"Has the agency provided annual training and/or instruction focused on job function regarding the incremental activities to be performed by employees?",{"$nulls":6},102]
[null,"PUBLIC AWARENESS ",null,"a",{"$nulls":4},104]
[{"v":7,"d":"7.000"},"Implement and reinforce a Public Security and Emergency Awareness program       ",{"$nulls":6},105]
[7.101,"Has the transit agency developed and implemented a public security and emergency awareness program?",{"$nulls":6},106]
["7.102 / T6","Does the agency provide active public outreach for security awareness and emergency preparedness (e.g., Transit Watch, “If You See Something, Say Something”, message boards, brochures, channel cards, posters, fliers)?",{"$nulls":6},107]
["7.103 / T6","Is the above consistent with agency's overall announcement program?"]
["7.104 / T6","Are general security awareness and emergency preparedness messages included in public announcement messages at stations and on board vehicles?",{"$nulls":6},108]
["7.105 / T6","Are passengers urged to report unattended property, suspicious behavior, and security concerns to uniformed crew members, law enforcement or security personnel, and/or a contact telephone number?  If so, summarize the type of materials used and content in the justification.",{"$nulls":6},109]
["7.106 / T6","Does the agency have an appropriate mechanism in place for passengers to communicate an (e.g., 1-800 number, smart phone applications, social media, etc.)  that can be called or used to report security concerns?  If so, is this information indicated in public awareness materials and messages?",{"$nulls":6},110]
[7.107,"Does the agency issue public service announcements or press releases to social media (e.g. Twitter/ Facebook/etc., QRC codes, and/or apps for smart phones) regarding security and emergency protocols?",{"$nulls":6},111]
["7.108 / T6","Does the agency issue public service announcements or press releases to local media (e.g. newspaper, radio and/or television) regarding security or emergency protocols?",{"$nulls":6},112]
[7.109,"Does the transit agency conduct a volunteer training program for non-employees to aid with system evacuations and emergency response?",{"$nulls":6},113]
[{"v":7.11,"d":"7.110"},"Does the transit agency conduct an outreach program to enlist members of the public as security awareness volunteers, similar to Neighborhood Watch programs?",{"$nulls":6},114]
["7.111 / T1","Do public awareness materials and/or messages inform passengers on the means to evacuate safely from transit vehicles and underwater/underground facilities?"]
[7.112,"Does the agency track and monitor customer complaints reported by passengers?"]
[null," RISK MANAGEMENT",null,"a",{"$nulls":4},129]
[{"v":8,"d":"8.000"},"Establish and use a risk management process ",null,"a",{"$nulls":4},130]
["8.101 / T2","Does the agency have a risk assessment process approved by its management, for managing threats and vulnerabilities?  If so, summarize the process in the justification.",{"$nulls":6},131]
[8.102,"Has the agency identified facilities and systems it considers to be its critical assets?",{"$nulls":6},132]
["8.103 / T2","Has the agency had an internal or external vulnerability assessment on its critical assets within the past 3 years?  Specify the dates of the most recent assessments and the entity(ies) that conducted the assessment(s).  ",{"$nulls":6},133]
["8.104 / T1","Has the agency had an internal or external Risk Assessment, analyzing threat, vulnerability, & consequence, for critical assets and infrastructure, and systems within the past 3 years?  Have management and staff responsible for the risk assessment process been properly trained to manage the process?",{"$nulls":6},134]
["8.105 / T2","Has the system implemented procedures to limit and monitor authorized access to underground and underwater tunnels?  If so, summarize procedures in the justification.",{"$nulls":6},135]
[8.106,"Are security investments prioritized using information developed in the risk assessment process?",{"$nulls":6},136]
["8.107 / T1","Upon request, has TSA been provided access to the agency's vulnerability assessments, Security Plan and related documents?"]
[null,"ESTABLISH A RISK ASSESSMENT AND INFORMATION SHARING PROCESS",{"$nulls":6},138]
[{"v":9,"d":"9.000"},"Establish and use an information sharing process for threat and intelligence information."]
[9.101,"Does the agency have a formalized process and procedures for reporting and exchange of threat and intelligence information with Federal, State, and/or local law enforcement agencies? ",{"$nulls":6},139]
["9.102 / T2","Does the system report threat and intelligence information directly to FBI Joint Terrorism Task Force (JTTF) or other regional anti-terrorism task force?",{"$nulls":6},140]
["9.103 / T2","Does the system have a protocol to report threats or significant security concerns to appropriate law enforcement authorities, and TSA's Transportation Security Operations Center (TSOC)?",{"$nulls":6},141]
[9.104,"Does the agency routinely receive threat and intelligence information directly from any Federal government agency, State Homeland Security Office, Regional or State Intelligence Fusion Center,  PT-ISAC, or other transit agencies?",{"$nulls":6},142]
[9.105,"Does the agency report their NTA security data to FTA as required by 49 CFR 659?",{"$f":"IF('Profile Sheet'!$E$14=\"X\", \"X\",\"\")","v":""},null,{"$f":"IF('Profile Sheet'!$E$14=\"X\",\"N/A\",\" \")","v":" "},{"$f":"IF('Profile Sheet'!$E$14=\"X\",\"N/A\",\" \")","v":" "},null,null,143]
[null,"DRILLS AND EXERCISES",{"$nulls":6},116]
[{"v":10,"d":"10.000"},"Conduct Tabletop and Functional Drills",null,"a",{"$nulls":4},117]
[10.101,"Does the agency’s System Safety Program Plan (SSPP) contain or reference a document describing the process used by the agency to develop an approved, coordinated schedule for all emergency management program activities, including local/regional emergency planning and participation in exercises and drills?",{"$nulls":6},118]
[10.102,"Does the agency’s SSPP or SSP describe or reference how the agency performs its emergency planning responsibilities and requirements regarding emergency drills and exercises?",{"$nulls":6},119]
["10.103 / T5","Does the agency evaluate its emergency preparedness by using annual field exercises, tabletop exercises, and/or drills?  If so, please summarize the exercise events held in the past year.",{"$nulls":6},120]
[10.104,"Does the agency's SSPP or a related document include a requirement for annual field exercises, tabletops and drills?",{"$nulls":6},121]
[10.105,"Does the agency’s SSPP or SSP describe or reference how the agency documents the results of its emergency preparedness evaluations (i.e., briefings, after action reports and implementation of findings)?",{"$nulls":6},122]
[10.106,"Does the agency’s SSPP or a related document describe or reference its program for providing employee training on emergency response protocols and procedures?",{"$nulls":6},123]
[10.107,"Does the agency participate as an active player in full-scale, regional exercises held at least annually?",{"$nulls":6},124]
["10.108 / T5","In the last year, has the agency conducted and/or participated in  a drill, tabletop exercise, and/or field exercise including scenarios involving (i) IED's and (ii) WMD (chemical, biological, radiological, nuclear) with other transit agencies and first responders (e.g., NTAS scenarios)? ",{"$nulls":6},125]
["10.109 / T5","In the last year, has the agency reviewed results and prepared after-action reports to assess performance and develop lessons learned for all drills, tabletop, and/or field exercises?",{"$nulls":6},126]
["10.110 / T5","In the last 12 months, has the agency updated plans, protocols and processes to incorporate after-action report recommendations/findings and corrective actions?  If so, summarize the actions taken in the justification. ",{"$nulls":6},127]
[10.111,"Has the agency established metrics to assess its performance during emergency exercises and to measure improvements?"]
["10.112 / T1","Does the system conduct drills and exercises of its security and emergency response plans to test capabilities of i.) employees and ii.) first responders to operate effectively in underwater/underground infrastructure and other critical systems?"]
["10.113 / T5","Does the transit system integrate local and regional first responders (law enforcement, firefighters, emergency medical teams) in drills, tabletop exercises, and/or field exercises?  If so, summarize each joint event and state when it took place.",{"$nulls":6},128]
[{"v":11,"d":"11.000"},"Developing a Comprehensive Cyber Security Strategy",null,"a",{"$nulls":4},145]
[11.101,"Has the agency conducted a risk assessment to identify operational control and communication/business enterprise IT assets and potential vulnerabilities?",{"$nulls":6},146]
[11.102,"Has the agency implemented protocols to ensure that all IT facilities (e.g., data centers, server rooms, etc.) and equipment are properly secured to guard against internal or external threats or attacks?",{"$nulls":6},147]
[11.103,"Has a written strategy been developed and integrated into the overall security program to mitigate the cyber risk identified?",{"$nulls":6},148]
[11.104,"Does the agency have a designated representative to secure the internal network through appropriate access controls for employees, a strong authentication (i.e., password) policy, encrypting sensitive data, and employing network security infrastructure (example: firewalls, intrusion detection systems, IT security audits, antivirus, etc.)?",{"$nulls":6},149]
[11.105,"Does the agency ensure that recurring cyber security training reinforces security roles, responsibilities, and duties of employees at all levels to protect against and recognize cyber threats?",{"$nulls":6},150]
[11.106,"Has the agency established a cyber-incident response and reporting protocol?",{"$nulls":6},151]
[11.107,"Is the agency aware of and using available resources (e.g., standards, PT-ISAC, US CERT, National Cyber Security Communication and Integration Center, etc.)?",{"$nulls":6},152]
[null,"FACILITY SECURITY AND ACCESS CONTROLS",null,"a",{"$nulls":4},154]
[{"v":12,"d":"12.000"},"Control Access to Security Critical Facilities with ID badges for all visitors, employees and contractors",{"$nulls":6},155]
[12.101,"Have assets and facilities requiring restricted access been identified? ",{"$nulls":6},156]
[12.102,"Are ID badges or other measures employed to restrict access to facilities not open to the public?",{"$nulls":6},157]
["12.103 / T2","Has the transit agency developed and implemented procedures to monitor, update and document access control (e.g. card key, ID badges, keys, safe combinations, etc.)?",{"$nulls":6},158]
[12.104,"Does the agency have procedures to issue ID badges for visitors and contractors?",{"$nulls":6},159]
[12.105,"Does the agency require escorts for visitors accessing non-public areas?",{"$nulls":6},160]
[12.106,"Is CCTV equipment installed in transit agency facilities?",{"$nulls":6},161]
[12.107,"Is CCTV equipment protecting critical assets interfaced with an access control system?",{"$nulls":6},162]
[12.108,"Is CCTV equipment installed on transit vehicles?",{"$nulls":6},163]
[12.109,"Are Crime Prevention through Environmental Design (CPTED) and technology (e.g., CCTV, access control, intrusion detection, bollards, etc.) incorporated into design criteria for all new and/or existing capital projects?",{"$nulls":6},164]
[{"v":12.11,"d":"12.110"},"Based on the risk assessment, does the agency use fencing, barriers, and/or intrusion detection to protect against unauthorized entry into stations, facilities, and other identified critical assets?",{"$nulls":6},165]
["12.111 / T2","Has the system implemented protective measures to secure high risk/high consequence assets and systems identified in risk assessments?  Examples of protective measures include but are not limited to CCTV, intrusion detection systems, smart camera technology, fencing, enhanced lighting, access control, LE patrols, K-9s, protection of ventilation systems.    If protective measures for this infrastructure are employed, summarize type and location in in the justification.",{"$nulls":6},166]
[12.112,"Does the transit agency monitor a network of security, fire, duress, intrusion, utility and internal 911 alarm systems?",{"$nulls":6},167]
[12.113,"Are emergency call boxes provided for passengers?",{"$nulls":6},168]
[12.114,"Do transit agency personnel administer an automated employee access control system and perform corrective analysis of security breaches?",{"$nulls":6},169]
[12.115,"Does the agency have policies and procedures for screening of mail and/or outside deliveries?",{"$nulls":6},170]
[12.116,"Have locks, bullet resistant materials and anti-fragmentation materials been installed/used at critical locations?",{"$nulls":6},171]
[12.117,"Does the agency use National Fire Protection Association (NFPA) Standard 130 or equivalent to evaluate fire/life safety in station design or modification (including fire detection systems, firewalls and flame-resistant materials, back-up powered emergency lighting, defaults in turnstile and other systems supporting emergency exists, and pre-recorded public announcements)?",{"$nulls":6},172]
[12.118,"Is directional signage with adequate lighting provided in a consistent manner in all stations, both to provide orientation and to support emergency evacuation?",{"$nulls":6},173]
[12.119,"Are gates and locks used on all facility doors to prevent unauthorized access? ",{"$nulls":6},174]
[{"v":12.12,"d":"12.120"},"Are keys controlled through an established program managed by the security/police function? ",{"$nulls":6},175]
[12.121,"Are gates and locks also used to close down system facilities after operating hours?",{"$nulls":6},176]
[12.122,"Do transit vehicles have radios, silent alarms, and/or passenger communication systems?",{"$nulls":6},177]
[12.123,"Does the transit agency use graffiti-resistant/etch-resistant materials for walls, ceilings, and windows?",{"$nulls":6},178]
[12.124,"Are Uninterruptible Power Supply (UPS) or redundant power sources provided for safety and security of critical equipment, such as but not limited to: exit and platform lighting; parking lot lighting; ancillary space and shop lighting; intrusion detection (alarmed rooms and spaces, fare collection equipment, etc.); fire detection, alarm and suppression systems; public address (shop and public areas); call-for-aid telephones; CCTV; emergency trip stations; vital train control functions; etc.?",{"$nulls":6},179]
[12.125,"At passenger stations at which a vulnerability assessment has identified a significant risk, and to the extent practicable, has the owner/operator removed trash receptacles and other non-essential receptacles or containers  (with the exception of bomb resistant receptacles or clear plastic containers) from the platform areas of passenger terminals and stations?"]
[12.126,"Does the agency employ specific protective measures for all critical infrastructure  (e.g., tunnels, bridges, stations, control centers, etc) identified through the risk assessment particularly at access points and ventilation infrastructure in place and maintained in optimal condition? Examples of protective measures include, but are not limited to, CCTV, intrusion detection systems, smart camera technology, fencing, lighting, access control, law enforcement patrols, canine patrols, physical protection for ventilation systems.  If protective measures for this infrastructure are employed, summarize type and location in the justification."]
["12.127 / T1","Does the agency have or utilize explosive detection canine teams, either maintained by the system or made available from other law enforcement agencies?  If so, has the system implemented procedures for reporting of and response to positive reactions by the canine?"]
[{"v":13,"d":"13.000"},"Conduct Physical Security Inspections",{"$nulls":6},182]
["13.101 / T1","Does the agency conduct frequent inspections of key facilities, stations, terminals, trains and vehicles, or other critical assets for persons, materials, and items that do not belong?",{"$nulls":6},183]
[13.102,"Has the transit agency established procedures for inspecting/sweeping vehicles and stations to identify and manage suspicious items, based on HOT characteristics (hidden, obviously suspicious, not typical) or equivalent system?",{"$nulls":6},184]
[13.103,"Has the transit agency developed a form or quick reference guide for operations and personnel to conduct pre-trip, post-trip, and within-trip inspections?",{"$nulls":6},185]
[13.104,"Has the transit agency developed a form or quick reference guide for station attendants and others regarding station and facility inspections?",{"$nulls":6},186]
["13.105 / T2","Does the system document the results of inspections and implement any changes to policies and procedures or implement corrective actions, based on the findings?"]
["13.106 / T2","Does the agency conduct frequent inspections of access points, ventilation systems, and the interior of underground/underwater assets and systems for indications of suspicious activity?"]
[13.107,"Does the system integrate randomness and unpredictability into its security activities to enhance deterrent effect?",{"$nulls":6},187]
[13.108,"Is there a process in place, with necessary training provided to personnel, to ensure that in service vehicles are inspected at regular periodic intervals for suspicious or unattended items? Specify type and frequency of inspections."]
[13.109,"Is there a process in place, with necessary training provided to personnel, to ensure that all critical infrastructure are inspected at regular periodic intervals for suspicious or unattended items? Specify type and frequency of inspections."]
[null,"BACKGROUND INVESTIGATIONS",null,"a",{"$nulls":4},188]
[{"v":14,"d":"14.000"},"Conduct Background Investigations of Employees and Contractors",null,"a",{"$nulls":4},189]
["14.101 / T2","Does the agency conduct background investigations (i.e., criminal history and motor vehicle records) on all new front-line operations and maintenance employees, and employees with access to sensitive security information, facilities and systems?",{"$nulls":6},190]
["14.102 / T2","To the extent allowed by agency policy or law, does the agency conduct background investigations on contractors, including vendors, with access to critical facilities, sensitive security systems, and sensitive security information?  ",{"$nulls":6},191]
[14.103,"Has counsel for the agency reviewed the process for conducting employee background investigations to confirm that procedures are consistent with applicable statutes and regulations?",{"$nulls":6},192]
[14.104,"Is the background investigation process documented?",{"$nulls":6},193]
[14.105,"Is the criteria for background investigations based on employee type (senior management staff, law enforcement officers, managers/supervisors, operators, maintenance, safety/security sensitive, contractor, etc.) and/or responsibility and access documented?  ",{"$nulls":6},194]
[null,"DOCUMENT CONTROL",{"$nulls":6},195]
[{"v":15,"d":"15.000"},"Control Access to documents of security critical systems and facilities",{"$nulls":6},196]
["15.101 / T2","Does the agency keep documentation of its security critical systems, such as tunnels, bridges, HVAC systems and intrusion alarm detection systems (i.e. plans, schematics, etc.) protected from unauthorized access?",{"$nulls":6},197]
[15.102,"Has the agency designated a department/person responsible for administering the access control policy with respect to agency documents?",{"$nulls":6},198]
[15.103,"Does the security review committee (or other designated group) review document control practices, assess compliance applicable procedures, and identify discrepancies and necessary corrective action?",{"$nulls":6},199]
[{"v":16,"d":"16.000"},"Process for handling and access to Sensitive Security Information (SSI)",{"$nulls":6},200]
[16.101,"Does the agency have a documented policy for identifying and controlling the distribution of and access to documents  it considers to be Sensitive Security Information (SSI) pursuant to 49 CFR Part 15 or 1520?",{"$nulls":6},201]
[16.102,"Does the agency have a documented policy for proper handling, control, and storage of documents labeled as or otherwise determined to be Sensitive Security Information (SSI) pursuant to 49 CFR Part 15 or 1520?",{"$nulls":6},202]
[16.103,"Are employees who may be provided SSI materials per 49 CFR Part 15 or 1520) familiar with the documented policy for the proper handling of such materials? ",{"$nulls":6},203]
[16.104,"Have employees provided access to SSI material per 49 CFR Part 15 or 1520 received training on proper labeling, handling, dissemination, and storage (such as through the TSA on-line SSI training program)?",{"$nulls":6},204]
[null,"SECURITY PROGRAM AUDITS",null,"a",{"$nulls":4},205]
[{"v":17,"d":"17.000"},"Audit Program",null,"a",{"$nulls":4},206]
[17.101,"Has the agency established a schedule for conducting  its internal security audit process?",{"$nulls":6},207]
[17.102,"Does the SSP contain a description of the process used by the agency to audit its implementation of the SSP over the course of the agency's published schedule?",{"$nulls":6},208]
[17.103,"Has the transit agency established checklists and procedures to govern the conduct of its internal security audit process?",{"$nulls":6},209]
[17.104,"Is the transit agency complying with its internal security audit schedule? ",{"$nulls":6},210]
[17.105,"Is each internal security audit documented in a written report, which includes evaluation of the adequacy and effectiveness of the SSP element and applicable implementing procedures audited, needed corrected actions, needed recommendations, an implementation schedule for corrective actions and status reporting?",{"$nulls":6},211]
[17.106,"In the last 12 months, has the Security Review Committee (or other designated group) addressed the findings and recommendations from the internal security audits, and updated plans, protocols and processes as necessary?",{"$nulls":6},212]
[17.107,"Does the transit agency’s internal security audit process ensure that auditors are independent from those responsible for the activity being audited?"]
[17.108,"Has the agency made its internal security audit schedule available to the SSO agency?",{"$f":"IF('Profile Sheet'!$E$14=\"X\", \"X\",\"\")","v":""},null,{"$f":"IF('Profile Sheet'!$E$14=\"X\",\"N/A\",\" \")","v":" "},{"$f":"IF('Profile Sheet'!$E$14=\"X\",\"N/A\",\" \")","v":" "}]
[17.109,"Has the agency made checklists and procedures used in its internal security audits available to the SSO agency?",{"$f":"IF('Profile Sheet'!$E$14=\"X\", \"X\",\"\")","v":""},null,{"$f":"IF('Profile Sheet'!$E$14=\"X\",\"N/A\",\" \")","v":" "},{"$f":"IF('Profile Sheet'!$E$14=\"X\",\"N/A\",\" \")","v":" "}]
[{"v":17.11,"d":"17.110"},"Has the agency notified the SSO agency 30 days prior to the conduct of an internal security audit?",{"$f":"IF('Profile Sheet'!$E$14=\"X\", \"X\",\"\")","v":""},null,{"$f":"IF('Profile Sheet'!$E$14=\"X\",\"N/A\",\" \")","v":" "},{"$f":"IF('Profile Sheet'!$E$14=\"X\",\"N/A\",\" \")","v":" "}]
[17.111,"Has a report documenting internal security audit process and the status of findings and corrective actions been made available to the SSO agency within the previous 12 months?",{"$f":"IF('Profile Sheet'!$E$14=\"X\", \"X\",\"\")","v":""},null,{"$f":"IF('Profile Sheet'!$E$14=\"X\",\"N/A\",\" \")","v":" "},{"$f":"IF('Profile Sheet'!$E$14=\"X\",\"N/A\",\" \")","v":" "}]
[17.112,"Has the agency's chief executive certified to the SSO agency that the agency is in compliance with its SSP?",{"$f":"IF('Profile Sheet'!$E$14=\"X\", \"X\",\"\")","v":""},null,{"$f":"IF('Profile Sheet'!$E$14=\"X\",\"N/A\",\" \")","v":" "},{"$f":"IF('Profile Sheet'!$E$14=\"X\",\"N/A\",\" \")","v":" "}]
[17.113,"Was that certification included with the most recent annual report submitted to the SSO agency?",{"$f":"IF('Profile Sheet'!$E$14=\"X\", \"X\",\"\")","v":""},null,{"$f":"IF('Profile Sheet'!$E$14=\"X\",\"N/A\",\" \")","v":" "},{"$f":"IF('Profile Sheet'!$E$14=\"X\",\"N/A\",\" \")","v":" "}]
[17.114,"If the agency's chief executive was not able to certify to the SSO agency that the agency is in compliance with its SSP, was a corrective action plan developed and made available to the SSO?",{"$f":"IF('Profile Sheet'!$E$14=\"X\", \"X\",\"\")","v":""},null,{"$f":"IF('Profile Sheet'!$E$14=\"X\",\"N/A\",\" \")","v":" "},{"$f":"IF('Profile Sheet'!$E$14=\"X\",\"N/A\",\" \")","v":" "},null,null,213]
[]
[null,"Number of items requiring Options for Consideration",null,{"$f":"(COUNTIF(D10:D242, 0)+(COUNTIF(D10:D242, 1)+(COUNTIF(D10:D242, 2)+(COUNTIF(D10:D242, 3)))))","v":0}]

{"sheet":"Additional Information","index":4,"n_rows":44,"n_cols":5,"rows_kept":44,"merged":[[0,0,0,1],[0,2,0,3],[0,4,0,6],[1,0,1,1],[1,2,1,3],[1,4,1,6],[2,0,2,6],[3,0,3,6],[4,0,4,6],[5,0,5,6],[6,0,6,6],[7,0,7,6],[8,0,12,6],[13,0,13,6],[14,0,18,6],[19,0,19,6],[20,0,20,6],[21,0,24,6],[25,0,25,6],[26,0,26,6],[27,0,27,6],[28,0,28,6],[29,0,29,6],[30,0,30,6],[31,0,31,6],[32,0,32,6],[33,0,33,6],[34,0,34,6],[35,0,35,6],[36,0,36,6],[37,0,37,6],[38,0,38,6],[39,0,39,6],[40,0,40,6],[41,0,41,6],[42,0,42,6],[43,0,43,6]]}
["Date of Visit",null,"TSA Field Office",null,"Lead TSI Inspector"]
[{"$f":"'Profile Sheet'!G5","v":"00:00:00"},null,{"$f":"'Profile Sheet'!J5","v":0},null,{"$f":"'Profile Sheet'!A40","v":0}]
["Agency Name"]
[{"$f":"'Profile Sheet'!G11","v":0}]
[]
["Additional Information"]
["General Description of the Entity:"]
["INSPECTOR SHALL PROVIDE A GENERAL NARRATIVE OVERVIEW OF THE ENTITY’S SCOPE OF OPERATIONS, FACILITIES, ETC.:"]
[]
[]
[]
[]
[]
["Other information obtained during BASE assessment:"]
[]
[]
[]
[]
[]
["Smart Practice Information:"]
["Did you observe anything significant or \"cutting edge\" in the area of corporate/facility security?"]
[]
[]
[]
[]
["1.  List the infrastructure and assets identified as critical by the agency:"]
["a."]
["b."]
["c."]
["d."]
["e."]
["f."]
["g."]
["2.  Where do you, as an industry, feel vulnerable?"]
["a."]
["b."]
["3.  What concerns do you have?"]
["a."]
["b."]
[]
["4.  In what Federal programs or security initiatives does your company participate?"]
["a."]
["b."]
["c."]

{"sheet":"Scoring Summary","index":5,"n_rows":42,"n_cols":5,"rows_kept":42,"hidden":true,"merged":[[0,0,0,5],[1,0,1,5],[2,0,2,5],[3,0,3,1],[3,2,3,3],[3,4,3,5],[4,0,4,1],[4,2,4,3],[4,4,4,5]]}
["DO NOT MODIFY OR ENTER ANY DATA ON THIS SHEET!"]
["Department of Homeland Security - Transportation Security Administration"]
["Mass Transit Agency Overview"]
["Agency Name:",null,"Lead Inspector:",null,{"$f":"'Profile Sheet'!A40","v":0}]
[{"$f":"'Profile Sheet'!G11","v":0},null,"Assessment Date:",null,{"$f":"'Profile Sheet'!G5","v":"00:00:00"}]
[]
["TSF #","SECURITY SECTIONS","Performance"]
[1,"Protection of high risk/high consequence underwater/underground assets and systems and other critical systems",{"$f":"Technical!$N$5","v":{"v":0,"d":"0%"}}]
[2,"Protection of other high risk/high consequence assets that have been identified through system-wide risk assessments",{"$f":"Technical!$P$5","v":{"v":0,"d":"0%"}}]
[3,"Use of visible, unpredictable deterrence",{"$f":"Technical!$R$5","v":{"v":0,"d":"0%"}}]
[4,"Targeted counter-terrorism training for key front-line staff",{"$f":"Technical!$T$5","v":{"v":0,"d":"0%"}}]
[5,"Emergency preparedness drills and exercises",{"$f":"Technical!$V$5","v":{"v":0,"d":"0%"}}]
[6,"Public awareness and preparedness campaigns",{"$f":"Technical!$X$5","v":{"v":0,"d":"0%"}}]
[]
[null,"Overall TSF Average Score",{"$f":"AVERAGE(C8:C13)","v":{"v":0,"d":"0%"}}]
[]
["SAI #","SECURITY ACTION ITEM (SAI) DESCRIPTION","Performance",null,"Baseline Performance"]
[1,"Establish written Security Programs and Emergency Management Plans",{"$f":"Technical!$J$6","v":{"v":0,"d":"0%"}},null,{"$f":"Technical!$AC$6","v":{"v":0,"d":"0%"}}]
[2,"Define roles and responsibilities for security and emergency management",{"$f":"Technical!$J$37","v":{"v":0,"d":"0%"}},null,{"$f":"Technical!$AC$37","v":{"v":0,"d":"0%"}}]
[3,"Ensure that operations and maintenance supervisors, forepersons, and managers are held accountable for security issues under their control",{"$f":"Technical!$J$57","v":{"v":0,"d":"0%"}},null,{"$f":"Technical!$AC$57","v":{"v":0,"d":"0%"}}]
[4,"Coordinate Security and Emergency Management Plan(s) with local and regional agencies",{"$f":"Technical!$J$62","v":{"v":0,"d":"0%"}},null,{"$f":"Technical!$AC$62","v":{"v":0,"d":"0%"}}]
[5,"Establish and maintain a Security and Emergency Training Program",{"$f":"Technical!$J$75","v":{"v":0,"d":"0%"}},null,{"$f":"Technical!$AC$75","v":{"v":0,"d":"0%"}}]
[6,"Establish plans and protocols to respond to the National Terrorism Advisory System (NTAS) alert system",{"$f":"Technical!$J$109","v":{"v":0,"d":"0%"}},null,{"$f":"Technical!$AC$109","v":{"v":0,"d":"0%"}}]
[7,"Implement and reinforce a Public Security and Emergency Awareness program",{"$f":"Technical!$J$114","v":{"v":0,"d":"0%"}},null,{"$f":"Technical!$AC$114","v":{"v":0,"d":"0%"}}]
[8,"Establish and use a risk management process",{"$f":"Technical!$J$128","v":{"v":0,"d":"0%"}},null,{"$f":"Technical!$AC$128","v":{"v":0,"d":"0%"}}]
[9,"Establish and use an information sharing process for threat and intelligence information",{"$f":"Technical!$J$137","v":{"v":0,"d":"0%"}},null,{"$f":"Technical!$AC$137","v":{"v":0,"d":"0%"}}]
[10,"Conduct Tabletop and Functional Drills",{"$f":"Technical!$J$144","v":{"v":0,"d":"0%"}},null,{"$f":"Technical!$AC$144","v":{"v":0,"d":"0%"}}]
["*11","Developing a Comprehensive Cyber Security Strategy",{"$f":"Technical!$J$158","v":{"v":0,"d":"0%"}},null,{"$f":"Technical!$AC$158","v":{"v":0,"d":"0%"}}]
[12,"Control access to security critical facilities with ID badges for all visitors, employees and contractors",{"$f":"Technical!$J$167","v":{"v":0,"d":"0%"}},null,{"$f":"Technical!$AC$167","v":{"v":0,"d":"0%"}}]
[13,"Conduct physical security inspections",{"$f":"Technical!$J$195","v":{"v":0,"d":"0%"}},null,{"$f":"Technical!$AC$195","v":{"v":0,"d":"0%"}}]
[14,"Conduct background investigations of employees and contractors",{"$f":"Technical!$J$206","v":{"v":0,"d":"0%"}},null,{"$f":"Technical!$AC$206","v":{"v":0,"d":"0%"}}]
[15,"Control access to documents of security-critical systems and facilities",{"$f":"Technical!$J$213","v":{"v":0,"d":"0%"}},null,{"$f":"Technical!$AC$213","v":{"v":0,"d":"0%"}}]
[16,"Ensure existence of a process for handling and access to Sensitive Security Information (SSI)",{"$f":"Technical!$J$217","v":{"v":0,"d":"0%"}},null,{"$f":"Technical!$AC$217","v":{"v":0,"d":"0%"}}]
[17,"Conduct Security Program audits",{"$f":"Technical!$J$223","v":{"v":0,"d":"0%"}},null,{"$f":"Technical!$AC$223","v":{"v":0,"d":"0%"}}]
[]
[null,"Overall Performance Score:",{"$f":"AVERAGE(C18:C27,C29:C34)","v":{"v":0,"d":"0%"}},null,{"$f":"AVERAGE(E18:E27,E29:E34)","v":{"v":0,"d":"0%"}}]
[]
["Color Key:"]
[null,"Requirements have been met."]
[null,"Requirements are partially met and/or are in the process of being completed."]
[null,"Does not meet requirements as described in reference materials."]
["*","SAI #11 was not factored into the overall performance scores."]

{"sheet":"Charting","index":6,"n_rows":48,"n_cols":22,"rows_kept":48,"hidden":true}
[]
[null,"SAI 1","SAI 2","SAI 3","SAI 4","SAI 5","SAI 6","SAI 7","SAI 8","SAI 9","SAI 10","SAI 11","SAI 12","SAI 13","SAI 14","SAI 15","SAI 16","SAI 17","Average"]
["Current Agency Scores",{"$f":"'Scoring Summary'!$C$18","v":{"v":0,"d":"0%"}},{"$f":"'Scoring Summary'!$C$19","v":{"v":0,"d":"0%"}},{"$f":"'Scoring Summary'!$C$20","v":{"v":0,"d":"0%"}},{"$f":"'Scoring Summary'!$C$21","v":{"v":0,"d":"0%"}},{"$f":"'Scoring Summary'!$C$22","v":{"v":0,"d":"0%"}},{"$f":"'Scoring Summary'!$C$23","v":{"v":0,"d":"0%"}},{"$f":"'Scoring Summary'!$C$24","v":{"v":0,"d":"0%"}},{"$f":"'Scoring Summary'!$C$25","v":{"v":0,"d":"0%"}},{"$f":"'Scoring Summary'!$C$26","v":{"v":0,"d":"0%"}},{"$f":"'Scoring Summary'!$C$27","v":{"v":0,"d":"0%"}},{"$f":"'Scoring Summary'!$C$28","v":{"v":0,"d":"0%"}},{"$f":"'Scoring Summary'!$C$29","v":{"v":0,"d":"0%"}},{"$f":"'Scoring Summary'!$C$30","v":{"v":0,"d":"0%"}},{"$f":"'Scoring Summary'!$C$31","v":{"v":0,"d":"0%"}},{"$f":"'Scoring Summary'!$C$32","v":{"v":0,"d":"0%"}},{"$f":"'Scoring Summary'!$C$33","v":{"v":0,"d":"0%"}},{"$f":"'Scoring Summary'!$C$34","v":{"v":0,"d":"0%"}},{"$f":"'Scoring Summary'!$C$36","v":{"v":0,"d":"0%"}}]
["BASE Participant Average Scores",{"$f":"IF('Profile Sheet'!$D$15=\"Over 60K Daily Ridership\",'Dropdown Menus'!R2,IF('Profile Sheet'!$D$15=\"Under 60K Daily Ridership\",'Dropdown Menus'!R3,0))","v":{"v":0,"d":"0%"}},{"$f":"IF('Profile Sheet'!$D$15=\"Over 60K Daily Ridership\",'Dropdown Menus'!S2,IF('Profile Sheet'!$D$15=\"Under 60K Daily Ridership\",'Dropdown Menus'!S3,0))","v":{"v":0,"d":"0%"}},{"$f":"IF('Profile Sheet'!$D$15=\"Over 60K Daily Ridership\",'Dropdown Menus'!T2,IF('Profile Sheet'!$D$15=\"Under 60K Daily Ridership\",'Dropdown Menus'!T3,0))","v":{"v":0,"d":"0%"}},{"$f":"IF('Profile Sheet'!$D$15=\"Over 60K Daily Ridership\",'Dropdown Menus'!U2,IF('Profile Sheet'!$D$15=\"Under 60K Daily Ridership\",'Dropdown Menus'!U3,0))","v":{"v":0,"d":"0%"}},{"$f":"IF('Profile Sheet'!$D$15=\"Over 60K Daily Ridership\",'Dropdown Menus'!V2,IF('Profile Sheet'!$D$15=\"Under 60K Daily Ridership\",'Dropdown Menus'!V3,0))","v":{"v":0,"d":"0%"}},{"$f":"IF('Profile Sheet'!$D$15=\"Over 60K Daily Ridership\",'Dropdown Menus'!W2,IF('Profile Sheet'!$D$15=\"Under 60K Daily Ridership\",'Dropdown Menus'!W3,0))","v":{"v":0,"d":"0%"}},{"$f":"IF('Profile Sheet'!$D$15=\"Over 60K Daily Ridership\",'Dropdown Menus'!X2,IF('Profile Sheet'!$D$15=\"Under 60K Daily Ridership\",'Dropdown Menus'!X3,0))","v":{"v":0,"d":"0%"}},{"$f":"IF('Profile Sheet'!$D$15=\"Over 60K Daily Ridership\",'Dropdown Menus'!Y2,IF('Profile Sheet'!$D$15=\"Under 60K Daily Ridership\",'Dropdown Menus'!Y3,0))","v":{"v":0,"d":"0%"}},{"$f":"IF('Profile Sheet'!$D$15=\"Over 60K Daily Ridership\",'Dropdown Menus'!Z2,IF('Profile Sheet'!$D$15=\"Under 60K Daily Ridership\",'Dropdown Menus'!Z3,0))","v":{"v":0,"d":"0%"}},{"$f":"IF('Profile Sheet'!$D$15=\"Over 60K Daily Ridership\",'Dropdown Menus'!AA2,IF('Profile Sheet'!$D$15=\"Under 60K Daily Ridership\",'Dropdown Menus'!AA3,0))","v":{"v":0,"d":"0%"}},{"$f":"IF('Profile Sheet'!$D$15=\"Over 60K Daily Ridership\",'Dropdown Menus'!AB2,IF('Profile Sheet'!$D$15=\"Under 60K Daily Ridership\",'Dropdown Menus'!AB3,0))","v":{"v":0,"d":"0%"}},{"$f":"IF('Profile Sheet'!$D$15=\"Over 60K Daily Ridership\",'Dropdown Menus'!AC2,IF('Profile Sheet'!$D$15=\"Under 60K Daily Ridership\",'Dropdown Menus'!AC3,0))","v":{"v":0,"d":"0%"}},{"$f":"IF('Profile Sheet'!$D$15=\"Over 60K Daily Ridership\",'Dropdown Menus'!AD2,IF('Profile Sheet'!$D$15=\"Under 60K Daily Ridership\",'Dropdown Menus'!AD3,0))","v":{"v":0,"d":"0%"}},{"$f":"IF('Profile Sheet'!$D$15=\"Over 60K Daily Ridership\",'Dropdown Menus'!AE2,IF('Profile Sheet'!$D$15=\"Under 60K Daily Ridership\",'Dropdown Menus'!AE3,0))","v":{"v":0,"d":"0%"}},{"$f":"IF('Profile Sheet'!$D$15=\"Over 60K Daily Ridership\",'Dropdown Menus'!AF2,IF('Profile Sheet'!$D$15=\"Under 60K Daily Ridership\",'Dropdown Menus'!AF3,0))","v":{"v":0,"d":"0%"}},{"$f":"IF('Profile Sheet'!$D$15=\"Over 60K Daily Ridership\",'Dropdown Menus'!AG2,IF('Profile Sheet'!$D$15=\"Under 60K Daily Ridership\",'Dropdown Menus'!AG3,0))","v":{"v":0,"d":"0%"}},{"$f":"IF('Profile Sheet'!$D$15=\"Over 60K Daily Ridership\",'Dropdown Menus'!AH2,IF('Profile Sheet'!$D$15=\"Under 60K Daily Ridership\",'Dropdown Menus'!AH3,0))","v":{"v":0,"d":"0%"}},{"$f":"IF('Profile Sheet'!$D$15=\"Over 60K Daily Ridership\",'Dropdown Menus'!AI2,IF('Profile Sheet'!$D$15=\"Under 60K Daily Ridership\",'Dropdown Menus'!AI3,0))","v":{"v":0,"d":"0%"}}]
[]
["Difference",{"$f":"B3-B4","v":{"v":0,"d":"0%"}},{"$f":"C3-C4","v":{"v":0,"d":"0%"}},{"v":0,"d":"0%"},{"v":0,"d":"0%"},{"v":0,"d":"0%"},{"v":0,"d":"0%"},{"v":0,"d":"0%"},{"v":0,"d":"0%"},{"v":0,"d":"0%"},{"v":0,"d":"0%"},{"v":0,"d":"0%"},{"v":0,"d":"0%"},{"v":0,"d":"0%"},{"v":0,"d":"0%"},{"v":0,"d":"0%"},{"v":0,"d":"0%"},{"v":0,"d":"0%"},{"v":0,"d":"0%"}]
{"$rows_empty":37}
[null,"SAI 1","SAI 2","SAI 3","SAI 4","SAI 5","SAI 6","SAI 7","SAI 8","SAI 9","SAI 10","SAI 11","SAI 12","SAI 13","SAI 14","SAI 15","SAI 16","SAI 17","Average"]
["Current Agency Scores",{"$f":"'Scoring Summary'!$C$18","v":{"v":0,"d":"0%"}},{"$f":"'Scoring Summary'!$C$19","v":{"v":0,"d":"0%"}},{"$f":"'Scoring Summary'!$C$20","v":{"v":0,"d":"0%"}},{"$f":"'Scoring Summary'!$C$21","v":{"v":0,"d":"0%"}},{"$f":"'Scoring Summary'!$C$22","v":{"v":0,"d":"0%"}},{"$f":"'Scoring Summary'!$C$23","v":{"v":0,"d":"0%"}},{"$f":"'Scoring Summary'!$C$24","v":{"v":0,"d":"0%"}},{"$f":"'Scoring Summary'!$C$25","v":{"v":0,"d":"0%"}},{"$f":"'Scoring Summary'!$C$26","v":{"v":0,"d":"0%"}},{"$f":"'Scoring Summary'!$C$27","v":{"v":0,"d":"0%"}},{"$f":"'Scoring Summary'!$C$28","v":{"v":0,"d":"0%"}},{"$f":"'Scoring Summary'!$C$29","v":{"v":0,"d":"0%"}},{"$f":"'Scoring Summary'!$C$30","v":{"v":0,"d":"0%"}},{"$f":"'Scoring Summary'!$C$31","v":{"v":0,"d":"0%"}},{"$f":"'Scoring Summary'!$C$32","v":{"v":0,"d":"0%"}},{"$f":"'Scoring Summary'!$C$33","v":{"v":0,"d":"0%"}},{"$f":"'Scoring Summary'!$C$34","v":{"v":0,"d":"0%"}},{"$f":"'Scoring Summary'!$C$36","v":{"v":0,"d":"0%"}}]
["Previous Agency BASE Scores",{"v":0.71,"d":"71%"},{"v":0.63,"d":"63%"},{"v":0.99,"d":"99%"},{"v":0.88,"d":"88%"},{"v":0.83,"d":"83%"},{"v":0.8,"d":"80%"},{"v":0.93,"d":"93%"},{"v":1,"d":"100%"},{"v":0.36,"d":"36%"},{"v":0.86,"d":"86%"},{"v":0.7,"d":"70%"},{"v":0.86,"d":"86%"},{"v":0.89,"d":"89%"},{"v":0.88,"d":"88%"},{"v":0.91,"d":"91%"},{"v":0.96,"d":"96%"},{"v":0.79,"d":"79%"},{"v":0.82,"d":"82%"},null,"<<<<<<<<","Enter Previous BASE Score Here"]
[]
["Difference",{"$f":"B45-B46","v":{"v":-0.71,"d":"-71%"}},{"$f":"C45-C46","v":{"v":-0.63,"d":"-63%"}},{"v":-0.99,"d":"-99%"},{"v":-0.88,"d":"-88%"},{"v":-0.83,"d":"-83%"},{"v":-0.8,"d":"-80%"},{"v":-0.93,"d":"-93%"},{"v":-1,"d":"-100%"},{"v":-0.36,"d":"-36%"},{"v":-0.86,"d":"-86%"},{"v":-0.7,"d":"-70%"},{"v":-0.86,"d":"-86%"},{"v":-0.89,"d":"-89%"},{"v":-0.88,"d":"-88%"},{"v":-0.91,"d":"-91%"},{"v":-0.96,"d":"-96%"},{"v":-0.79,"d":"-79%"},{"v":-0.82,"d":"-82%"}]

{"sheet":"Gold Standard Award","index":7,"n_rows":39,"n_cols":2,"rows_kept":39,"hidden":true,"merged":[[0,0,0,11]]}
[{"$f":"IF(B39=116, \"This Agency Received Scores Worthy of the Gold Standard Award!\", \"This Agency Did Not Meet the Requirements of the Gold Standard Award.\")","v":"This Agency Did Not Meet the Requirements of the Gold Standard Award."}]
{"$rows_empty":16}
["SAI","Factor"]
[1,{"$f":"IF('Scoring Summary'!C18>=0.7, 1, 0)","v":0}]
[2,{"$f":"IF('Scoring Summary'!C19>=0.7, 1, 0)","v":0}]
[3,{"$f":"IF('Scoring Summary'!C20>=0.7, 1, 0)","v":0}]
[4,{"$f":"IF('Scoring Summary'!C21>=0.7, 1, 0)","v":0}]
[5,{"$f":"IF('Scoring Summary'!C22>=0.7, 1, 0)","v":0}]
[6,{"$f":"IF('Scoring Summary'!C23>=0.7, 1, 0)","v":0}]
[7,{"$f":"IF('Scoring Summary'!C24>=0.7, 1, 0)","v":0}]
[8,{"$f":"IF('Scoring Summary'!C25>=0.7, 1, 0)","v":0}]
[9,{"$f":"IF('Scoring Summary'!C26>=0.7, 1, 0)","v":0}]
[10,{"$f":"IF('Scoring Summary'!C27>=0.7, 1, 0)","v":0}]
[11]
[12,{"$f":"IF('Scoring Summary'!C29>=0.7, 1, 0)","v":0}]
[13,{"$f":"IF('Scoring Summary'!C30>=0.7, 1, 0)","v":0}]
[14,{"$f":"IF('Scoring Summary'!C31>=0.7, 1, 0)","v":0}]
[15,{"$f":"IF('Scoring Summary'!C32>=0.7, 1, 0)","v":0}]
[16,{"$f":"IF('Scoring Summary'!C33>=0.7, 1, 0)","v":0}]
[17,{"$f":"IF('Scoring Summary'!C34>=0.7, 1, 0)","v":0}]
[]
["Overall",{"$f":"IF('Scoring Summary'!C36>=0.9, 100, 0)","v":0}]
[]
["Total",{"$f":"SUM(B19:B37)","v":0}]

{"sheet":"Baseline Security Measures","index":8,"n_rows":147,"n_cols":7,"rows_kept":147,"hidden":true,"merged":[[0,0,0,3],[2,0,2,3]]}
["Baseline Security Line Item"]
[]
[{"$f":"'Profile Sheet'!G11","v":0}]
[]
[null,"Description","Findings","Verification"]
["Section",null,"Score","Justification"]
[null,"MANAGEMENT AND ACCOUNTABILITY"]
[{"v":1,"d":"1.000"},"Establish Written System Security Plans (SSPs) and Emergency Response Plans (ERPs)"]
[{"v":1.1,"d":"1.100"},"System Security Plan (SSP)"]
[1.101,{"$f":"Technical!D8","v":"Does the transit agency have a System Security Plan (SSP)?"},{"$f":"+IF(Checklist!D13=\"\",\"\",Checklist!D13)","v":""},{"$f":"Checklist!F13","v":0}]
[1.103,"Does a written policy statement exist that endorses and adopts the policies and procedures of the SSP that is approved and signed by top management, including the agency's chief executive? ",{"$f":"+IF(Checklist!D15=\"\",\"\",Checklist!D15)","v":""},{"$f":"Checklist!F15","v":0}]
[1.104,"Is the SSP separate from the agency’s System Safety Program Plan (SSPP)?",{"$f":"+IF(Checklist!D16=\"\",\"\",Checklist!D16)","v":""},{"$f":"Checklist!F16","v":0}]
[1.105,"Do the Security and Emergency Response Plans address protection and response for critical underwater tunnels, underground stations/ tunnels and other critical systems, where applicable?",{"$f":"+IF(Checklist!D17=\"\",\"\",Checklist!D17)","v":""},{"$f":"Checklist!F17","v":0}]
[1.107,"Does the SSP contain or reference other documents establishing plans, procedures, or protocols for responding to security events with external agencies (such as law enforcement, local EMA, fire departments, etc.)?",{"$f":"+IF(Checklist!D19=\"\",\"\",Checklist!D19)","v":""},{"$f":"Checklist!F19","v":0}]
[{"v":1.2,"d":"1.200"},"Emergency Response Plan (ERP)"]
[1.201,"Does the agency have an Emergency Response Plan (ERP)?",{"$f":"+IF(Checklist!D30=\"\",\"\",Checklist!D30)","v":""},{"$f":"Checklist!F30","v":0}]
[1.202,"Does a written policy statement exist that endorses and adopts the policies and procedures of the ERP that is approved and signed by top management, including the agency's chief executive? ",{"$f":"+IF(Checklist!D31=\"\",\"\",Checklist!D31)","v":""},{"$f":"Checklist!F31","v":0}]
[1.203,"Does the ERP require an annual review to determine if it needs to be updated?",{"$f":"+IF(Checklist!D32=\"\",\"\",Checklist!D32)","v":""},{"$f":"Checklist!F32","v":0}]
[1.205,"Does the ERP include a process or review provision to ensure coordination with the agency's SSPP and SSP?",{"$f":"+IF(Checklist!D34=\"\",\"\",Checklist!D34)","v":""},{"$f":"Checklist!F34","v":0}]
[1.207,"Does the ERP contain or reference other documents establishing plans, procedures, or protocols for responding to emergency events with external agencies (such as law enforcement, local EMA, fire departments, etc.)?",{"$f":"+IF(Checklist!D36=\"\",\"\",Checklist!D36)","v":""},{"$f":"Checklist!F36","v":0}]
[1.208,"Does the ERP contain or reference other documents that establish procedures for the management of emergency events, including those to be employed by the operations control center (or dispatch center)?",{"$f":"+IF(Checklist!D37=\"\",\"\",Checklist!D37)","v":""},{"$f":"Checklist!F37","v":0}]
[1.212,"Does the agency have a back-up operations control center capability?",{"$f":"+IF(Checklist!D41=\"\",\"\",Checklist!D41)","v":""},{"$f":"Checklist!F41","v":0}]
[{"v":2,"d":"2.000"},"Define Roles and Responsibilities for Security and Emergency Management"]
[{"v":2.1,"d":"2.100"},"System Security Plan (SSP)"]
[2.103,"Are roles and responsibilities for security and/or law enforcement personnel assigned by title and/or position established in the SSP or other documents?",{"$f":"+IF(Checklist!D46=\"\",\"\",Checklist!D46)","v":""},{"$f":"Checklist!F46","v":0}]
[2.104,"Are security-related roles and responsibilities for non-security and/or law enforcement personnel (i.e., operators, conductors, maintenance workers and station attendants) established in the SSP or other documents?",{"$f":"+IF(Checklist!D47=\"\",\"\",Checklist!D47)","v":""},{"$f":"Checklist!F47","v":0}]
[2.107,"Are informational briefings with appropriate personnel held whenever security protocols, threat levels, or protective measures  are updated or as security conditions warrant?",{"$f":"+IF(Checklist!D50=\"\",\"\",Checklist!D50)","v":""},{"$f":"Checklist!F50","v":0}]
[2.108,"Have appropriate reference guides or other written instructions or procedures been distributed to transit employees to implement the requirements of the SSP?",{"$f":"+IF(Checklist!D51=\"\",\"\",Checklist!D51)","v":""},{"$f":"Checklist!F51","v":0}]
[2.109,"Has the agency appointed a Primary and Alternate Security Coordinator to serve as its primary and immediate 24-hr contact for intelligence and security-related contact with TSA and are the names of those Coordinators on file with TSA OSPIE office correct?",{"$f":"+IF(Checklist!D52=\"\",\"\",Checklist!D52)","v":""},{"$f":"Checklist!F52","v":0}]
[{"v":2.2,"d":"2.200"},"Emergency Response Plan (ERP)"]
[2.202,"Are emergency response roles and responsibilities for all departments identified in the ERP or other supporting documents?",{"$f":"+IF(Checklist!D56=\"\",\"\",Checklist!D56)","v":""},{"$f":"Checklist!F56","v":0}]
[2.203,"Are roles and responsibilities for front-line personnel (i.e. system law enforcement, system security officials, train or vehicle operators, conductors, station attendants, maintenance workers) described in the system's Emergency Response Plan (ERP)?",{"$f":"+IF(Checklist!D57=\"\",\"\",Checklist!D57)","v":""},{"$f":"Checklist!F57","v":0}]
[2.204,"Has the ERP been distributed to appropriate departments in the organization?",{"$f":"+IF(Checklist!D58=\"\",\"\",Checklist!D58)","v":""},{"$f":"Checklist!F58","v":0}]
[2.205,"Have appropriate reference guides or other written instructions or procedures been distributed to transit employees to implement the requirements of the ERP?",{"$f":"+IF(Checklist!D59=\"\",\"\",Checklist!D59)","v":""},{"$f":"Checklist!F59","v":0}]
[2.207,"Are informational briefings with appropriate personnel held whenever emergency response protocols are substantially changed or updated?",{"$f":"+IF(Checklist!D61=\"\",\"\",Checklist!D61)","v":""},{"$f":"Checklist!F61","v":0}]
[3,"Ensure that operations and maintenance supervisors, forepersons and managers are held accountable for security issues under their control"]
[3.101,"Do managers and supervisors routinely provide information to front-line personnel regarding security and emergency response issues?",{"$f":"+IF(Checklist!D63=\"\",\"\",Checklist!D63)","v":""},{"$f":"Checklist!F64","v":0}]
[3.103,"Does the agency have a program for confirming that personnel have a working knowledge of security protocols?  If so, summarize program in the justification.",{"$f":"+IF(Checklist!D65=\"\",\"\",Checklist!D65)","v":""},{"$f":"Checklist!F64","v":0}]
[3.104,"Are managers and/or supervisors required to debrief front-line employees regarding their involvement in or management of any security or emergency incidents?",{"$f":"+IF(Checklist!D66=\"\",\"\",Checklist!D66)","v":""},{"$f":"Checklist!F65","v":0}]
[{"v":4,"d":"4.000"},"Coordinate Security and Emergency Management Plan(s) with local and regional agencies"]
[4.102,"Does the agency participate in a regional Emergency Management Working Group or similar regional coordinating body for emergency preparedness and response?",{"$f":"+IF(Checklist!D69=\"\",\"\",Checklist!D69)","v":""},{"$f":"Checklist!F69","v":0}]
[4.103,"Have regional incident management protocols been shared with the agency and incorporated into the agency's ERP/SSP/SEPP?",{"$f":"+IF(Checklist!D70=\"\",\"\",Checklist!D70)","v":""},{"$f":"Checklist!F70","v":0}]
[4.105,"Does the agency have a designated point-of-contact or liaison with the local/regional Emergency Operations Center (EOC)?",{"$f":"+IF(Checklist!D72=\"\",\"\",Checklist!D72)","v":""},{"$f":"Checklist!F72","v":0}]
[4.108,"Has the agency developed internal incident management protocols that comply with the National Response Plan and the National Incident Management System (NIMS)?",{"$f":"+IF(Checklist!D75=\"\",\"\",Checklist!D75)","v":""},{"$f":"Checklist!F75","v":0}]
[{"v":4.11,"d":"4.110"},"Has the transit system tested its communications systems for interoperability with appropriate emergency response agencies? ",{"$f":"+IF(Checklist!D77=\"\",\"\",Checklist!D77)","v":""},{"$f":"Checklist!F77","v":0}]
[4.111,"If the agency's communications systems are NOT inter-operable with appropriate emergency response agencies, have alternate communication protocols been established?  Describe the alternate communication protocols in the justification.",{"$f":"+IF(Checklist!D78=\"\",\"\",Checklist!D78)","v":""},{"$f":"Checklist!F78","v":0}]
[null,"SECURITY AND EMERGENCY RESPONSE TRAINING"]
[{"v":5,"d":"5.000"},"Establish and Maintain a Security and Emergency Training Program"]
[5.101,"Is initial training provided to all new agency employees regarding security orientation/awareness?",{"$f":"+IF(Checklist!D81=\"\",\"\",Checklist!D81)","v":""},{"$f":"Checklist!F81","v":0}]
[5.103,"Is annual refresher training provided regarding security orientation/awareness to managers and supervisors? ",{"$f":"+IF(Checklist!D83=\"\",\"\",Checklist!D83)","v":""},{"$f":"Checklist!F83","v":0}]
[5.104,"Is annual refresher training provided regarding security orientation/awareness  to front-line employees? ",{"$f":"+IF(Checklist!D84=\"\",\"\",Checklist!D84)","v":""},{"$f":"Checklist!F84","v":0}]
[5.106,"Is initial training provided to all new agency employees regarding emergency response?",{"$f":"+IF(Checklist!D86=\"\",\"\",Checklist!D86)","v":""},{"$f":"Checklist!F86","v":0}]
[5.108,"Is annual refresher training on emergency response provided to Managers and Supervisors?",{"$f":"+IF(Checklist!D88=\"\",\"\",Checklist!D88)","v":""},{"$f":"Checklist!F88","v":0}]
[5.109,"Is annual refresher training provided regarding emergency response to Front-line Employees?",{"$f":"+IF(Checklist!D89=\"\",\"\",Checklist!D89)","v":""},{"$f":"Checklist!F89","v":0}]
[{"v":5.11,"d":"5.110"},"Have agency employees received general training on Incident Command System (ICS) procedures in accordance with National Incident Management System at least annually? ",{"$f":"+IF(Checklist!D90=\"\",\"\",Checklist!D90)","v":""},{"$f":"Checklist!F90","v":0}]
[5.112,"Has ICS and NIMS training appropriate to the position been provided to managers and supervisors at least annually? ",{"$f":"+IF(Checklist!D92=\"\",\"\",Checklist!D92)","v":""},{"$f":"Checklist!F92","v":0}]
[5.114,"Has the agency developed a program and provided annual training on its own incident response protocols?",{"$f":"+IF(Checklist!D94=\"\",\"\",Checklist!D94)","v":""},{"$f":"Checklist!F94","v":0}]
[5.116,"Has training on the agency's incident response protocols appropriate to the position been provided to managers and supervisors at least annually? ",{"$f":"+IF(Checklist!D96=\"\",\"\",Checklist!D96)","v":""},{"$f":"Checklist!F96","v":0}]
[5.117,"Has training on the agency's incident response protocols appropriate to the position been provided to front-line employees at least annually? ",{"$f":"+IF(Checklist!D97=\"\",\"\",Checklist!D97)","v":""},{"$f":"Checklist!F97","v":0}]
[5.124," Does the agency have an established program to monitor employee training and to schedule employees for training?",{"$f":"+IF(Checklist!D104=\"\",\"\",Checklist!D104)","v":""},{"$f":"Checklist!F104","v":0}]
[5.128,"Are all appropriate personnel notified via briefings, email, voicemail, or signage of changes in threat condition, protective measures or the employee watch programs?",{"$f":"+IF(Checklist!D108=\"\",\"\",Checklist!D108)","v":""},{"$f":"Checklist!F108","v":0}]
[5.129,"Do the agency's security awareness and emergency response training programs cover response and recovery operations in critical facilities and infrastructure?  If so, summarize relevant provisions of program in the justification. ",{"$f":"+IF(Checklist!D109=\"\",\"\",Checklist!D109)","v":""},{"$f":"Checklist!F109","v":0}]
[{"v":5.13,"d":"5.130"},"Has the agency provided training to regional first responders (law enforcement agencies, firefighters, and emergency medical response teams) to enable them to operate in critical facilities and infrastructure?",{"$f":"+IF(Checklist!D110=\"\",\"\",Checklist!D110)","v":""},{"$f":"Checklist!F110","v":0}]
[5.132,"Has the agency implemented a program to train or orient first responders (law enforcement, firefighters, emergency medical teams) and other potential supporting assets (e.g., TSA regional personnel for VIPR exercises) on their system vehicle familiarization?",{"$f":"+IF(Checklist!D112=\"\",\"\",Checklist!D112)","v":""},{"$f":"Checklist!F112","v":0}]
[null,"NATIONAL TERRORISM ADVISORY SYSTEM (NTAS)"]
[{"v":6,"d":"6.000"},"Establish plans and protocols to respond to the DHS National Terrorism Advisory System (NTAS)"]
[6.101,"Does the SSP contain or reference other documents identifying incremental actions (imminent or elevated) to be implemented for a NTAS threat?",{"$f":"+IF(Checklist!D115=\"\",\"\",Checklist!D115)","v":""},{"$f":"Checklist!F115","v":0}]
[6.102,"Does the agency have actionable operational response protocols for the specific threat scenarios from NTAS?",{"$f":"+IF(Checklist!D116=\"\",\"\",Checklist!D116)","v":""},{"$f":"Checklist!F116","v":0}]
[null,"PUBLIC AWARENESS "]
[{"v":7,"d":"7.000"},"Implement and reinforce a Public Security and Emergency Awareness program:       "]
[7.101,"Has the agency developed and implemented a public security and emergency awareness program?",{"$f":"+IF(Checklist!D120=\"\",\"\",Checklist!D120)","v":""},{"$f":"Checklist!F120","v":0}]
[7.102,"Does the agency provide active public outreach for security awareness and emergency preparedness (e.g., Transit Watch, “If You See Something, Say Something”, message boards, brochures, channel cards, posters, fliers)?",{"$f":"+IF(Checklist!D121=\"\",\"\",Checklist!D121)","v":""},{"$f":"Checklist!F121","v":0}]
[7.104,"Are general security awareness and emergency preparedness messages included in public announcement messages at stations and on board vehicles?",{"$f":"+IF(Checklist!D123=\"\",\"\",Checklist!D123)","v":""},{"$f":"Checklist!F123","v":0}]
[7.105,"Are passengers urged to report unattended property, suspicious behavior, and security concerns to uniformed crew members, law enforcement or security personnel, and/or a contact telephone number?  If so, summarize the type of materials used and content in the justification.",{"$f":"+IF(Checklist!D124=\"\",\"\",Checklist!D124)","v":""},{"$f":"Checklist!F124","v":0}]
[7.106,"Does the agency have an appropriate mechanism in place for passengers to communicate an (e.g., 1-800 number, smart phone applications, social media, etc.)  that can be called or used to report security concerns?  If so, is this information indicated in public awareness materials and messages?",{"$f":"+IF(Checklist!D125=\"\",\"\",Checklist!D125)","v":""},{"$f":"Checklist!F126","v":0}]
[7.111,"Do public awareness materials and/or messages inform passengers on the means to evacuate safely from transit vehicles and/or from underwater/underground facilities?",{"$f":"+IF(Checklist!D130=\"\",\"\",Checklist!D130)","v":""},{"$f":"Checklist!F131","v":0}]
[null,"ESTABLISH A RISK ASSESSMENT AND INFORMATION SHARING PROCESS"]
[{"v":8,"d":"8.000"},"Establish and use a Risk Management Process to assess and manage threats, vulnerabilities and consequences   "]
[8.101,"Does the agency have a risk assessment process approved by its management, for managing threats and vulnerabilities?  If so, summarize the process in the justification. ",{"$f":"+IF(Checklist!D134=\"\",\"\",Checklist!D134)","v":""},{"$f":"Checklist!F134","v":0}]
[8.102,"Has the agency identified facilities and systems it considers to be its critical assets?",{"$f":"+IF(Checklist!D135=\"\",\"\",Checklist!D135)","v":""},{"$f":"Checklist!F135","v":0}]
[8.103,"Has the agency had an internal or external vulnerability assessment on its critical assets within the past 3 years?  Specify the dates of the most recent assessments and the entity(ies) that conducted the assessment(s).   ",{"$f":"+IF(Checklist!D136=\"\",\"\",Checklist!D136)","v":""},{"$f":"Checklist!F136","v":0}]
[8.104,"Has the agency had an internal or external Risk Assessment, analyzing threat, vulnerability, & consequence, for critical assets and infrastructure, and systems within the past 3 years?  Have management and staff responsible for the risk assessment process been properly trained to manage the process?",{"$f":"+IF(Checklist!D137=\"\",\"\",Checklist!D137)","v":""},{"$f":"Checklist!F137","v":0}]
[8.105,"Has the system implemented procedures to limit and monitor authorized access to underground and underwater tunnels?  If so, summarize procedures in the justification.",{"$f":"+IF(Checklist!D138=\"\",\"\",Checklist!D138)","v":""},{"$f":"Checklist!F138","v":0}]
[8.107,"Upon request, has TSA been provided access to the agency's vulnerability assessments, Security Plan and related documents?",{"$f":"+IF(Checklist!D140=\"\",\"\",Checklist!D140)","v":""},{"$f":"Checklist!F140","v":0}]
[{"v":9,"d":"9.000"},"Establish and use an information sharing process for threat and intelligence information"]
[9.101,"Does the agency have a formalized process and procedures for reporting and exchange of threat and intelligence information with Federal, State, and/or local law enforcement agencies? ",{"$f":"+IF(Checklist!D143=\"\",\"\",Checklist!D143)","v":""},{"$f":"Checklist!F143","v":0}]
[9.102,"Does the system report threat and intelligence information directly to FBI Joint Terrorism Task Force (JTTF) or other regional anti-terrorism task force?",{"$f":"+IF(Checklist!D144=\"\",\"\",Checklist!D144)","v":""},{"$f":"Checklist!F144","v":0}]
[9.103,"Does the system have a protocol to report threats or significant security concerns to appropriate law enforcement authorities, and TSA's Transportation Security Operations Center (TSOC)?",{"$f":"+IF(Checklist!D145=\"\",\"\",Checklist!D145)","v":""},{"$f":"Checklist!F145","v":0}]
[null,"DRILLS AND EXERCISES"]
[{"v":10,"d":"10.000"},"Conduct Tabletop and Functional Drills "]
[10.101,"Does the agency’s System Safety Program Plan (SSPP) contain or reference a document describing the process used by the agency to develop an approved, coordinated schedule for all emergency management program activities, including local/regional emergency planning and participation in exercises and drills?",{"$f":"+IF(Checklist!D150=\"\",\"\",Checklist!D150)","v":""},{"$f":"Checklist!F150","v":0}]
[10.102,"Does the agency’s SSPP or SSP describe or reference how the agency performs its emergency planning responsibilities and requirements regarding emergency drills and exercises?",{"$f":"+IF(Checklist!D151=\"\",\"\",Checklist!D151)","v":""},{"$f":"Checklist!F151","v":0}]
[10.103,"Does the agency evaluate its emergency preparedness by using annual field exercises, tabletop exercises, and/or drills?  If so, please summarize the exercise events held in the past year.",{"$f":"+IF(Checklist!D152=\"\",\"\",Checklist!D152)","v":""},{"$f":"Checklist!F152","v":0}]
[10.104,"Does the agency's SSPP or a related document include a requirement for annual field exercises, tabletops and drills?",{"$f":"+IF(Checklist!D153=\"\",\"\",Checklist!D153)","v":""},{"$f":"Checklist!F153","v":0}]
[10.105,"Does the agency’s SSPP or SSP describe or reference how the agency documents the results of its emergency preparedness evaluations (i.e., briefings, after action reports and implementation of findings)?",{"$f":"+IF(Checklist!D154=\"\",\"\",Checklist!D154)","v":""},{"$f":"Checklist!F154","v":0}]
[10.107,"Does the agency participate as an active player in full-scale, regional exercises held at least annually?",{"$f":"+IF(Checklist!D156=\"\",\"\",Checklist!D156)","v":""},{"$f":"Checklist!F156","v":0}]
[10.112,"Does the system conduct drills and exercises of its security and emergency response plans to test capabilities of i) employees and ii) first responders to operate effectively in underwater/underground infrastructure and other critical systems?",{"$f":"+IF(Checklist!D161=\"\",\"\",Checklist!D161)","v":""},{"$f":"Checklist!F161","v":0}]
[10.113,"Does the transit system integrate local and regional first responders (law enforcement, firefighters, emergency medical teams) in drills, tabletop exercises, and/or field exercises?  If so, summarize each joint event and state when it took place.",{"$f":"+IF(Checklist!D162=\"\",\"\",Checklist!D162)","v":""},{"$f":"Checklist!F162","v":0}]
[{"v":11,"d":"11.000"},"Developing a Comprehensive Cyber Security Strategy"]
[11.101,"Has the agency conducted a risk assessment to identify operational control and communication/business enterprise IT assets and potential vulnerabilities?",{"$f":"+IF(Checklist!D164=\"\",\"\",Checklist!D164)","v":""},{"$f":"Checklist!F164","v":0}]
[11.106,"Has the agency established a cyber-incident response and reporting protocol?",{"$f":"+IF(Checklist!D169=\"\",\"\",Checklist!D169)","v":""},{"$f":"Checklist!F169","v":0}]
[null,"FACILITY SECURITY AND ACCESS CONTROLS"]
[{"v":12,"d":"12.000"},"Control Access to Security Critical Facilities with ID badges for all visitors, employees and contractors"]
[12.101,"Have assets and facilities requiring restricted access been identified? ",{"$f":"+IF(Checklist!D173=\"\",\"\",Checklist!D173)","v":""},{"$f":"Checklist!F173","v":0}]
[12.102,"Are ID badges or other measures employed to restrict access to facilities not open to the public?",{"$f":"+IF(Checklist!D174=\"\",\"\",Checklist!D174)","v":""},{"$f":"Checklist!F174","v":0}]
[12.103,"Has the agency developed and implemented procedures to monitor, update and document access control (e.g. card key, ID badges, keys, safe combinations, etc.)?",{"$f":"+IF(Checklist!D175=\"\",\"\",Checklist!D175)","v":""},{"$f":"Checklist!F175","v":0}]
[12.104,"Does the agency have procedures to issue ID badges for visitors and contractors?",{"$f":"+IF(Checklist!D176=\"\",\"\",Checklist!D176)","v":""},{"$f":"Checklist!F176","v":0}]
[12.111,"Has the system implemented protective measures to secure high risk/high consequence assets and systems identified in risk assessments?  Examples of protective measures include but are not limited to CCTV, intrusion detection systems, smart camera technology, fencing, enhanced lighting, access control, LE patrols, K-9s, protection of ventilation systems.    If protective measures for this infrastructure are employed, summarize type and location in the justification. ",{"$f":"+IF(Checklist!D183=\"\",\"\",Checklist!D183)","v":""},{"$f":"Checklist!F183","v":0}]
[12.121,"Are gates and locks also used to close down system facilities after operating hours?",{"$f":"+IF(Checklist!D193=\"\",\"\",Checklist!D193)","v":""},{"$f":"Checklist!F193","v":0}]
[12.124,"Are Uninterruptible Power Supply (UPS) or redundant power sources provided for safety and security of critical equipment, such as but not limited to: exit and platform lighting; parking lot lighting; ancillary space and shop lighting; intrusion detection (alarmed rooms and spaces, fare collection equipment, etc.); fire detection, alarm and suppression systems; public address (shop and public areas); call-for-aid telephones; CCTV; emergency trip stations; vital train control functions; etc.?",{"$f":"+IF(Checklist!D196=\"\",\"\",Checklist!D196)","v":""},{"$f":"Checklist!F196","v":0}]
[12.126,"Does the agency employ specific protective measures for all critical infrastructure  (e.g., tunnels, bridges, stations, control centers, etc), identified through the risk assessment particularly at access points and ventilation infrastructure in place and maintained in optimal condition? Examples of protective measures include, but are not limited to, CCTV, intrusion detection systems, smart camera technology, fencing, lighting, access control, law enforcement patrols, canine patrols, physical protection for ventilation systems.  If protective measures for this infrastructure are employed, summarize type and location in the justification.",{"$f":"+IF(Checklist!D198=\"\",\"\",Checklist!D198)","v":""},{"$f":"Checklist!F198","v":0}]
[{"v":13,"d":"13.000"},"Conduct Physical Security Inspections"]
[13.101,"Does the system conduct frequent inspections of key facilities, stations, terminals, trains and vehicles, or other key assets for persons, materials, and items that do not belong?",{"$f":"+IF(Checklist!D201=\"\",\"\",Checklist!D201)","v":""},{"$f":"Checklist!F201","v":0}]
[13.102,"Has the agency established procedures for inspecting/sweeping vehicles and stations to identify and manage suspicious items, based on HOT characteristics (hidden, obviously suspicious, not typical) or equivalent system?",{"$f":"+IF(Checklist!D202=\"\",\"\",Checklist!D202)","v":""},{"$f":"Checklist!F202","v":0}]
[13.106,"Does the agency conduct frequent inspections of access points, ventilation systems, and the interior of underground/underwater assets and systems for indications of suspicious activity?",{"$f":"+IF(Checklist!D206=\"\",\"\",Checklist!D206)","v":""},{"$f":"Checklist!F206","v":0}]
[null,"BACKGROUND INVESTIGATIONS"]
[{"v":14,"d":"14.000"},"Conduct Background Investigations of Employees and Contractors"]
[14.101,"Does the agency conduct background investigations (i.e., criminal history and motor vehicle records) on all new front-line operations and maintenance employees, and employees with access to sensitive security information, facilities and systems?",{"$f":"+IF(Checklist!D212=\"\",\"\",Checklist!D212)","v":""},{"$f":"Checklist!F212","v":0}]
[14.102," To the extent allowed by agency policy or law, does the agency conduct background investigations on contractors, including vendors, with access to critical facilities, sensitive security systems, and sensitive security information? ",{"$f":"+IF(Checklist!D213=\"\",\"\",Checklist!D213)","v":""},{"$f":"Checklist!F213","v":0}]
[14.104,"Is the background investigation process documented?",{"$f":"+IF(Checklist!D215=\"\",\"\",Checklist!D215)","v":""},{"$f":"Checklist!F215","v":0}]
[null,"DOCUMENT CONTROL"]
[{"v":15,"d":"15.000"},"Control Access to documents of security critical systems and facilities"]
[15.101,"Does the agency keep documentation of its security critical systems, such as tunnels, bridges, HVAC systems and intrusion alarm detection systems (i.e. plans, schematics, etc.) protected from unauthorized access?",{"$f":"+IF(Checklist!D219=\"\",\"\",Checklist!D219)","v":""},{"$f":"Checklist!F219","v":0}]
[15.102,"Has the agency designated a department/person responsible for administering the access control policy with respect to agency documents?",{"$f":"+IF(Checklist!D220=\"\",\"\",Checklist!D220)","v":""},{"$f":"Checklist!F220","v":0}]
[{"v":16,"d":"16.000"},"Process for handling and access to Sensitive Security Information (SSI)"]
[16.101,"Does the agency have a documented policy for identifying and controlling the distribution of and access to documents  it considers to be Sensitive Security Information (SSI) pursuant to 49 CFR Part 15 or 1520?",{"$f":"+IF(Checklist!D223=\"\",\"\",Checklist!D223)","v":""},{"$f":"Checklist!F223","v":0}]
[16.102,"Does the agency have a documented policy for proper handling, control, and storage of documents labeled as or otherwise determined to be Sensitive Security Information (SSI) pursuant to 49 CFR Part 15 or 1520?",{"$f":"+IF(Checklist!D224=\"\",\"\",Checklist!D224)","v":""},{"$f":"Checklist!F224","v":0}]
[null,"SECURITY PROGRAM AUDITS"]
[{"v":17,"d":"17.000"},"Audit Program"]
[17.102,"Does the SSP contain a description of the process used by the agency to audit its implementation of the SSP over the course of the agencies published schedule?",{"$f":"+IF(Checklist!D230=\"\",\"\",Checklist!D230)","v":""},{"$f":"Checklist!F230","v":0}]
[17.103,"Has the agency established checklists and procedures to govern the conduct of its internal security audit process?",{"$f":"+IF(Checklist!D231=\"\",\"\",Checklist!D231)","v":""},{"$f":"Checklist!F231","v":0}]
[17.104,"Is the agency complying with its internal security audit schedule? ",{"$f":"+IF(Checklist!D232=\"\",\"\",Checklist!D232)","v":""},{"$f":"Checklist!F232","v":0}]
[17.105,"Is each internal security audit documented in a written report, which includes evaluation of the adequacy and effectiveness of the SSP element and applicable implementing procedures audited, needed corrected actions, needed recommendations, an implementation schedule for corrective actions and status reporting?",{"$f":"+IF(Checklist!D233=\"\",\"\",Checklist!D233)","v":""},{"$f":"Checklist!F233","v":0}]
[]
[null,"Total Baseline Security Measures Score",{"$f":"SUM(C10:C133)","v":0}]
[null,"Baseline Security Measures Score Percentage",{"$f":"(C135/COUNT(C10:C133))/4","v":{"$error":"#DIV/0!"}}]
{"$rows_empty":10}
[{"$nulls":6},"                                                                                                             "]

{"sheet":"SSO","index":9,"n_rows":15,"n_cols":4,"rows_kept":15,"hidden":true,"merged":[[0,0,0,3]]}
["Baseline Assessment & Security Enhancement Review Scoring SSO"]
["Line Item","Line Element Description","Score","Justification"]
[{"$f":"Checklist!A27","v":1.115},{"$f":"Checklist!B27","v":"Does the SSP outline a process for securing SSO agency review and approval of updates to the SSP?"},{"$f":"Checklist!D27","v":0},{"$f":"Checklist!F27","v":" "}]
[{"$f":"Checklist!A28","v":1.116},{"$f":"Checklist!B28","v":"Has the transit agency submitted and received documentation from the SSO confirming its review and approval of the SSP currently in effect?"},{"$f":"Checklist!D28","v":0},{"$f":"Checklist!F28","v":" "}]
[{"$f":"Checklist!A35","v":1.206},{"$f":"Checklist!B35","v":"Has the transit agency received documentation from the SSO confirming its review and approval of the ERP currently in effect?"},{"$f":"Checklist!D35","v":0},{"$f":"Checklist!F35","v":" "}]
[{"$f":"Checklist!A147","v":9.105},{"$f":"Checklist!B147","v":"Does the agency report their NTA security data to FTA as required by 49 CFR 659?"},{"$f":"Checklist!D147","v":0},{"$f":"Checklist!F147","v":" "}]
[{"$f":"Checklist!A236","v":17.108},{"$f":"Checklist!B236","v":"Has the agency made its internal security audit schedule available to the SSO agency?"},{"$f":"Checklist!D236","v":0},{"$f":"Checklist!F236","v":" "}]
[{"$f":"Checklist!A237","v":17.109},{"$f":"Checklist!B237","v":"Has the agency made checklists and procedures used in its internal security audits available to the SSO agency?"},{"$f":"Checklist!D237","v":0},{"$f":"Checklist!F237","v":" "}]
[{"$f":"Checklist!A238","v":{"v":17.11,"d":"17.110"}},{"$f":"Checklist!B238","v":"Has the agency notified the SSO agency 30 days prior to the conduct of an internal security audit?"},{"$f":"Checklist!D238","v":0},{"$f":"Checklist!F238","v":" "}]
[{"$f":"Checklist!A239","v":17.111},{"$f":"Checklist!B239","v":"Has a report documenting internal security audit process and the status of findings and corrective actions been made available to the SSO agency within the previous 12 months?"},{"$f":"Checklist!D239","v":0},{"$f":"Checklist!F239","v":" "}]
[{"$f":"Checklist!A240","v":17.112},{"$f":"Checklist!B240","v":"Has the agency's chief executive certified to the SSO agency that the agency is in compliance with its SSP?"},{"$f":"Checklist!D240","v":0},{"$f":"Checklist!F240","v":" "}]
[{"$f":"Checklist!A241","v":17.113},{"$f":"Checklist!B241","v":"Was that certification included with the most recent annual report submitted to the SSO agency?"},{"$f":"Checklist!D241","v":0},{"$f":"Checklist!F241","v":" "}]
[]
[null,"Total SSO Score",{"$f":"SUM(C3:C12)","v":0}]
[null,"SSO Score Percentage",{"$f":"C14/COUNT(C3:C12)","v":{"v":0,"d":"0.00%"}}]

{"sheet":"Technical","index":10,"n_rows":244,"n_cols":29,"rows_kept":244,"hidden":true,"merged":[[3,12,3,13],[3,14,3,15],[3,16,3,17],[3,18,3,19],[3,20,3,21],[3,22,3,23],[3,26,3,27]]}
["BASE Technical Scoring Sheet",{"$nulls":3},"This sheet is for data analysis only."]
[]
["Top 17 Scoring Detail",{"$nulls":10},"Transit Security Fundamentals Scoring Detail",{"$nulls":13},"Baseline Security Scoring Detail"]
["Category",null,null,"Questions","Score","Weight","N/A","Points","Possible","Grade",null,"Line","Element 1",null,"Element 2",null,"Element 3",null,"Element 4",null,"Element 5",null,"Element 6",null,null,"Line","Element 1",null,"Grade"]
[{"$nulls":3},"MANAGEMENT AND ACCOUNTABILITY",{"$nulls":7},"Grade:",null,{"$f":"M7/N7","v":{"v":0,"d":"0%"}},null,{"$f":"O7/P7","v":{"v":0,"d":"0%"}},null,{"$f":"Q7/R7","v":{"v":0,"d":"0%"}},null,{"$f":"S7/T7","v":{"v":0,"d":"0%"}},null,{"$f":"U7/V7","v":{"v":0,"d":"0%"}},null,{"$f":"W7/X7","v":{"v":0,"d":"0%"}},null,"Grade:",null,{"$f":"AA7/AB7","v":{"v":0,"d":"0%"}}]
[{"v":1,"d":"1.000"},null,null,"Establish Written System Security Plans (SSPs) and Emergency Response Plans (ERPs)",{"$nulls":3},{"$f":"H7+H24","v":{"v":0,"d":"0.0000000"}},{"$f":"I7+I24","v":{"v":0.058564000000000005,"d":"0.0585640"}},{"$f":"H6/I6","v":{"v":0,"d":"0%"}},null,null,"Points","Possible","Points","Possible","Points","Possible","Points","Possible","Points","Possible","Points","Possible",null,null,{"$f":"AA7+AA24","v":{"v":0,"d":"0.000000"}},{"$f":"AB7+AB24","v":{"v":0.026592000000000005,"d":"0.026592"}},{"$f":"AA6/AB6","v":{"v":0,"d":"0%"}}]
[{"v":1.1,"d":"1.100"},null,null,"System Security Plan (SSP)",{"$nulls":3},{"$f":"SUM(H8:H23)","v":{"v":0,"d":"0.0000000"}},{"$f":"SUM(I8:I23)","v":{"v":0.028472,"d":"0.0284720"}},{"$f":"H7/I7","v":{"v":0,"d":"0%"}},null,"Totals:",{"$f":"SUM(M8:M237)","v":0},0.03954963625333257,0,0.123912,0,3.738980313883992E-3,0,0.028097354995121896,0,0.0315,0,0.02622518265447492,null,"Totals:",{"$f":"SUM(AA8:AA23)","v":{"v":0,"d":"0.000000"}},{"$f":"SUM(AB8:AB23)","v":0.008928},{"$f":"AA7/AB7","v":{"v":0,"d":"0%"}}]
[1.101,"B",null,"Does the transit agency have a System Security Plan (SSP)?",{"$f":"+IF(Checklist!D13=\"\",0,Checklist!D13)","v":0},{"$f":"Weights!E8","v":0.000472},{"$f":"IF(Checklist!C13=\"X\", 0, 1)","v":1},{"$f":"E8*F8*G8","v":0},{"$f":"F8*G8*4","v":0.001888},{"$f":"H8/I8","v":{"v":0,"d":"0%"}},null,1.101,{"$f":"+IF(C8=\"T1\",H8,\" \")","v":" "},{"$f":"+IF(C8=\"T1\",I8,\" \")","v":" "},{"$f":"+IF(C8=\"T2\",H8,\" \")","v":" "},{"$f":"+IF(C8=\"T2\",I8,\" \")","v":" "},{"$f":"+IF(C8=\"T3\",H8,\" \")","v":" "},{"$f":"+IF(C8=\"T3\",I8,\" \")","v":" "},{"$f":"+IF(C8=\"T4\",H8,\" \")","v":" "},{"$f":"+IF(C8=\"T4\",I8,\" \")","v":" "},{"$f":"+IF(C8=\"T5\",H8,\" \")","v":" "},{"$f":"+IF(C8=\"T5\",I8,\" \")","v":" "},{"$f":"+IF(C8=\"T6\",H8,\" \")","v":" "},{"$f":"+IF(C8=\"T6\",I8,\" \")","v":" "},null,{"$f":"A8","v":1.101},{"$f":"IF(B8=\"B\",H8,\" \")","v":{"v":0,"d":"0.000000"}},{"$f":"IF(B8=\"B\",I8,\" \")","v":0.001888},{"$f":"IF(AA8=\"NOT SCORED\",\"NOT SCORED\",IF(B8=\"B\",AA8/AB8,\" \"))","v":{"v":0,"d":"0%"}}]
[1.102,null,null,"Does the SSP identify the goals and objectives for the security program?",{"$f":"+IF(Checklist!D14=\"\",0,Checklist!D14)","v":0},{"$f":"Weights!E9","v":0.000465},{"$f":"IF(Checklist!C14=\"X\", 0, 1)","v":1},0,{"$f":"F9*G9*4","v":{"v":0.00186,"d":"0.001860"}},{"$f":"H9/I9","v":{"v":0,"d":"0%"}},null,1.102," "," "," "," "," "," ",{"$f":"+IF(C9=\"T4\",H9,\" \")","v":" "},{"$f":"+IF(C9=\"T4\",I9,\" \")","v":" "},{"$f":"+IF(C9=\"T5\",H9,\" \")","v":" "},{"$f":"+IF(C9=\"T5\",I9,\" \")","v":" "},{"$f":"+IF(C9=\"T6\",H9,\" \")","v":" "},{"$f":"+IF(C9=\"T6\",I9,\" \")","v":" "},null,{"$f":"A9","v":1.102},{"$f":"IF(B9=\"B\",H9,\" \")","v":" "},{"$f":"IF(B9=\"B\",I9,\" \")","v":" "},{"$f":"IF(AA9=\"NOT SCORED\",\"NOT SCORED\",IF(B9=\"B\",AA9/AB9,\" \"))","v":" "}]
[1.103,"B",null,"Does a written policy statement exist that endorses and adopts the policies and procedures of the SSP that is approved and signed by top management, including the agency's chief executive? ",{"$f":"+IF(Checklist!D15=\"\",0,Checklist!D15)","v":0},{"$f":"Weights!E10","v":{"v":4.66E-4,"d":"0.000466"}},{"$f":"IF(Checklist!C15=\"X\", 0, 1)","v":1},0,{"v":1.864E-3,"d":"0.001864"},{"v":0,"d":"0%"},null,1.103," "," "," "," "," "," "," "," "," "," "," "," ",null,{"$f":"A10","v":1.103},{"v":0,"d":"0.000000"},{"$f":"IF(B10=\"B\",I10,\" \")","v":{"v":1.864E-3,"d":"0.001864"}},{"v":0,"d":"0%"}]
[1.104,"B",null,"Is the SSP separate from the agency’s System Safety Program Plan (SSPP)?",{"$f":"+IF(Checklist!D16=\"\",0,Checklist!D16)","v":0},{"$f":"Weights!E11","v":0.000385},{"$f":"IF(Checklist!C16=\"X\", 0, 1)","v":1},0,{"v":0.00154,"d":"0.001540"},{"v":0,"d":"0%"},null,1.104," "," "," "," ",{"$f":"+IF(C11=\"T3\",H11,\" \")","v":" "}," "," "," "," "," "," "," ",null,1.104,{"v":0,"d":"0.000000"},{"v":0.00154,"d":"0.001540"},{"v":0,"d":"0%"}]
[1.105,"B","T1","Do the Security and Emergency Response Plans address protection and response for critical underwater tunnels, underground stations/ tunnels and other critical systems, where applicable?",{"$f":"+IF(Checklist!D17=\"\",0,Checklist!D17)","v":0},{"$f":"Weights!E12","v":0.000459},{"$f":"IF(Checklist!C17=\"X\", 0, 1)","v":1},0,{"v":1.836E-3,"d":"0.001836"},{"v":0,"d":"0%"},null,1.105,{"$f":"+IF(C12=\"T1\",H12,\" \")","v":0},{"$f":"+IF(C12=\"T1\",I12,\" \")","v":{"v":1.836E-3,"d":"0.001836"}},{"$f":"+IF(C12=\"T2\",H12,\" \")","v":" "},{"$f":"+IF(C12=\"T2\",I12,\" \")","v":" "},{"$f":"+IF(C12=\"T3\",H12,\" \")","v":" "},{"$f":"+IF(C12=\"T3\",I12,\" \")","v":" "}," "," "," "," "," "," ",null,1.105,{"v":0,"d":"0.000000"},{"v":1.836E-3,"d":"0.001836"},{"v":0,"d":"0%"}]
[1.106,null,null,"Does the SSP contain or reference other documents establishing procedures for the management of security incidents by the operations control center (or dispatch center)?",{"$f":"+IF(Checklist!D18=\"\",0,Checklist!D18)","v":0},{"$f":"Weights!E13","v":0.000445},{"$f":"IF(Checklist!C18=\"X\", 0, 1)","v":1},0,{"v":0.00178,"d":"0.001780"},{"v":0,"d":"0%"},null,1.106,{"$f":"+IF(C13=\"T1\",H13,\" \")","v":" "},{"$f":"+IF(C13=\"T1\",I13,\" \")","v":" "},{"$f":"+IF(C13=\"T2\",H13,\" \")","v":" "},{"$f":"+IF(C13=\"T2\",I13,\" \")","v":" "},{"$f":"+IF(C13=\"T3\",H13,\" \")","v":" "},{"$f":"+IF(C13=\"T3\",I13,\" \")","v":" "}," "," "," "," "," "," ",null,1.106," "," "," "]
[1.107,"B",null,"Does the SSP contain or reference other documents establishing plans, procedures, or protocols for responding to security events with external agencies (such as law enforcement, local EMA, fire departments, etc.)?",{"$f":"+IF(Checklist!D19=\"\",0,Checklist!D19)","v":0},{"$f":"Weights!E14","v":{"v":0.00045,"d":"0.000450"}},{"$f":"IF(Checklist!C19=\"X\", 0, 1)","v":1},0,{"v":1.8E-3,"d":"0.001800"},{"v":0,"d":"0%"},null,1.107," "," "," "," "," "," "," "," "," "," "," "," ",null,1.107,{"v":0,"d":"0.000000"},{"v":1.8E-3,"d":"0.001800"},{"v":0,"d":"0%"}]
[1.108,null,null,"Does the SSP contain or reference other documents that establish protocols addressing specific threats from (i) Improvised Explosive Devices (IED) and (ii) Weapons of Mass Destruction (chemical, biological, radiological hazards)?",{"$f":"+IF(Checklist!D20=\"\",0,Checklist!D20)","v":0},{"$f":"Weights!E15","v":0.000463},{"$f":"IF(Checklist!C20=\"X\", 0, 1)","v":1},0,0.001852,{"v":0,"d":"0%"},null,1.108," "," "," "," "," "," "," "," "," "," "," "," ",null,1.108," "," "," "]
[1.109,null,"T3","Are visible, random security measures integrated into security plans to introduce unpredictability into security activities for deterrent effect?   ",{"$f":"+IF(Checklist!D21=\"\",0,Checklist!D21)","v":0},{"$f":"Weights!E16","v":0.000454},{"$f":"IF(Checklist!C21=\"X\", 0, 1)","v":1},0,0.001816,{"v":0,"d":"0%"},null,1.109," "," "," "," ",0,0.001816," "," "," "," "," "," ",null,1.109," "," "," "]
[{"v":1.11,"d":"1.110"},null,null,"Does the SSP include provisions requiring that security be addressed in extensions, major projects, new vehicles and equipment procurement and other capital projects, and including integration with the transit agency’s safety certification process?",{"$f":"+IF(Checklist!D22=\"\",0,Checklist!D22)","v":0},{"$f":"Weights!E17","v":0.000465},{"$f":"IF(Checklist!C22=\"X\", 0, 1)","v":1},0,{"v":0.00186,"d":"0.001860"},{"v":0,"d":"0%"},null,{"v":1.11,"d":"1.110"}," "," "," "," "," "," "," "," "," "," "," "," ",null,{"v":1.11,"d":"1.110"}," "," "," "]
[1.111,null,null,"Does the SSP include or reference other documents adopting Crime Prevention Through Environmental Design (CPTED) principles as part of the agency's engineering practices?",{"$f":"+IF(Checklist!D23=\"\",0,Checklist!D23)","v":0},{"$f":"Weights!E18","v":0.000454},{"$f":"IF(Checklist!C23=\"X\", 0, 1)","v":1},0,0.001816,{"v":0,"d":"0%"},null,1.111," "," "," "," "," "," "," "," "," "," "," "," ",null,1.111," "," "," "]
[1.112,null,null,"Does the SSP require an annual review?",{"$f":"+IF(Checklist!D24=\"\",0,Checklist!D24)","v":0},{"$f":"Weights!E19","v":0.000449},{"$f":"IF(Checklist!C24=\"X\", 0, 1)","v":1},0,0.001796,{"v":0,"d":"0%"},null,1.112," "," "," "," "," "," "," "," "," "," "," "," ",null,1.112," "," "," "]
[1.113,null,null,"Does the transit agency produce periodic reports reviewing its progress in meeting its SSP goals and objectives?",{"$f":"+IF(Checklist!D25=\"\",0,Checklist!D25)","v":0},{"$f":"Weights!E20","v":0.000438},{"$f":"IF(Checklist!C25=\"X\", 0, 1)","v":1},0,0.001752,{"v":0,"d":"0%"},null,1.113," "," "," "," "," "," "," "," "," "," "," "," ",null,1.113," "," "," "]
[1.114,null,null,"Has an annual review of the SSP been performed and documented in the preceding 12 months?",{"$f":"+IF(Checklist!D26=\"\",0,Checklist!D26)","v":0},{"$f":"Weights!E21","v":0.000447},{"$f":"IF(Checklist!C26=\"X\", 0, 1)","v":1},0,0.001788,{"v":0,"d":"0%"},null,1.114," "," "," "," "," "," "," "," "," "," "," "," ",null,1.114," "," "," "]
[1.115,null,null,{"$f":"IF('Profile Sheet'!E14=\"X\",\"N/A Not Governed By 49 CFR Part 659\",\"Does the SSP outline a process for securing SSO agency review and approval of updates to the SSP?\")","v":"Does the SSP outline a process for securing SSO agency review and approval of updates to the SSP?"},{"$f":"+IF(Checklist!D27=\"\",0,Checklist!D27)","v":0},{"$f":"Weights!E22","v":{"v":0.0004,"d":"0.000400"}},{"$f":"IF(Checklist!C27=\"X\", 0, 1)","v":1},0,{"v":0.0016,"d":"0.001600"},{"v":0,"d":"0%"},null,1.115," "," "," "," "," "," "," "," "," "," "," "," ",null,1.115," "," "," "]
[1.116,null,null,{"$f":"IF('Profile Sheet'!E14=\"X\",\"N/A Not Governed By 49 CFR Part 659\",\"Has the transit agency submitted and received documentation from the SSO confirming its review and approval of the SSP currently in effect?\")","v":"Has the transit agency submitted and received documentation from the SSO confirming its review and approval of the SSP currently in effect?"},{"$f":"+IF(Checklist!D28=\"\",0,Checklist!D28)","v":0},{"$f":"Weights!E23","v":{"v":4.06E-4,"d":"0.000406"}},{"$f":"IF(Checklist!C28=\"X\", 0, 1)","v":1},0,{"v":1.624E-3,"d":"0.001624"},{"v":0,"d":"0%"},null,1.116," "," "," "," "," "," "," "," "," "," "," "," ",null,1.116," "," "," "]
[{"v":1.2,"d":"1.200"},null,null,"Emergency Response Plan (ERP)",{"$nulls":3},{"$f":"SUM(H25:H36)","v":{"v":0,"d":"0.00000"}},{"$f":"SUM(I25:I36)","v":{"v":0.030092000000000004,"d":"0.03009"}},{"$f":"H24/I24","v":{"v":0,"d":"0%"}},null,{"v":1.2,"d":"1.200"},{"$nulls":13},{"v":1.2,"d":"1.200"},{"$f":"SUM(AA25:AA36)","v":{"v":0,"d":"0.000000"}},{"$f":"SUM(AB25:AB36)","v":{"v":0.017664000000000003,"d":"0.017664"}},{"$f":"AA24/AB24","v":{"v":0,"d":"0%"}}]
[1.201,"B",null,"Does the transit agency have an Emergency Response Plan (ERP)?",{"$f":"+IF(Checklist!D30=\"\",0,Checklist!D30)","v":0},{"$f":"Weights!E25","v":0.000652},{"$f":"IF(Checklist!C30=\"X\", 0, 1)","v":1},{"$f":"E25*F25*G25","v":0},{"$f":"F25*G25*4","v":0.002608},{"$f":"H25/I25","v":{"v":0,"d":"0%"}},null,1.201," "," ",{"$f":"+IF(C25=\"T2\",H25,\" \")","v":" "},{"$f":"+IF(C25=\"T2\",I25,\" \")","v":" "},{"$f":"+IF(C25=\"T3\",H25,\" \")","v":" "},{"$f":"+IF(C25=\"T3\",I25,\" \")","v":" "},{"$f":"+IF(C25=\"T4\",H25,\" \")","v":" "},{"$f":"+IF(C25=\"T4\",I25,\" \")","v":" "},{"$f":"+IF(C25=\"T5\",H25,\" \")","v":" "},{"$f":"+IF(C25=\"T5\",I25,\" \")","v":" "},{"$f":"+IF(C25=\"T6\",H25,\" \")","v":" "},{"$f":"+IF(C25=\"T6\",I25,\" \")","v":" "},null,1.201,{"$f":"IF(B25=\"B\",H25,\" \")","v":{"v":0,"d":"0.000000"}},{"$f":"IF(B25=\"B\",I25,\" \")","v":0.002608},{"v":0,"d":"0%"}]
[1.202,"B",null,"Does a written policy statement exist that endorses and adopts the policies and procedures of the ERP that is approved and signed by top management, including the agency's chief executive? ",{"$f":"+IF(Checklist!D31=\"\",0,Checklist!D31)","v":0},{"$f":"Weights!E26","v":0.000643},{"$f":"IF(Checklist!C31=\"X\", 0, 1)","v":1},0,0.002572,{"v":0,"d":"0%"},null,1.202," "," ",{"$f":"+IF(C26=\"T2\",H26,\" \")","v":" "},{"$f":"+IF(C26=\"T2\",I26,\" \")","v":" "},{"$f":"+IF(C26=\"T3\",H26,\" \")","v":" "},{"$f":"+IF(C26=\"T3\",I26,\" \")","v":" "},{"$f":"+IF(C26=\"T4\",H26,\" \")","v":" "},{"$f":"+IF(C26=\"T4\",I26,\" \")","v":" "},{"$f":"+IF(C26=\"T5\",H26,\" \")","v":" "},{"$f":"+IF(C26=\"T5\",I26,\" \")","v":" "},{"$f":"+IF(C26=\"T6\",H26,\" \")","v":" "},{"$f":"+IF(C26=\"T6\",I26,\" \")","v":" "},null,1.202,{"$f":"IF(B26=\"B\",H26,\" \")","v":{"v":0,"d":"0.000000"}},{"$f":"IF(B26=\"B\",I26,\" \")","v":0.002572},{"v":0,"d":"0%"}]
[1.203,"B",null,"Does the ERP require an annual review to determine if it needs to be updated?",{"$f":"+IF(Checklist!D32=\"\",0,Checklist!D32)","v":0},{"$f":"Weights!E27","v":0.000631},{"$f":"IF(Checklist!C32=\"X\", 0, 1)","v":1},0,0.002524,{"v":0,"d":"0%"},null,1.203," "," "," "," "," "," "," "," "," "," "," "," ",null,1.203,{"$f":"IF(B27=\"B\",H27,\" \")","v":{"v":0,"d":"0.000000"}},{"$f":"IF(B27=\"B\",I27,\" \")","v":0.002524},{"v":0,"d":"0%"}]
[1.204,null,null,"Has an annual review of the ERP been performed and documented in the preceding 12 months?",{"$f":"+IF(Checklist!D33=\"\",0,Checklist!D33)","v":0},{"$f":"Weights!E28","v":0.000631},{"$f":"IF(Checklist!C33=\"X\", 0, 1)","v":1},0,0.002524,{"v":0,"d":"0%"},null,1.204," "," "," "," "," "," "," "," "," "," "," "," ",null,1.204,{"$f":"IF(B28=\"B\",H28,\" \")","v":" "},{"$f":"IF(B28=\"B\",I28,\" \")","v":" "}," "]
[1.205,"B",null,"Does the ERP include a process or review provision to ensure coordination with the rail transit agency’s SSPP and SSP?",{"$f":"+IF(Checklist!D34=\"\",0,Checklist!D34)","v":0},{"$f":"Weights!E29","v":0.000612},{"$f":"IF(Checklist!C34=\"X\", 0, 1)","v":1},0,0.002448,{"v":0,"d":"0%"},null,1.205," "," "," "," "," "," "," "," "," "," "," "," ",null,1.205,{"v":0,"d":"0.000000"},0.002448,{"v":0,"d":"0%"}]
[1.206,null,null,{"$f":"IF('Profile Sheet'!E14=\"X\",\"N/A Not Governed By 49 CFR Part 659\",\"Has the transit agency received documentation from the SSO confirming its review and approval of the ERP currently in effect?\")","v":"Has the transit agency received documentation from the SSO confirming its review and approval of the ERP currently in effect?"},{"$f":"+IF(Checklist!D35=\"\",0,Checklist!D35)","v":0},{"$f":"Weights!E30","v":0.000585},{"$f":"IF(Checklist!C35=\"X\", 0, 1)","v":1},0,{"v":0.00234,"d":"0.002340"},{"v":0,"d":"0%"},null,1.206," "," "," "," "," "," "," "," "," "," "," "," ",null,1.206," "," "," "]
[1.207,"B",null,"Does the ERP contain or reference other documents establishing plans, procedures, or protocols for responding to emergency events with external agencies (such as law enforcement, local EMA, fire departments, etc.)?",{"$f":"+IF(Checklist!D36=\"\",0,Checklist!D36)","v":0},{"$f":"Weights!E31","v":{"v":6.29E-4,"d":"0.000629"}},{"$f":"IF(Checklist!C36=\"X\", 0, 1)","v":1},0,{"v":2.516E-3,"d":"0.002516"},{"v":0,"d":"0%"},null,1.207," "," "," "," "," "," "," "," "," "," "," "," ",null,1.207,{"v":0,"d":"0.000000"},{"v":2.516E-3,"d":"0.002516"},{"v":0,"d":"0%"}]
[1.208,"B",null,"Does the ERP contain or reference other documents that establish procedures for the management of emergency events, including those to be employed by the operations control center (or dispatch center)?",{"$f":"+IF(Checklist!D37=\"\",0,Checklist!D37)","v":0},{"$f":"Weights!E32","v":0.000623},{"$f":"IF(Checklist!C37=\"X\", 0, 1)","v":1},0,0.002492,{"v":0,"d":"0%"},null,1.208," "," "," "," "," "," "," "," "," "," "," "," ",null,1.208,{"v":0,"d":"0.000000"},0.002492,{"v":0,"d":"0%"}]
[1.209,null,null,"Does the ERP contain or reference other documents to provide for Continuity of Operations (COOP) while responding to emergency events?",{"$f":"+IF(Checklist!D38=\"\",0,Checklist!D38)","v":0},{"$f":"Weights!E33","v":0.000634},{"$f":"IF(Checklist!C38=\"X\", 0, 1)","v":1},0,0.002536,{"v":0,"d":"0%"},null,1.209," "," "," "," "," "," "," "," "," "," "," "," ",null,1.209," "," "," "]
[{"v":1.21,"d":"1.210"},null,null,"Does the agency have a written Business Recovery Plan to guide restoration of facilities and services following an emergency event?",{"$f":"+IF(Checklist!D39=\"\",0,Checklist!D39)","v":0},{"$f":"Weights!E34","v":0.000628},{"$f":"IF(Checklist!C39=\"X\", 0, 1)","v":1},0,0.002512,{"v":0,"d":"0%"},null,{"v":1.21,"d":"1.210"}," "," "," "," "," "," "," "," "," "," "," "," ",null,{"v":1.21,"d":"1.210"}," "," "," "]
[1.211,null,null,"Does the agency have a written Business Continuity Plan and COOP to guide restoration of facilities and services following an emergency event?",{"$f":"+IF(Checklist!D40=\"\",0,Checklist!D40)","v":0},{"$f":"Weights!E35","v":{"v":6.29E-4,"d":"0.000629"}},{"$f":"IF(Checklist!C40=\"X\", 0, 1)","v":1},0,{"v":2.516E-3,"d":"0.002516"},{"v":0,"d":"0%"},null,1.211," "," "," "," "," "," "," "," "," "," "," "," ",null,null," "," "," "]
[1.212,"B",null,"Does the agency have a back-up operations control center capability?",{"$f":"+IF(Checklist!D41=\"\",0,Checklist!D41)","v":0},{"$f":"Weights!E36","v":0.000626},{"$f":"IF(Checklist!C41=\"X\", 0, 1)","v":1},0,0.002504,{"v":0,"d":"0%"},null,1.212," "," "," "," "," "," "," "," "," ",{"$f":"+IF(C36=\"T5\",I36,\" \")","v":" "}," "," ",null,null,{"v":0,"d":"0.000000"},0.002504,{"v":0,"d":"0%"}]
[{"v":2,"d":"2.000"},null,null,"Define Roles and Responsibilities for Security and Emergency Management",{"$nulls":3},{"$f":"H38+H49","v":0},{"$f":"I38+I49","v":0.056136000000000005},{"$f":"H37/I37","v":{"v":0,"d":"0%"}},null,2,{"$nulls":13},2,{"$f":"AA38+AA49","v":0},{"$f":"AB38+AB49","v":0.033776},{"$f":"AA37/AB37","v":{"v":0,"d":"0%"}}]
[{"v":2.1,"d":"2.100"},null,null,"System Security Plan (SSP)",{"$nulls":3},{"$f":"SUM(H39:H48)","v":0},{"$f":"SUM(I39:I48)","v":0.029456},{"$f":"H38/I38","v":{"v":0,"d":"0%"}},null,{"v":2.1,"d":"2.100"},{"$nulls":13},{"v":2.1,"d":"2.100"},{"$f":"SUM(AA39:AA48)","v":{"v":0,"d":"0.000000"}},{"$f":"SUM(AB39:AB48)","v":{"v":0.014735999999999999,"d":"0.014736"}},{"$f":"AA38/AB38","v":{"v":0,"d":"0%"}}]
[2.101,null,null,"Does the SSP establish and assign responsibility for implementation of the security program to a Senior Manager who is a \"direct report\" to the agency's Chief Executive Officer?",{"$f":"+IF(Checklist!D44=\"\",0,Checklist!D44)","v":0},{"$f":"Weights!E39","v":0.000761},{"$f":"IF(Checklist!C44=\"X\", 0, 1)","v":1},{"$f":"E39*F39*G39","v":0},{"$f":"F39*G39*4","v":0.003044},{"$f":"H39/I39","v":{"v":0,"d":"0%"}},null,2.101,{"$f":"+IF(C39=\"T1\",H39,\" \")","v":" "},{"$f":"+IF(C39=\"T1\",I39,\" \")","v":" "},{"$f":"+IF(C39=\"T2\",H39,\" \")","v":" "},{"$f":"+IF(C39=\"T2\",I39,\" \")","v":" "},{"$f":"+IF(C39=\"T3\",H39,\" \")","v":" "},{"$f":"+IF(C39=\"T3\",I39,\" \")","v":" "},{"$f":"+IF(C39=\"T4\",H39,\" \")","v":" "},{"$f":"+IF(C39=\"T4\",I39,\" \")","v":" "},{"$f":"+IF(C39=\"T5\",H39,\" \")","v":" "},{"$f":"+IF(C39=\"T5\",I39,\" \")","v":" "},{"$f":"+IF(C39=\"T6\",H39,\" \")","v":" "},{"$f":"+IF(C39=\"T6\",I39,\" \")","v":" "},null,2.101,{"$f":"IF(B39=\"B\",H39,\" \")","v":" "},{"$f":"IF(B39=\"B\",I39,\" \")","v":" "},{"$f":"IF(AA39=\"NOT SCORED\",\"NOT SCORED\",IF(B39=\"B\",AA39/AB39,\" \"))","v":" "}]
[2.102,null,null,"Has the agency established lines of delegated authority/succession of security responsibilities and, if so, has that information been distributed to agency managers?",{"$f":"+IF(Checklist!D45=\"\",0,Checklist!D45)","v":0},{"$f":"Weights!E40","v":{"v":0.00073,"d":"0.000730"}},{"$f":"IF(Checklist!C45=\"X\", 0, 1)","v":1},0,{"v":0.00292,"d":"0.002920"},{"v":0,"d":"0%"},null,2.102,{"$f":"+IF(C40=\"T1\",H40,\" \")","v":" "},{"$f":"+IF(C40=\"T1\",I40,\" \")","v":" "},{"$f":"+IF(C40=\"T2\",H40,\" \")","v":" "},{"$f":"+IF(C40=\"T2\",I40,\" \")","v":" "},{"$f":"+IF(C40=\"T3\",H40,\" \")","v":" "},{"$f":"+IF(C40=\"T3\",I40,\" \")","v":" "},{"$f":"+IF(C40=\"T4\",H40,\" \")","v":" "},{"$f":"+IF(C40=\"T4\",I40,\" \")","v":" "},{"$f":"+IF(C40=\"T5\",H40,\" \")","v":" "},{"$f":"+IF(C40=\"T5\",I40,\" \")","v":" "},{"$f":"+IF(C40=\"T6\",H40,\" \")","v":" "},{"$f":"+IF(C40=\"T6\",I40,\" \")","v":" "},null,2.102,{"$f":"IF(B40=\"B\",H40,\" \")","v":" "},{"$f":"IF(B40=\"B\",I40,\" \")","v":" "}," "]
[2.103,"B",null,"Are roles and responsibilities for security and/or law enforcement personnel assigned by title and/or position established in the SSP or other documents?",{"$f":"+IF(Checklist!D46=\"\",0,Checklist!D46)","v":0},{"$f":"Weights!E41","v":0.000744},{"$f":"IF(Checklist!C46=\"X\", 0, 1)","v":1},0,0.002976,{"v":0,"d":"0%"},null,2.103," "," "," "," "," "," "," "," "," "," "," "," ",null,2.103,{"v":0,"d":"0.000000"},0.002976,{"v":0,"d":"0%"}]
[2.104,"B",null,"Are security-related roles and responsibilities for non-security and/or law enforcement personnel  (i.e., operators, conductors, maintenance workers and station attendants) established in the SSP or other documents?",{"$f":"+IF(Checklist!D47=\"\",0,Checklist!D47)","v":0},{"$f":"Weights!E42","v":0.000731},{"$f":"IF(Checklist!C47=\"X\", 0, 1)","v":1},0,0.002924,{"v":0,"d":"0%"},null,2.104," "," "," "," "," "," "," "," "," "," "," "," ",null,2.104,{"v":0,"d":"0.000000"},0.002924,{"v":0,"d":"0%"}]
[2.105,null,"T2","Do senior staff and middle management conduct security meetings to review recommendations for changes to plans and processes?",{"$f":"+IF(Checklist!D48=\"\",0,Checklist!D48)","v":0},{"$f":"Weights!E43","v":{"v":7.27E-4,"d":"0.000727"}},{"$f":"IF(Checklist!C48=\"X\", 0, 1)","v":1},0,{"v":2.908E-3,"d":"0.002908"},{"v":0,"d":"0%"},null,2.105," "," ",0,2.908E-3," "," "," "," "," "," "," "," ",null,2.105," "," "," "]
[2.106,null,null,"Does a Security Review Committee (or other designated group) regularly review security incident reports, trends, and program audit findings?",{"$f":"+IF(Checklist!D49=\"\",0,Checklist!D49)","v":0},{"$f":"Weights!E44","v":{"v":7.18E-4,"d":"0.000718"}},{"$f":"IF(Checklist!C49=\"X\", 0, 1)","v":1},0,{"v":2.872E-3,"d":"0.002872"},{"v":0,"d":"0%"},null,2.106," "," "," "," "," "," "," "," "," "," "," "," ",null,2.106," "," "," "]
[2.107,"B",null,"Are informational briefings with appropriate personnel held whenever security protocols, threat levels, or protective measures  are updated or as security conditions warrant?",{"$f":"+IF(Checklist!D50=\"\",0,Checklist!D50)","v":0},{"$f":"Weights!E45","v":0.000757},{"$f":"IF(Checklist!C50=\"X\", 0, 1)","v":1},0,0.003028,{"v":0,"d":"0%"},null,2.107,{"$f":"+IF(C45=\"T1\",H45,\" \")","v":" "},{"$f":"+IF(C45=\"T1\",I45,\" \")","v":" "},{"$f":"+IF(C45=\"T2\",H45,\" \")","v":" "},{"$f":"+IF(C45=\"T2\",I45,\" \")","v":" "},{"$f":"+IF(C45=\"T3\",H45,\" \")","v":" "},{"$f":"+IF(C45=\"T3\",I45,\" \")","v":" "}," "," "," "," "," "," ",null,2.107,{"v":0,"d":"0.000000"},0.003028,{"v":0,"d":"0%"}]
[2.108,"B",null,"Have appropriate reference guides or other written instructions or procedures been distributed to transit employees to implement the requirements of the SSP?",{"$f":"+IF(Checklist!D51=\"\",0,Checklist!D51)","v":0},{"$f":"Weights!E46","v":0.000694},{"$f":"IF(Checklist!C51=\"X\", 0, 1)","v":1},0,0.002776,{"v":0,"d":"0%"},null,2.108," "," "," "," "," "," "," "," "," "," "," "," ",null,2.108,{"v":0,"d":"0.000000"},0.002776,{"v":0,"d":"0%"}]
[2.109,"B",null,"Has the agency appointed a Primary and Alternate Security Coordinator to serve as its primary and immediate 24-hr contact for intelligence and security-related contact with TSA and are the names of those Coordinators on file with TSA OSPIE office correct?",{"$f":"+IF(Checklist!D52=\"\",0,Checklist!D52)","v":0},{"$f":"Weights!E47","v":0.000758},{"$f":"IF(Checklist!C52=\"X\", 0, 1)","v":1},0,{"v":3.032E-3,"d":"0.003032"},{"v":0,"d":"0%"},null,2.109," "," "," "," "," "," "," "," "," "," "," "," ",null,2.109,{"v":0,"d":"0.000000"},{"v":3.032E-3,"d":"0.003032"},{"v":0,"d":"0%"}]
[2.11,null,null,"Does the agency maintain a record of security related incidents that are reported within the agency? ",{"$f":"+IF(Checklist!D53=\"\",0,Checklist!D53)","v":0},{"$f":"Weights!E48","v":0.000744},{"$f":"IF(Checklist!C53=\"X\", 0, 1)","v":1},0,0.002976,{"v":0,"d":"0%"},null,2.11," "," "," "," "," "," "," "," "," "," "," "," ",null,null," "," "," "]
[{"v":2.2,"d":"2.200"},null,null,"2.b. Emergency Response Plan (ERP):",{"$nulls":3},{"$f":"SUM(H50:H56)","v":{"v":0,"d":"0.00000"}},{"$f":"SUM(I50:I56)","v":{"v":0.026680000000000002,"d":"0.02668"}},{"$f":"H49/I49","v":{"v":0,"d":"0%"}},null,{"v":2.2,"d":"2.200"},{"$nulls":13},{"v":2.2,"d":"2.200"},{"$f":"SUM(AA50:AA56)","v":{"v":0,"d":"0.000000"}},{"$f":"SUM(AB50:AB56)","v":{"v":0.01904,"d":"0.019040"}},{"$f":"AA49/AB49","v":{"v":0,"d":"0%"}}]
[2.201,null,null,"Does the ERP establish and assign responsibility for implementation of the security program to a Senior Manager who is a \"direct report\" to the agency's Chief Executive Officer?",{"$f":"+IF(Checklist!D55=\"\",0,Checklist!D55)","v":0},{"$f":"Weights!E50","v":{"v":0.00098,"d":"0.000980"}},{"$f":"IF(Checklist!C55=\"X\", 0, 1)","v":1},{"$f":"E50*F50*G50","v":0},{"$f":"F50*G50*4","v":{"v":0.00392,"d":"0.003920"}},{"$f":"H50/I50","v":{"v":0,"d":"0%"}},null,2.201,{"$f":"+IF(C50=\"T1\",H50,\" \")","v":" "},{"$f":"+IF(C50=\"T1\",I50,\" \")","v":" "},{"$f":"+IF(C50=\"T2\",H50,\" \")","v":" "},{"$f":"+IF(C50=\"T2\",I50,\" \")","v":" "},{"$f":"+IF(C50=\"T3\",H50,\" \")","v":" "},{"$f":"+IF(C50=\"T3\",I50,\" \")","v":" "},{"$f":"+IF(C50=\"T4\",H50,\" \")","v":" "},{"$f":"+IF(C50=\"T4\",I50,\" \")","v":" "},{"$f":"+IF(C50=\"T5\",H50,\" \")","v":" "},{"$f":"+IF(C50=\"T5\",I50,\" \")","v":" "},{"$f":"+IF(C50=\"T6\",H50,\" \")","v":" "},{"$f":"+IF(C50=\"T6\",I50,\" \")","v":" "},null,2.201,{"$f":"IF(B50=\"B\",H50,\" \")","v":" "},{"$f":"IF(B50=\"B\",I50,\" \")","v":" "}," "]
[2.202,"B",null,"Are emergency response roles and responsibilities for all departments identified in the ERP or other supporting documents?",{"$f":"+IF(Checklist!D56=\"\",0,Checklist!D56)","v":0},{"$f":"Weights!E51","v":{"v":9.5E-4,"d":"0.000950"}},{"$f":"IF(Checklist!C56=\"X\", 0, 1)","v":1},0,{"v":3.8E-3,"d":"0.003800"},{"v":0,"d":"0%"},null,2.202,{"$f":"+IF(C51=\"T1\",H51,\" \")","v":" "},{"$f":"+IF(C51=\"T1\",I51,\" \")","v":" "},{"$f":"+IF(C51=\"T2\",H51,\" \")","v":" "},{"$f":"+IF(C51=\"T2\",I51,\" \")","v":" "},{"$f":"+IF(C51=\"T3\",H51,\" \")","v":" "},{"$f":"+IF(C51=\"T3\",I51,\" \")","v":" "},{"$f":"+IF(C51=\"T4\",H51,\" \")","v":" "},{"$f":"+IF(C51=\"T4\",I51,\" \")","v":" "},{"$f":"+IF(C51=\"T5\",H51,\" \")","v":" "},{"$f":"+IF(C51=\"T5\",I51,\" \")","v":" "},{"$f":"+IF(C51=\"T6\",H51,\" \")","v":" "},{"$f":"+IF(C51=\"T6\",I51,\" \")","v":" "},null,2.202,{"$f":"IF(B51=\"B\",H51,\" \")","v":{"v":0,"d":"0.000000"}},{"$f":"IF(B51=\"B\",I51,\" \")","v":{"v":3.8E-3,"d":"0.003800"}},{"v":0,"d":"0%"}]
[2.203,"B","T5","Are roles and responsibilities for front-line personnel (i.e. system law enforcement, system security officials, train or vehicle operators, conductors, station attendants, maintenance workers) described in the system's Emergency Response Plan (ERP)?",{"$f":"+IF(Checklist!D57=\"\",0,Checklist!D57)","v":0},{"$f":"Weights!E52","v":{"v":9.5E-4,"d":"0.000950"}},{"$f":"IF(Checklist!C57=\"X\", 0, 1)","v":1},0,{"v":3.8E-3,"d":"0.003800"},{"v":0,"d":"0%"},null,2.203," "," "," "," "," "," "," "," ",0,3.8E-3," "," ",null,2.203,{"v":0,"d":"0.000000"},{"v":3.8E-3,"d":"0.003800"},{"v":0,"d":"0%"}]
[2.204,"B",null,"Has the ERP been distributed to appropriate departments in the organization?",{"$f":"+IF(Checklist!D58=\"\",0,Checklist!D58)","v":0},{"$f":"Weights!E53","v":{"v":0.00096,"d":"0.000960"}},{"$f":"IF(Checklist!C58=\"X\", 0, 1)","v":1},0,{"v":0.00384,"d":"0.003840"},{"v":0,"d":"0%"},null,2.204," "," "," "," "," "," "," "," "," "," "," "," ",null,2.204,{"v":0,"d":"0.000000"},{"v":0.00384,"d":"0.003840"},{"v":0,"d":"0%"}]
[2.205,"B",null,"Have appropriate reference guides or other written instructions or procedures been distributed to transit employees to implement the requirements of the ERP?",{"$f":"+IF(Checklist!D59=\"\",0,Checklist!D59)","v":0},{"$f":"Weights!E54","v":{"v":9.5E-4,"d":"0.000950"}},{"$f":"IF(Checklist!C59=\"X\", 0, 1)","v":1},0,{"v":3.8E-3,"d":"0.003800"},{"v":0,"d":"0%"},null,2.205," "," "," "," "," "," "," "," "," "," "," "," ",null,2.205,{"v":0,"d":"0.000000"},{"v":3.8E-3,"d":"0.003800"},{"v":0,"d":"0%"}]
[2.206,null,null,"Are senior staff and middle management ERP coordination meetings held on a regular basis?",{"$f":"+IF(Checklist!D60=\"\",0,Checklist!D60)","v":0},{"$f":"Weights!E55","v":{"v":0.00093,"d":"0.000930"}},{"$f":"IF(Checklist!C60=\"X\", 0, 1)","v":1},0,{"v":0.00372,"d":"0.003720"},{"v":0,"d":"0%"},null,2.206," "," "," "," "," "," "," "," "," "," "," "," ",null,2.206," "," "," "]
[2.207,"B",null,"Are informational briefings with appropriate personnel held whenever emergency response protocols are substantially changed or updated?",{"$f":"+IF(Checklist!D61=\"\",0,Checklist!D61)","v":0},{"$f":"Weights!E56","v":{"v":9.5E-4,"d":"0.000950"}},{"$f":"IF(Checklist!C61=\"X\", 0, 1)","v":1},0,{"v":3.8E-3,"d":"0.003800"},{"v":0,"d":"0%"},null,2.207," "," "," "," "," "," "," "," "," "," "," "," ",null,2.207,{"v":0,"d":"0.000000"},{"v":3.8E-3,"d":"0.003800"},{"v":0,"d":"0%"}]
[{"v":3,"d":"3.000"},null,null,"Ensure that operations and maintenance supervisors, forepersons and managers are held accountable for security issues under their control",{"$nulls":3},{"$f":"SUM(H58:H61)","v":{"v":0,"d":"0.0000"}},{"$f":"SUM(I58:I61)","v":{"v":0.057999999999999996,"d":"0.0580"}},{"$f":"H57/I57","v":{"v":0,"d":"0%"}},null,{"v":3,"d":"3.000"},{"$nulls":13},{"v":3,"d":"3.000"},{"$f":"SUM(AA58:AA61)","v":{"v":0,"d":"0.000000"}},{"$f":"SUM(AB58:AB61)","v":{"v":0.0436,"d":"0.043600"}},{"$f":"AA57/AB57","v":{"v":0,"d":"0%"}}]
[3.101,"B",null,"Do managers and supervisors routinely provide information to front-line personnel regarding security and emergency response issues?",{"$f":"+IF(Checklist!D63=\"\",0,Checklist!D63)","v":0},{"$f":"Weights!E58","v":{"v":0.0037,"d":"0.003700"}},{"$f":"IF(Checklist!C63=\"X\", 0, 1)","v":1},{"$f":"E58*F58*G58","v":0},{"$f":"F58*G58*4","v":{"v":0.0148,"d":"0.014800"}},{"$f":"H58/I58","v":{"v":0,"d":"0%"}},null,3.101,{"$f":"+IF(C58=\"T1\",H58,\" \")","v":" "},{"$f":"+IF(C58=\"T1\",I58,\" \")","v":" "},{"$f":"+IF(C58=\"T2\",H58,\" \")","v":" "},{"$f":"+IF(C58=\"T2\",I58,\" \")","v":" "},{"$f":"+IF(C58=\"T3\",H58,\" \")","v":" "},{"$f":"+IF(C58=\"T3\",I58,\" \")","v":" "},{"$f":"+IF(C58=\"T4\",H58,\" \")","v":" "},{"$f":"+IF(C58=\"T4\",I58,\" \")","v":" "},{"$f":"+IF(C58=\"T5\",H58,\" \")","v":" "},{"$f":"+IF(C58=\"T5\",I58,\" \")","v":" "},{"$f":"+IF(C58=\"T6\",H58,\" \")","v":" "},{"$f":"+IF(C58=\"T6\",I58,\" \")","v":" "},null,3.101,{"$f":"IF(B58=\"B\",H58,\" \")","v":{"v":0,"d":"0.000000"}},{"$f":"IF(B58=\"B\",I58,\" \")","v":{"v":0.0148,"d":"0.014800"}},{"v":0,"d":"0%"}]
[3.102,null,null,"Are regular supervisor, manager, and/or foreperson security review and coordination briefings held?  If so, detail frequency and subjects covered in the justification.",{"$f":"+IF(Checklist!D64=\"\",0,Checklist!D64)","v":0},{"$f":"Weights!E59","v":{"v":0.0036,"d":"0.003600"}},{"$f":"IF(Checklist!C64=\"X\", 0, 1)","v":1},0,{"v":0.0144,"d":"0.014400"},{"v":0,"d":"0%"},null,3.102,{"$f":"+IF(C59=\"T1\",H59,\" \")","v":" "},{"$f":"+IF(C59=\"T1\",I59,\" \")","v":" "},{"$f":"+IF(C59=\"T2\",H59,\" \")","v":" "},{"$f":"+IF(C59=\"T2\",I59,\" \")","v":" "},{"$f":"+IF(C59=\"T3\",H59,\" \")","v":" "},{"$f":"+IF(C59=\"T3\",I59,\" \")","v":" "},{"$f":"+IF(C59=\"T4\",H59,\" \")","v":" "},{"$f":"+IF(C59=\"T4\",I59,\" \")","v":" "},{"$f":"+IF(C59=\"T5\",H59,\" \")","v":" "},{"$f":"+IF(C59=\"T5\",I59,\" \")","v":" "},{"$f":"+IF(C59=\"T6\",H59,\" \")","v":" "},{"$f":"+IF(C59=\"T6\",I59,\" \")","v":" "},null,3.102,{"$f":"IF(B59=\"B\",H59,\" \")","v":" "},{"$f":"IF(B59=\"B\",I59,\" \")","v":" "}," "]
[3.103,"B",null,"Does the agency have a program for confirming that personnel have a working knowledge of security protocols?  If so, summarize program in the justification.",{"$f":"+IF(Checklist!D65=\"\",0,Checklist!D65)","v":0},{"$f":"Weights!E60","v":{"v":0.0036,"d":"0.003600"}},{"$f":"IF(Checklist!C65=\"X\", 0, 1)","v":1},0,{"v":0.0144,"d":"0.014400"},{"v":0,"d":"0%"},null,3.103," "," "," "," "," "," "," "," "," "," "," "," ",null,3.103,{"$f":"IF(B60=\"B\",H60,\" \")","v":{"v":0,"d":"0.000000"}},{"$f":"IF(B60=\"B\",I60,\" \")","v":{"v":0.0144,"d":"0.014400"}},{"v":0,"d":"0%"}]
[3.104,"B",null,"Are managers and/or supervisors required to debrief front-line employees regarding their involvement in or management of any security or emergency incidents?",{"$f":"+IF(Checklist!D66=\"\",0,Checklist!D66)","v":0},{"$f":"Weights!E61","v":{"v":0.0036,"d":"0.003600"}},{"$f":"IF(Checklist!C66=\"X\", 0, 1)","v":1},0,{"v":0.0144,"d":"0.014400"},{"v":0,"d":"0%"},null,3.104," "," "," "," "," "," "," "," "," "," "," "," ",null,3.104,{"$f":"IF(B61=\"B\",H61,\" \")","v":{"v":0,"d":"0.000000"}},{"$f":"IF(B61=\"B\",I61,\" \")","v":{"v":0.0144,"d":"0.014400"}},{"v":0,"d":"0%"}]
[{"v":4,"d":"4.000"},null,null,"Coordinate Security and Emergency Management Plan(s) with local and regional agencies",{"$nulls":3},{"$f":"SUM(H63:H73)","v":{"v":0,"d":"0.0000"}},{"$f":"SUM(I63:I73)","v":{"v":0.05841600000000001,"d":"0.0584"}},{"$f":"H62/I62","v":{"v":0,"d":"0%"}},null,{"v":4,"d":"4.000"},{"$nulls":13},{"v":4,"d":"4.000"},{"$f":"SUM(AA63:AA73)","v":{"v":0,"d":"0.000000"}},{"$f":"SUM(AB63:AB73)","v":0.032136},{"$f":"AA62/AB62","v":{"v":0,"d":"0%"}}]
[4.101,null,null,"Have Mutual Aid agreements been established between the transit agency and entities in the area that would be called upon to supplement the agency's resources in the event of an emergency event? ",{"$f":"+IF(Checklist!D68=\"\",0,Checklist!D68)","v":0},{"$f":"Weights!E63","v":0.001331},{"$f":"IF(Checklist!C68=\"X\", 0, 1)","v":1},{"$f":"E63*F63*G63","v":0},{"$f":"F63*G63*4","v":0.005324},{"$f":"H63/I63","v":{"v":0,"d":"0%"}},null,4.101,{"$f":"+IF(C63=\"T1\",H63,\" \")","v":" "},{"$f":"+IF(C63=\"T1\",I63,\" \")","v":" "},{"$f":"+IF(C63=\"T2\",H63,\" \")","v":" "},{"$f":"+IF(C63=\"T2\",I63,\" \")","v":" "},{"$f":"+IF(C63=\"T3\",H63,\" \")","v":" "},{"$f":"+IF(C63=\"T3\",I63,\" \")","v":" "},{"$f":"+IF(C63=\"T4\",H63,\" \")","v":" "},{"$f":"+IF(C63=\"T4\",I63,\" \")","v":" "},{"$f":"+IF(C63=\"T5\",H63,\" \")","v":" "},{"$f":"+IF(C63=\"T5\",I63,\" \")","v":" "},{"$f":"+IF(C63=\"T6\",H63,\" \")","v":" "},{"$f":"+IF(C63=\"T6\",I63,\" \")","v":" "},null,4.101,{"$f":"IF(B63=\"B\",H63,\" \")","v":" "},{"$f":"IF(B63=\"B\",I63,\" \")","v":" "}," "]
[4.102,"B",null,"Does the agency participate in a regional Emergency Management Working Group or similar regional coordinating body for emergency preparedness and response?",{"$f":"+IF(Checklist!D69=\"\",0,Checklist!D69)","v":0},{"$f":"Weights!E64","v":0.001336},{"$f":"IF(Checklist!C69=\"X\", 0, 1)","v":1},0,0.005344,{"v":0,"d":"0%"},null,4.102,{"$f":"+IF(C64=\"T1\",H64,\" \")","v":" "},{"$f":"+IF(C64=\"T1\",I64,\" \")","v":" "},{"$f":"+IF(C64=\"T2\",H64,\" \")","v":" "},{"$f":"+IF(C64=\"T2\",I64,\" \")","v":" "},{"$f":"+IF(C64=\"T3\",H64,\" \")","v":" "},{"$f":"+IF(C64=\"T3\",I64,\" \")","v":" "},{"$f":"+IF(C64=\"T4\",H64,\" \")","v":" "},{"$f":"+IF(C64=\"T4\",I64,\" \")","v":" "},{"$f":"+IF(C64=\"T5\",H64,\" \")","v":" "},{"$f":"+IF(C64=\"T5\",I64,\" \")","v":" "},{"$f":"+IF(C64=\"T6\",H64,\" \")","v":" "},{"$f":"+IF(C64=\"T6\",I64,\" \")","v":" "},null,4.102,{"$f":"IF(B64=\"B\",H64,\" \")","v":{"v":0,"d":"0.000000"}},{"$f":"IF(B64=\"B\",I64,\" \")","v":0.005344},{"v":0,"d":"0%"}]
[4.103,"B",null,"Have regional incident management protocols been shared with the agency and incorporated into the agency's ERP/SSP/SEPP?",{"$f":"+IF(Checklist!D70=\"\",0,Checklist!D70)","v":0},{"$f":"Weights!E65","v":0.001293},{"$f":"IF(Checklist!C70=\"X\", 0, 1)","v":1},0,0.005172,{"v":0,"d":"0%"},null,4.103," "," "," "," "," "," "," "," "," "," "," "," ",null,4.103,{"v":0,"d":"0.000000"},0.005172,{"v":0,"d":"0%"}]
[4.104,null,null,"Have agency resources been appropriately identified and provided to the regional EMA?",{"$f":"+IF(Checklist!D71=\"\",0,Checklist!D71)","v":0},{"$f":"Weights!E66","v":{"v":1.263E-3,"d":"0.001263"}},{"$f":"IF(Checklist!C71=\"X\", 0, 1)","v":1},0,0.005052,{"v":0,"d":"0%"},null,4.104," "," "," "," "," "," "," "," "," "," "," "," ",null,4.104," "," "," "]
[4.105,"B",null,"Does the agency have a designated point-of-contact or liaison with the local/regional Emergency Operations Center (EOC)?",{"$f":"+IF(Checklist!D72=\"\",0,Checklist!D72)","v":0},{"$f":"Weights!E67","v":0.001394},{"$f":"IF(Checklist!C72=\"X\", 0, 1)","v":1},0,0.005576,{"v":0,"d":"0%"},null,4.105," "," "," "," "," "," "," "," "," "," "," "," ",null,4.105,{"v":0,"d":"0.000000"},0.005576,{"v":0,"d":"0%"}]
[4.106,null,null,"Does the agency send a representative to the local/regional EOC, should it be activated?",{"$f":"+IF(Checklist!D73=\"\",0,Checklist!D73)","v":0},{"$f":"Weights!E68","v":0.001347},{"$f":"IF(Checklist!C73=\"X\", 0, 1)","v":1},0,0.005388,{"v":0,"d":"0%"},null,4.106," "," "," "," "," "," "," "," "," "," "," "," ",null,4.106," "," "," "]
[4.107,null,null,"Does the agency have information sharing capabilities with the regional/local EOC (i.e., contacts, procedures, resource inventories, etc.)?",{"$f":"+IF(Checklist!D74=\"\",0,Checklist!D74)","v":0},{"$f":"Weights!E69","v":{"v":1.343E-3,"d":"0.001343"}},{"$f":"IF(Checklist!C74=\"X\", 0, 1)","v":1},0,{"v":5.372E-3,"d":"0.005372"},{"v":0,"d":"0%"},null,4.107," "," "," "," "," "," "," "," "," "," "," "," ",null,4.107," "," "," "]
[4.108,"B",null,"Has the agency developed internal incident management protocols that comply with the National Response Plan and the National Incident Management System (NIMS)?",{"$f":"+IF(Checklist!D75=\"\",0,Checklist!D75)","v":0},{"$f":"Weights!E70","v":0.001314},{"$f":"IF(Checklist!C75=\"X\", 0, 1)","v":1},0,0.005256,{"v":0,"d":"0%"},null,4.108," "," "," "," "," "," "," "," "," "," "," "," ",null,4.108,{"v":0,"d":"0.000000"},0.005256,{"v":0,"d":"0%"}]
[4.109,null,null,"Have the agency's emergency response protocols been shared with the EMA and appropriate first responder agencies?",{"$f":"+IF(Checklist!D76=\"\",0,Checklist!D76)","v":0},{"$f":"Weights!E71","v":{"v":1.286E-3,"d":"0.001286"}},{"$f":"IF(Checklist!C76=\"X\", 0, 1)","v":1},0,0.005144,{"v":0,"d":"0%"},null,4.109," "," "," "," "," "," "," "," "," "," "," "," ",null,4.109," "," "," "]
[{"v":4.11,"d":"4.110"},"B","T5","Has the transit system tested its communications systems for interoperability with appropriate emergency response agencies? ",{"$f":"+IF(Checklist!D77=\"\",0,Checklist!D77)","v":0},{"$f":"Weights!E72","v":{"v":1.325E-3,"d":"0.001325"}},{"$f":"IF(Checklist!C77=\"X\", 0, 1)","v":1},0,{"v":5.3E-3,"d":"0.005300"},{"v":0,"d":"0%"},null,{"v":4.11,"d":"4.110"}," "," "," "," "," "," "," "," ",0,5.3E-3," "," ",null,{"v":4.11,"d":"4.110"},{"v":0,"d":"0.000000"},{"v":5.3E-3,"d":"0.005300"},{"v":0,"d":"0%"}]
[4.111,"B",null,"If the agency's communications systems are NOT inter-operable with appropriate emergency response agencies, have alternate communication protocols been established?  Describe the alternate communication protocols in the justification.",{"$f":"+IF(Checklist!D78=\"\",0,Checklist!D78)","v":0},{"$f":"Weights!E73","v":{"v":1.372E-3,"d":"0.001372"}},{"$f":"IF(Checklist!C78=\"X\", 0, 1)","v":1},0,0.005488,{"v":0,"d":"0%"},null,4.111," "," "," "," "," "," "," "," "," "," "," "," ",null,4.111,{"v":0,"d":"0.000000"},0.005488,{"v":0,"d":"0%"}]
[{"$nulls":3},"SECURITY AND EMERGENCY RESPONSE TRAINING"]
[{"v":5,"d":"5.000"},null,null,"Establish and Maintain a Security and Emergency Training Program",{"$nulls":3},{"$f":"SUM(H76:H107)","v":{"v":0,"d":"0.0000"}},{"$f":"SUM(I76:I107)","v":{"v":0.05965237066748945,"d":"0.0597"}},{"$f":"H75/I75","v":{"v":0,"d":"0%"}},null,{"v":5,"d":"5.000"},{"$nulls":13},{"v":5,"d":"5.000"},{"$f":"SUM(AA76:AA107)","v":{"v":0,"d":"0.000000"}},{"$f":"SUM(AB76:AB107)","v":{"v":0.02991473885478748,"d":"0.029915"}},{"$f":"AA75/AB75","v":{"v":0,"d":"0%"}}]
[5.101,"B","T4","Is initial training provided to all new agency employees regarding security orientation/awareness?",{"$f":"+IF(Checklist!D81=\"\",0,Checklist!D81)","v":0},{"$f":"Weights!E76","v":{"v":0.000487928746457381,"d":"0.000488"}},{"$f":"IF(Checklist!C81=\"X\", 0, 1)","v":1},{"$f":"E76*F76*G76","v":0},{"$f":"F76*G76*4","v":{"v":0.001951714985829524,"d":"0.001952"}},{"$f":"H76/I76","v":{"v":0,"d":"0%"}},null,5.101,{"$f":"+IF(C76=\"T1\",H76,\" \")","v":" "},{"$f":"+IF(C76=\"T1\",I76,\" \")","v":" "},{"$f":"+IF(C76=\"T2\",H76,\" \")","v":" "},{"$f":"+IF(C76=\"T2\",I76,\" \")","v":" "},{"$f":"+IF(C76=\"T3\",H76,\" \")","v":" "},{"$f":"+IF(C76=\"T3\",I76,\" \")","v":" "},{"$f":"+IF(C76=\"T4\",H76,\" \")","v":0},{"$f":"+IF(C76=\"T4\",I76,\" \")","v":0.001951714985829524},{"$f":"+IF(C76=\"T5\",H76,\" \")","v":" "},{"$f":"+IF(C76=\"T5\",I76,\" \")","v":" "},{"$f":"+IF(C76=\"T6\",H76,\" \")","v":" "},{"$f":"+IF(C76=\"T6\",I76,\" \")","v":" "},null,5.101,{"$f":"IF(B76=\"B\",H76,\" \")","v":{"v":0,"d":"0.000000"}},{"$f":"IF(B76=\"B\",I76,\" \")","v":{"v":0.001951714985829524,"d":"0.001952"}},{"$f":"IF(AA76=\"NOT SCORED\",\"NOT SCORED\",IF(B76=\"B\",AA76/AB76,\" \"))","v":{"v":0,"d":"0%"}}]
[5.102,null,"T4","Is annual refresher training provided regarding security orientation/awareness to Senior Management staff, managers and supervisors?",{"$f":"+IF(Checklist!D82=\"\",0,Checklist!D82)","v":0},{"$f":"Weights!E77","v":{"v":0.00047312575801753,"d":"0.000473"}},{"$f":"IF(Checklist!C82=\"X\", 0, 1)","v":1},0,{"v":1.89250303207012E-3,"d":"0.001893"},{"v":0,"d":"0%"},null,5.102,{"$f":"+IF(C77=\"T1\",H77,\" \")","v":" "},{"$f":"+IF(C77=\"T1\",I77,\" \")","v":" "},{"$f":"+IF(C77=\"T2\",H77,\" \")","v":" "},{"$f":"+IF(C77=\"T2\",I77,\" \")","v":" "},{"$f":"+IF(C77=\"T3\",H77,\" \")","v":" "},{"$f":"+IF(C77=\"T3\",I77,\" \")","v":" "},{"$f":"+IF(C77=\"T4\",H77,\" \")","v":0},{"$f":"+IF(C77=\"T4\",I77,\" \")","v":1.89250303207012E-3},{"$f":"+IF(C77=\"T5\",H77,\" \")","v":" "},{"$f":"+IF(C77=\"T5\",I77,\" \")","v":" "},{"$f":"+IF(C77=\"T6\",H77,\" \")","v":" "},{"$f":"+IF(C77=\"T6\",I77,\" \")","v":" "},null,5.102,{"$f":"IF(B77=\"B\",H77,\" \")","v":" "},{"$f":"IF(B77=\"B\",I77,\" \")","v":" "}," "]
[5.103,"B","T4","Is annual refresher training provided regarding security orientation/awareness to managers and supervisors? ",{"$f":"+IF(Checklist!D83=\"\",0,Checklist!D83)","v":0},{"$f":"Weights!E78","v":{"v":0.000475541379263667,"d":"0.000476"}},{"$f":"IF(Checklist!C83=\"X\", 0, 1)","v":1},0,{"v":0.001902165517054668,"d":"0.001902"},{"v":0,"d":"0%"},null,5.103," "," "," "," "," "," ",0,0.001902165517054668," "," "," "," ",null,5.103,{"v":0,"d":"0.000000"},{"v":0.001902165517054668,"d":"0.001902"},{"v":0,"d":"0%"}]
[5.104,"B","T4","Is annual refresher training provided regarding security orientation/awareness  to front-line employees? ",{"$f":"+IF(Checklist!D84=\"\",0,Checklist!D84)","v":0},{"$f":"Weights!E79","v":{"v":0.000472456850266779,"d":"0.000472"}},{"$f":"IF(Checklist!C84=\"X\", 0, 1)","v":1},0,{"v":0.001889827401067116,"d":"0.001890"},{"v":0,"d":"0%"},null,5.104," "," "," "," "," "," ",0,0.001889827401067116," "," "," "," ",null,5.104,{"v":0,"d":"0.000000"},{"v":0.001889827401067116,"d":"0.001890"},{"v":0,"d":"0%"}]
[5.105,null,null,"Is ongoing advanced security training focused on job function provided at least annually?",{"$f":"+IF(Checklist!D85=\"\",0,Checklist!D85)","v":0},{"$f":"Weights!E80","v":{"v":0.000467883352386892,"d":"0.000468"}},{"$f":"IF(Checklist!C85=\"X\", 0, 1)","v":1},0,{"v":1.871533409547568E-3,"d":"0.001872"},{"v":0,"d":"0%"},null,5.105," "," "," "," "," "," "," "," "," "," "," "," ",null,5.105," "," "," "]
[5.106,"B","T4","Is initial training provided to all new transit employees regarding emergency response?",{"$f":"+IF(Checklist!D86=\"\",0,Checklist!D86)","v":0},{"$f":"Weights!E81","v":{"v":0.000484489080362702,"d":"0.000484"}},{"$f":"IF(Checklist!C86=\"X\", 0, 1)","v":1},0,{"v":1.937956321450808E-3,"d":"0.001938"},{"v":0,"d":"0%"},null,5.106," "," "," "," "," "," ",0,1.937956321450808E-3," "," "," "," ",null,5.106,{"v":0,"d":"0.000000"},{"v":1.937956321450808E-3,"d":"0.001938"},{"v":0,"d":"0%"}]
[5.107,null,"T4"," Is annual refresher training provided regarding emergency response to Senior Management staff, supervisors, and managers?",{"$f":"+IF(Checklist!D87=\"\",0,Checklist!D87)","v":0},{"$f":"Weights!E82","v":{"v":0.000472331155893336,"d":"0.000472"}},{"$f":"IF(Checklist!C87=\"X\", 0, 1)","v":1},0,{"v":1.889324623573344E-3,"d":"0.001889"},{"v":0,"d":"0%"},null,5.107," "," "," "," "," "," ",0,1.889324623573344E-3," "," "," "," ",null,5.107," "," "," "]
[5.108,"B","T4","Is annual refresher training provided regarding emergency response to Managers and Supervisors?",{"$f":"+IF(Checklist!D88=\"\",0,Checklist!D88)","v":0},{"$f":"Weights!E83","v":{"v":0.000477200601856777,"d":"0.000477"}},{"$f":"IF(Checklist!C88=\"X\", 0, 1)","v":1},0,{"v":0.001908802407427108,"d":"0.001909"},{"v":0,"d":"0%"},null,5.108," "," "," "," "," "," ",0,0.001908802407427108," "," "," "," ",null,5.108,{"v":0,"d":"0.000000"},{"v":0.001908802407427108,"d":"0.001909"},{"v":0,"d":"0%"}]
[5.109,"B","T4","Is annual refresher training provided regarding emergency response to front-line Employees?",{"$f":"+IF(Checklist!D89=\"\",0,Checklist!D89)","v":0},{"$f":"Weights!E84","v":{"v":0.000472176776887891,"d":"0.000472"}},{"$f":"IF(Checklist!C89=\"X\", 0, 1)","v":1},0,{"v":0.001888707107551564,"d":"0.001889"},{"v":0,"d":"0%"},null,5.109," "," "," "," "," "," ",0,0.001888707107551564," "," "," "," ",null,5.109,{"v":0,"d":"0.000000"},{"v":0.001888707107551564,"d":"0.001889"},{"v":0,"d":"0%"}]
[{"v":5.11,"d":"5.110"},"B","T4","Have agency employees received general training on Incident Command System (ICS) procedures in accordance with National Incident Management System at least annually?",{"$f":"+IF(Checklist!D90=\"\",0,Checklist!D90)","v":0},{"$f":"Weights!E85","v":{"v":4.62040847141104E-4,"d":"0.000462"}},{"$f":"IF(Checklist!C90=\"X\", 0, 1)","v":1},0,{"v":1.848163388564416E-3,"d":"0.001848"},{"v":0,"d":"0%"},null,{"v":5.11,"d":"5.110"}," "," "," "," "," "," ",0,1.848163388564416E-3," "," "," "," ",null,{"v":5.11,"d":"5.110"},{"v":0,"d":"0.000000"},{"v":1.848163388564416E-3,"d":"0.001848"},{"v":0,"d":"0%"}]
[5.111,null,null," Has ICS and NIMS training appropriate to the position been provided to Senior Management staff, supervisors, and managers at least annually?  ",{"$f":"+IF(Checklist!D91=\"\",0,Checklist!D91)","v":0},{"$f":"Weights!E86","v":{"v":0.000440190621929495,"d":"0.000440"}},{"$f":"IF(Checklist!C91=\"X\", 0, 1)","v":1},0,{"v":0.00176076248771798,"d":"0.001761"},{"v":0,"d":"0%"},null,5.111," "," "," "," "," "," "," "," "," "," "," "," ",null,5.111," "," "," "]
[5.112,"B",null,"Has ICS and NIMS training appropriate to the position been provided to managers and supervisors at least annually? ",{"$f":"+IF(Checklist!D92=\"\",0,Checklist!D92)","v":0},{"$f":"Weights!E87","v":{"v":0.00046550487734309,"d":"0.000466"}},{"$f":"IF(Checklist!C92=\"X\", 0, 1)","v":1},0,{"v":1.86201950937236E-3,"d":"0.001862"},{"v":0,"d":"0%"},null,5.112," "," "," "," "," "," "," "," "," "," "," "," ",null,5.112,{"v":0,"d":"0.000000"},{"v":1.86201950937236E-3,"d":"0.001862"},{"v":0,"d":"0%"}]
[5.113,null,null,"Has ICS and NIMS training appropriate to the position been provided to front-line employees at least annually?",{"$f":"+IF(Checklist!D93=\"\",0,Checklist!D93)","v":0},{"$f":"Weights!E88","v":{"v":4.4980538460371E-4,"d":"0.000450"}},{"$f":"IF(Checklist!C93=\"X\", 0, 1)","v":1},0,{"v":1.79922153841484E-3,"d":"0.001799"},{"v":0,"d":"0%"},null,5.113," "," "," "," "," "," "," "," "," "," "," "," ",null,5.113," "," "," "]
[5.114,"B",null,"Has the agency developed a program and provided annual training on its own incident response protocols?",{"$f":"+IF(Checklist!D94=\"\",0,Checklist!D94)","v":0},{"$f":"Weights!E89","v":{"v":0.00047380099030864,"d":"0.000474"}},{"$f":"IF(Checklist!C94=\"X\", 0, 1)","v":1},0,{"v":0.00189520396123456,"d":"0.001895"},{"v":0,"d":"0%"},null,5.114," "," "," "," "," "," "," "," "," "," "," "," ",null,5.114,{"v":0,"d":"0.000000"},{"v":0.00189520396123456,"d":"0.001895"},{"v":0,"d":"0%"}]
[5.115,null,"T4","Has training on the agency's incident response protocols appropriate to the position been provided to Senior Management staff, managers and supervisors at least annually?                                      ",{"$f":"+IF(Checklist!D95=\"\",0,Checklist!D95)","v":0},{"$f":"Weights!E90","v":{"v":0.000464969681741424,"d":"0.000465"}},{"$f":"IF(Checklist!C95=\"X\", 0, 1)","v":1},0,{"v":0.001859878726965696,"d":"0.001860"},{"v":0,"d":"0%"},null,5.115," "," "," "," "," "," ",0,0.001859878726965696," "," "," "," ",null,5.115," "," "," "]
[5.116,"B","T4","Has training on the agency's incident response protocols appropriate to the position been provided to managers and supervisors? ",{"$f":"+IF(Checklist!D96=\"\",0,Checklist!D96)","v":0},{"$f":"Weights!E91","v":{"v":0.000470552563467142,"d":"0.000471"}},{"$f":"IF(Checklist!C96=\"X\", 0, 1)","v":1},0,{"v":0.001882210253868568,"d":"0.001882"},{"v":0,"d":"0%"},null,5.116," "," "," "," "," "," ",0,0.001882210253868568," "," "," "," ",null,5.116,{"v":0,"d":"0.000000"},{"v":0.001882210253868568,"d":"0.001882"},{"v":0,"d":"0%"}]
[5.117,"B","T4"," Has training on the agency's incident response protocols appropriate to the position been provided to front-line employees at least annually?",{"$f":"+IF(Checklist!D97=\"\",0,Checklist!D97)","v":0},{"$f":"Weights!E92","v":{"v":0.000467856296932919,"d":"0.000468"}},{"$f":"IF(Checklist!C97=\"X\", 0, 1)","v":1},0,{"v":1.871425187731676E-3,"d":"0.001871"},{"v":0,"d":"0%"},null,5.117," "," "," "," "," "," ",0,1.871425187731676E-3," "," "," "," ",null,5.117,{"v":0,"d":"0.000000"},{"v":1.871425187731676E-3,"d":"0.001871"},{"v":0,"d":"0%"}]
[5.118,null,"T4","Has the transit system implemented an annual training program for personnel regarding response to terrorism, including (i) Improvised Explosive Devices and ii) Weapons of Mass Destruction (chemical, biological, radiological, nuclear)?  If so, summarize the relevant programs in the justification?",{"$f":"+IF(Checklist!D98=\"\",0,Checklist!D98)","v":0},{"$f":"Weights!E93","v":{"v":0.00043045542574805,"d":"0.000430"}},{"$f":"IF(Checklist!C98=\"X\", 0, 1)","v":1},0,{"v":0.0017218217029922,"d":"0.001722"},{"v":0,"d":"0%"},null,5.118," "," "," "," "," "," ",0,0.0017218217029922," "," "," "," ",null,5.118," "," "," "]
[5.119,null,null,"Has training focused on IEDs and WMDs appropriate to the position been provided to Senior Management staff, managers, and supervisors at least annually?                                                ",{"$f":"+IF(Checklist!D99=\"\",0,Checklist!D99)","v":0},{"$f":"Weights!E94","v":{"v":0.000460300554975443,"d":"0.000460"}},{"$f":"IF(Checklist!C99=\"X\", 0, 1)","v":1},0,{"v":1.841202219901772E-3,"d":"0.001841"},{"v":0,"d":"0%"},null,5.119," "," "," "," "," "," "," "," "," "," "," "," ",null,5.119," "," "," "]
[{"v":5.12,"d":"5.120"},null,null,"Has training focused on IEDs and WMDs appropriate to the position been provided to manager and supervisors?",{"$f":"+IF(Checklist!D100=\"\",0,Checklist!D100)","v":0},{"$f":"Weights!E95","v":{"v":0.000475592078875264,"d":"0.000476"}},{"$f":"IF(Checklist!C100=\"X\", 0, 1)","v":1},0,{"v":1.902368315501056E-3,"d":"0.001902"},{"v":0,"d":"0%"},null,{"v":5.12,"d":"5.120"}," "," "," "," "," "," "," "," "," "," "," "," ",null,{"v":5.12,"d":"5.120"}," "," "," "]
[5.121,null,null,"Has training focused on IEDs and WMDs appropriate to the position been provided to front-line employees at least annually? ",{"$f":"+IF(Checklist!D101=\"\",0,Checklist!D101)","v":0},{"$f":"Weights!E96","v":{"v":0.000470336960106654,"d":"0.000470"}},{"$f":"IF(Checklist!C101=\"X\", 0, 1)","v":1},0,{"v":0.001881347840426616,"d":"0.001881"},{"v":0,"d":"0%"},null,5.121," "," "," "," "," "," "," "," "," "," "," "," ",null,5.121," "," "," "]
[5.122,null,null,"Do law enforcement/security department personnel at the agency receive specialized training in counter-terrorism annually? Summarize program in the justification.",{"$f":"+IF(Checklist!D102=\"\",0,Checklist!D102)","v":0},{"$f":"Weights!E97","v":{"v":0.000483931223688622,"d":"0.000484"}},{"$f":"IF(Checklist!C102=\"X\", 0, 1)","v":1},0,{"v":0.001935724894754488,"d":"0.001936"},{"v":0,"d":"0%"},null,5.122," "," "," "," "," "," "," "," "," "," "," "," ",null,5.122," "," "," "]
[5.123,null,null,"Do law enforcement/security department personnel at the agency receive specialized training supporting their incident management and emergency response roles at least annually? Summarize program in the justification. ",{"$f":"+IF(Checklist!D103=\"\",0,Checklist!D103)","v":0},{"$f":"Weights!E98","v":{"v":0.000485520861932092,"d":"0.000486"}},{"$f":"IF(Checklist!C103=\"X\", 0, 1)","v":1},0,{"v":0.001942083447728368,"d":"0.001942"},{"v":0,"d":"0%"},null,5.123," "," "," "," "," "," "," "," "," "," "," "," ",null,5.123," "," "," "]
[5.124,"B",null," Does the agency have an established program to monitor employee training and to schedule employees for training?",{"$f":"+IF(Checklist!D104=\"\",0,Checklist!D104)","v":0},{"$f":"Weights!E99","v":{"v":0.000464591962654644,"d":"0.000465"}},{"$f":"IF(Checklist!C104=\"X\", 0, 1)","v":1},0,{"v":0.001858367850618576,"d":"0.001858"},{"v":0,"d":"0%"},null,5.124," "," "," "," "," "," "," "," "," "," "," "," ",null,5.124,{"v":0,"d":"0.000000"},{"v":0.001858367850618576,"d":"0.001858"},{"v":0,"d":"0%"}]
[5.125,null,null,"Does the agency have a system that records and tracks personnel training for all security-related courses (including initial, annual, periodic and other)?",{"$f":"+IF(Checklist!D105=\"\",0,Checklist!D105)","v":0},{"$f":"Weights!E100","v":{"v":0.000460540979970563,"d":"0.000461"}},{"$f":"IF(Checklist!C105=\"X\", 0, 1)","v":1},0,{"v":0.001842163919882252,"d":"0.001842"},{"v":0,"d":"0%"},null,5.125," "," "," "," "," "," "," "," "," "," "," "," ",null,5.125," "," "," "]
[5.126,null,null,"Does the transit agency have a system that records and tracks personnel training for emergency response courses (including initial, periodic and other)?",{"$f":"+IF(Checklist!D106=\"\",0,Checklist!D106)","v":0},{"$f":"Weights!E101","v":{"v":0.000461316480359174,"d":"0.000461"}},{"$f":"IF(Checklist!C106=\"X\", 0, 1)","v":1},0,{"v":0.001845265921436696,"d":"0.001845"},{"v":0,"d":"0%"},null,5.126," "," "," "," "," "," "," "," "," "," "," "," ",null,5.126," "," "," "]
[5.127,null,null,"Does the agency have a program to regularly review and update security awareness and emergency response training materials?",{"$f":"+IF(Checklist!D107=\"\",0,Checklist!D107)","v":0},{"$f":"Weights!E102","v":{"v":0.000457362354476246,"d":"0.000457"}},{"$f":"IF(Checklist!C107=\"X\", 0, 1)","v":1},0,{"v":1.829449417904984E-3,"d":"0.001829"},{"v":0,"d":"0%"},null,5.127," "," "," "," "," "," "," "," "," "," "," "," ",null,5.127," "," "," "]
[5.128,"B","T4","Are all appropriate personnel notified via briefings, email, voicemail, or signage of changes in threat condition, protective measures or the employee watch programs?",{"$f":"+IF(Checklist!D108=\"\",0,Checklist!D108)","v":0},{"$f":"Weights!E103","v":{"v":0.000478910524061484,"d":"0.000479"}},{"$f":"IF(Checklist!C108=\"X\", 0, 1)","v":1},0,{"v":0.001915642096245936,"d":"0.001916"},{"v":0,"d":"0%"},null,5.128," "," "," "," "," "," ",0,0.001915642096245936," "," "," "," ",null,5.128,{"v":0,"d":"0.000000"},{"v":0.001915642096245936,"d":"0.001916"},{"v":0,"d":"0%"}]
[5.129,"B","T1","Do the agency's security awareness and emergency response training programs cover response and recovery operations in critical facilities and infrastructure?  If so, summarize relevant provisions of program in the justification.",{"$f":"+IF(Checklist!D109=\"\",0,Checklist!D109)","v":0},{"$f":"Weights!E104","v":{"v":0.000459250516841564,"d":"0.000459"}},{"$f":"IF(Checklist!C109=\"X\", 0, 1)","v":1},0,{"v":0.001837002067366256,"d":"0.001837"},{"v":0,"d":"0%"},null,5.129,0,{"v":0.001837002067366256,"d":"0.001837"}," "," "," "," "," "," "," "," "," "," ",null,5.129,{"v":0,"d":"0.000000"},{"v":0.001837002067366256,"d":"0.001837"},{"v":0,"d":"0%"}]
[{"v":5.13,"d":"5.130"},"B","T1","Has the agency provided training to regional first responders (law enforcement agencies, firefighters, and emergency medical response teams) to enable them to operate in critical facilities and infrastructure?",{"$f":"+IF(Checklist!D110=\"\",0,Checklist!D110)","v":0},{"$f":"Weights!E105","v":{"v":0.000432079639168799,"d":"0.000432"}},{"$f":"IF(Checklist!C110=\"X\", 0, 1)","v":1},0,{"v":0.001728318556675196,"d":"0.001728"},{"v":0,"d":"0%"},null,{"v":5.13,"d":"5.130"},0,{"v":0.001728318556675196,"d":"0.001728"}," "," "," "," "," "," "," "," "," "," ",null,{"v":5.13,"d":"5.130"},{"v":0,"d":"0.000000"},{"v":0.001728318556675196,"d":"0.001728"},{"v":0,"d":"0%"}]
[5.131,null,"T3","Does training of transit system law enforcement and/or security personnel integrate the concept and employment of visible, random security measures? ",{"$f":"+IF(Checklist!D111=\"\",0,Checklist!D111)","v":0},{"$f":"Weights!E106","v":{"v":0.000480745078470998,"d":"0.000481"}},{"$f":"IF(Checklist!C111=\"X\", 0, 1)","v":1},0,{"v":0.001922980313883992,"d":"0.001923"},{"v":0,"d":"0%"},null,5.131," "," "," "," ",0,0.001922980313883992," "," "," "," "," "," ",null,5.131," "," "," "]
[5.132,"B","T4","Has the agency implemented a program to train or orient first responders (law enforcement, firefighters, emergency medical teams) and other potential supporting assets (e.g., TSA regional personnel for VIPR exercises) on their system vehicle familiarization?",{"$f":"+IF(Checklist!D112=\"\",0,Checklist!D112)","v":0},{"$f":"Weights!E107","v":{"v":4.34303060682288E-4,"d":"0.000434"}},{"$f":"IF(Checklist!C112=\"X\", 0, 1)","v":1},0,{"v":1.737212242729152E-3,"d":"0.001737"},{"v":0,"d":"0%"},null,5.132," "," "," "," "," "," ",0,1.737212242729152E-3," "," "," "," ",null,5.132,{"v":0,"d":"0.000000"},{"v":1.737212242729152E-3,"d":"0.001737"},{"v":0,"d":"0%"}]
[{"$nulls":3},"HOMELAND SECURITY ADVISORY SYSTEM (HSAS)  "]
[{"v":6,"d":"6.000"},null,null,"Establish plans and protocols to respond to the National Terrorism Advisory System (NTAS) alert system",{"$nulls":3},{"$f":"SUM(H110:H112)","v":{"v":0,"d":"0.0000"}},{"$f":"SUM(I110:I112)","v":{"v":0.05584,"d":"0.0558"}},{"$f":"H109/I109","v":{"v":0,"d":"0%"}},null,{"v":6,"d":"6.000"},{"$nulls":13},{"v":6,"d":"6.000"},{"$f":"SUM(AA110:AA112)","v":{"v":0,"d":"0.000000"}},{"$f":"SUM(AB110:AB112)","v":0.03652},{"$f":"AA109/AB109","v":{"v":0,"d":"0%"}}]
[6.101,"B",null,"Does the SSP contain or reference other documents identifying incremental actions (imminent or elevated) to be implemented for a NTAS threat?",{"$f":"+IF(Checklist!D115=\"\",0,Checklist!D115)","v":0},{"$f":"Weights!E110","v":{"v":0.00439,"d":"0.004390"}},{"$f":"IF(Checklist!C115=\"X\", 0, 1)","v":1},{"$f":"E110*F110*G110","v":0},{"$f":"F110*G110*4","v":{"v":0.01756,"d":"0.017560"}},{"$f":"H110/I110","v":{"v":0,"d":"0%"}},null,6.101,{"$f":"+IF(C110=\"T1\",H110,\" \")","v":" "},{"$f":"+IF(C110=\"T1\",I110,\" \")","v":" "},{"$f":"+IF(C110=\"T2\",H110,\" \")","v":" "},{"$f":"+IF(C110=\"T2\",I110,\" \")","v":" "},{"$f":"+IF(C110=\"T3\",H110,\" \")","v":" "},{"$f":"+IF(C110=\"T3\",I110,\" \")","v":" "},{"$f":"+IF(C110=\"T4\",H110,\" \")","v":" "},{"$f":"+IF(C110=\"T4\",I110,\" \")","v":" "},{"$f":"+IF(C110=\"T5\",H110,\" \")","v":" "},{"$f":"+IF(C110=\"T5\",I110,\" \")","v":" "},{"$f":"+IF(C110=\"T6\",H110,\" \")","v":" "},{"$f":"+IF(C110=\"T6\",I110,\" \")","v":" "},null,6.101,{"$f":"IF(B110=\"B\",H110,\" \")","v":{"v":0,"d":"0.000000"}},{"$f":"IF(B110=\"B\",I110,\" \")","v":{"v":0.01756,"d":"0.017560"}},{"$f":"IF(AA110=\"NOT SCORED\",\"NOT SCORED\",IF(B110=\"B\",AA110/AB110,\" \"))","v":{"v":0,"d":"0%"}}]
[6.102,"B","T2","Does the agency have actionable operational response protocols for the specific threat scenarios from NTAS?",{"$f":"+IF(Checklist!D116=\"\",0,Checklist!D116)","v":0},{"$f":"Weights!E111","v":{"v":0.00474,"d":"0.004740"}},{"$f":"IF(Checklist!C116=\"X\", 0, 1)","v":1},0,{"v":0.01896,"d":"0.018960"},{"v":0,"d":"0%"},null,6.102,{"$f":"+IF(C111=\"T1\",H111,\" \")","v":" "},{"$f":"+IF(C111=\"T1\",I111,\" \")","v":" "},{"$f":"+IF(C111=\"T2\",H111,\" \")","v":0},{"$f":"+IF(C111=\"T2\",I111,\" \")","v":0.01896},{"$f":"+IF(C111=\"T3\",H111,\" \")","v":" "},{"$f":"+IF(C111=\"T3\",I111,\" \")","v":" "},{"$f":"+IF(C111=\"T4\",H111,\" \")","v":" "},{"$f":"+IF(C111=\"T4\",I111,\" \")","v":" "},{"$f":"+IF(C111=\"T5\",H111,\" \")","v":" "},{"$f":"+IF(C111=\"T5\",I111,\" \")","v":" "},{"$f":"+IF(C111=\"T6\",H111,\" \")","v":" "},{"$f":"+IF(C111=\"T6\",I111,\" \")","v":" "},null,6.102,{"$f":"IF(B111=\"B\",H111,\" \")","v":{"v":0,"d":"0.000000"}},{"$f":"IF(B111=\"B\",I111,\" \")","v":{"v":0.01896,"d":"0.018960"}},{"v":0,"d":"0%"}]
[6.103,null,null,"Has the agency provided annual training and/or instruction focused on job function regarding the incremental activities to be performed by employees?",{"$f":"+IF(Checklist!D117=\"\",0,Checklist!D117)","v":0},{"$f":"Weights!E112","v":{"v":0.00483,"d":"0.004830"}},{"$f":"IF(Checklist!C117=\"X\", 0, 1)","v":1},0,{"v":0.01932,"d":"0.019320"},{"v":0,"d":"0%"},null,6.103," "," "," "," "," "," "," "," "," "," "," "," ",null,6.103,{"$f":"IF(B112=\"B\",H112,\" \")","v":" "},{"$f":"IF(B112=\"B\",I112,\" \")","v":" "}," "]
[{"$nulls":3},"PUBLIC AWARENESS "]
[{"v":7,"d":"7.000"},null,null,"Implement and reinforce a Public Security and Emergency Awareness program       ",{"$nulls":3},{"$f":"SUM(H115:H126)","v":{"v":0,"d":"0.0000"}},{"$f":"SUM(I115:I126)","v":{"v":0.052763706268673556,"d":"0.0528"}},{"$f":"H114/I114","v":{"v":0,"d":"0%"}},null,{"v":7,"d":"7.000"},{"$nulls":13},{"v":7,"d":"7.000"},{"$f":"SUM(AA115:AA126)","v":{"v":0,"d":"0.000000"}},{"$f":"SUM(AB115:AB126)","v":{"v":0.02754622487767452,"d":"0.027546"}},{"$f":"AA114/AB114","v":{"v":0,"d":"0%"}}]
[7.101,"B",null,"Has the transit agency developed and implemented a public security and emergency awareness program?",{"$f":"+IF(Checklist!D120=\"\",0,Checklist!D120)","v":0},{"$f":"Weights!E115","v":{"v":1.19540386604709E-3,"d":"0.001195"}},{"$f":"IF(Checklist!C120=\"X\", 0, 1)","v":1},{"$f":"E115*F115*G115","v":0},{"$f":"F115*G115*4","v":{"v":4.78161546418836E-3,"d":"0.004782"}},{"$f":"H115/I115","v":{"v":0,"d":"0%"}},null,7.101,{"$f":"+IF(C115=\"T1\",H115,\" \")","v":" "},{"$f":"+IF(C115=\"T1\",I115,\" \")","v":" "},{"$f":"+IF(C115=\"T2\",H115,\" \")","v":" "},{"$f":"+IF(C115=\"T2\",I115,\" \")","v":" "},{"$f":"+IF(C115=\"T3\",H115,\" \")","v":" "},{"$f":"+IF(C115=\"T3\",I115,\" \")","v":" "},{"$f":"+IF(C115=\"T4\",H115,\" \")","v":" "},{"$f":"+IF(C115=\"T4\",I115,\" \")","v":" "},{"$f":"+IF(C115=\"T5\",H115,\" \")","v":" "},{"$f":"+IF(C115=\"T5\",I115,\" \")","v":" "},{"$f":"+IF(C115=\"T6\",H115,\" \")","v":" "},{"$f":"+IF(C115=\"T6\",I115,\" \")","v":" "},null,7.101,{"$f":"IF(B115=\"B\",H115,\" \")","v":{"v":0,"d":"0.000000"}},{"$f":"IF(B115=\"B\",I115,\" \")","v":{"v":4.78161546418836E-3,"d":"0.004782"}},{"$f":"IF(AA115=\"NOT SCORED\",\"NOT SCORED\",IF(B115=\"B\",AA115/AB115,\" \"))","v":{"v":0,"d":"0%"}}]
[7.102,"B","T6","Does the agency provide active public outreach for security awareness and emergency preparedness (e.g., Transit Watch, “If You See Something, Say Something”, message boards, brochures, channel cards, posters, fliers)?",{"$f":"+IF(Checklist!D121=\"\",0,Checklist!D121)","v":0},{"$f":"Weights!E116","v":{"v":1.18557076565193E-3,"d":"0.001186"}},{"$f":"IF(Checklist!C121=\"X\", 0, 1)","v":1},0,{"v":0.00474228306260772,"d":"0.004742"},{"v":0,"d":"0%"},null,7.102,{"$f":"+IF(C116=\"T1\",H116,\" \")","v":" "},{"$f":"+IF(C116=\"T1\",I116,\" \")","v":" "},{"$f":"+IF(C116=\"T2\",H116,\" \")","v":" "},{"$f":"+IF(C116=\"T2\",I116,\" \")","v":" "},{"$f":"+IF(C116=\"T3\",H116,\" \")","v":" "},{"$f":"+IF(C116=\"T3\",I116,\" \")","v":" "},{"$f":"+IF(C116=\"T4\",H116,\" \")","v":" "},{"$f":"+IF(C116=\"T4\",I116,\" \")","v":" "},{"$f":"+IF(C116=\"T5\",H116,\" \")","v":" "},{"$f":"+IF(C116=\"T5\",I116,\" \")","v":" "},{"$f":"+IF(C116=\"T6\",H116,\" \")","v":0},{"$f":"+IF(C116=\"T6\",I116,\" \")","v":0.00474228306260772},null,7.102,{"$f":"IF(B116=\"B\",H116,\" \")","v":{"v":0,"d":"0.000000"}},{"$f":"IF(B116=\"B\",I116,\" \")","v":{"v":0.00474228306260772,"d":"0.004742"}},{"v":0,"d":"0%"}]
[7.103,null,"T6","Is the above consistent with agency's overall announcement program?",{"$f":"+IF(Checklist!D122=\"\",0,Checklist!D122)","v":0},{"$f":"Weights!E117","v":{"v":1.01963848012143E-3,"d":"0.001020"}},{"$f":"IF(Checklist!C122=\"X\", 0, 1)","v":1},0,{"v":0.00407855392048572,"d":"0.004079"},{"v":0,"d":"0%"},null,7.103," "," "," "," "," "," "," "," "," "," ",0,0.00407855392048572,null,7.103," "," "," "]
[7.104,"B","T6","Are general security awareness and emergency preparedness messages included in public announcement messages at stations and on board vehicles?",{"$f":"+IF(Checklist!D123=\"\",0,Checklist!D123)","v":0},{"$f":"Weights!E118","v":{"v":0.00106499908164458,"d":"0.001065"}},{"$f":"IF(Checklist!C123=\"X\", 0, 1)","v":1},0,{"v":0.00425999632657832,"d":"0.004260"},{"v":0,"d":"0%"},null,7.104," "," "," "," "," "," "," "," "," "," ",0,0.00425999632657832,null,7.104,{"v":0,"d":"0.000000"},{"v":0.00425999632657832,"d":"0.004260"},{"v":0,"d":"0%"}]
[7.105,"B","T6","Are passengers urged to report unattended property, suspicious behavior, and security concerns to uniformed crew members, law enforcement or security personnel, and/or a contact telephone number?  If so, summarize the type of materials used and content in the justification.",{"$f":"+IF(Checklist!D124=\"\",0,Checklist!D124)","v":0},{"$f":"Weights!E119","v":{"v":0.00119353434511714,"d":"0.001194"}},{"$f":"IF(Checklist!C124=\"X\", 0, 1)","v":1},0,{"v":0.00477413738046856,"d":"0.004774"},{"v":0,"d":"0%"},null,7.105," "," "," "," "," "," "," "," "," "," ",0,0.00477413738046856,null,7.105,{"v":0,"d":"0.000000"},{"v":0.00477413738046856,"d":"0.004774"},{"v":0,"d":"0%"}]
[7.106,"B","T6","Does the agency have an appropriate mechanism in place for passengers to communicate an (e.g., 1-800 number, smart phone applications, social media, etc.)  that can be called or used to report security concerns?  If so, is this information indicated in public awareness materials and messages?",{"$f":"+IF(Checklist!D125=\"\",0,Checklist!D125)","v":0},{"$f":"Weights!E120","v":{"v":1.06896925363511E-3,"d":"0.001069"}},{"$f":"IF(Checklist!C125=\"X\", 0, 1)","v":1},{"$f":"E120*F120*G120","v":0},{"$f":"F120*G120*4","v":{"v":4.27587701454044E-3,"d":"0.004276"}},{"$f":"H120/I120","v":{"v":0,"d":"0%"}},null,7.106,{"$f":"+IF(C120=\"T1\",H120,\" \")","v":" "},{"$f":"+IF(C120=\"T1\",I120,\" \")","v":" "},{"$f":"+IF(C120=\"T2\",H120,\" \")","v":" "},{"$f":"+IF(C120=\"T2\",I120,\" \")","v":" "},{"$f":"+IF(C120=\"T3\",H120,\" \")","v":" "},{"$f":"+IF(C120=\"T3\",I120,\" \")","v":" "},{"$f":"+IF(C120=\"T4\",H120,\" \")","v":" "},{"$f":"+IF(C120=\"T4\",I120,\" \")","v":" "},{"$f":"+IF(C120=\"T5\",H120,\" \")","v":" "},{"$f":"+IF(C120=\"T5\",I120,\" \")","v":" "},{"$f":"+IF(C120=\"T6\",H120,\" \")","v":0},{"$f":"+IF(C120=\"T6\",I120,\" \")","v":4.27587701454044E-3},null,7.106,{"$f":"IF(B120=\"B\",H120,\" \")","v":{"v":0,"d":"0.000000"}},{"$f":"IF(B120=\"B\",I120,\" \")","v":{"v":4.27587701454044E-3,"d":"0.004276"}},{"$f":"IF(AA120=\"NOT SCORED\",\"NOT SCORED\",IF(B120=\"B\",AA120/AB120,\" \"))","v":{"v":0,"d":"0%"}}]
[7.107,null,null,"Does the agency issue public service announcements or press releases to social media (e.g. Twitter/ Facebook/etc., QRC codes, and/or apps for smart phones) regarding security and emergency protocols?",{"$f":"+IF(Checklist!D126=\"\",0,Checklist!D126)","v":0},{"$f":"Weights!E121","v":{"v":0.00103935438738433,"d":"0.001039"}},{"$f":"IF(Checklist!C126=\"X\", 0, 1)","v":1},0,{"v":0.00415741754953732,"d":"0.004157"},{"v":0,"d":"0%"},null,7.107," "," "," "," "," "," "," "," "," "," "," "," ",null,7.107," "," "," "]
[7.108,null,"T6","Does the agency issue public service announcements or press releases to local media (e.g. newspaper, radio and/or television) regarding security or emergency protocols?",{"$f":"+IF(Checklist!D127=\"\",0,Checklist!D127)","v":0},{"$f":"Weights!E122","v":{"v":1.02358373744854E-3,"d":"0.001024"}},{"$f":"IF(Checklist!C127=\"X\", 0, 1)","v":1},0,{"v":0.00409433494979416,"d":"0.004094"},{"v":0,"d":"0%"},null,7.108," "," "," "," "," "," "," "," "," "," ",0,0.00409433494979416,null,7.108," "," "," "]
[7.109,null,null,"Does the transit agency conduct a volunteer training program for non-employees to aid with system evacuations and emergency response?",{"$f":"+IF(Checklist!D128=\"\",0,Checklist!D128)","v":0},{"$f":"Weights!E123","v":{"v":0.00109041597393305,"d":"0.001090"}},{"$f":"IF(Checklist!C128=\"X\", 0, 1)","v":1},0,{"v":0.0043616638957322,"d":"0.004362"},{"v":0,"d":"0%"},null,7.109," "," "," "," "," "," "," "," "," "," "," "," ",null,7.109," "," "," "]
[{"v":7.11,"d":"7.110"},null,null,"Does the transit agency conduct an outreach program to enlist members of the public as security awareness volunteers, similar to Neighborhood Watch programs?",{"$f":"+IF(Checklist!D129=\"\",0,Checklist!D129)","v":0},{"$f":"Weights!E124","v":{"v":0.00108911426741419,"d":"0.001089"}},{"$f":"IF(Checklist!C129=\"X\", 0, 1)","v":1},0,{"v":0.00435645706965676,"d":"0.004356"},{"v":0,"d":"0%"},null,{"v":7.11,"d":"7.110"}," "," "," "," "," "," "," "," "," "," "," "," ",null,{"v":7.11,"d":"7.110"}," "," "," "]
[7.111,"B","T1","Do public awareness materials and/or messages inform passengers on the means to evacuate safely from transit vehicles and underwater/underground facilities?",{"$f":"+IF(Checklist!D130=\"\",0,Checklist!D130)","v":0},{"$f":"Weights!E125","v":{"v":1.17807890732278E-3,"d":"0.001178"}},{"$f":"IF(Checklist!C130=\"X\", 0, 1)","v":1},0,{"v":4.71231562929112E-3,"d":"0.004712"},{"v":0,"d":"0%"},null,7.111,0,{"v":4.71231562929112E-3,"d":"0.004712"}," "," "," "," "," "," "," "," "," "," ",null,7.111,{"v":0,"d":"0.000000"},{"v":4.71231562929112E-3,"d":"0.004712"},{"v":0,"d":"0%"}]
[7.112,null,null,"Does the agency track and monitor customer complaints reported by passengers?",{"$f":"+IF(Checklist!D131=\"\",0,Checklist!D131)","v":0},{"$f":"Weights!E126","v":{"v":0.00104226350144822,"d":"0.001042"}},{"$f":"IF(Checklist!C131=\"X\", 0, 1)","v":1},{"$f":"E126*F126*G126","v":0},{"$f":"F126*G126*4","v":{"v":0.00416905400579288,"d":"0.004169"}},{"$f":"H126/I126","v":{"v":0,"d":"0%"}},null,7.112,{"$f":"+IF(C126=\"T1\",H126,\" \")","v":" "},{"$f":"+IF(C126=\"T1\",I126,\" \")","v":" "},{"$f":"+IF(C126=\"T2\",H126,\" \")","v":" "},{"$f":"+IF(C126=\"T2\",I126,\" \")","v":" "},{"$f":"+IF(C126=\"T3\",H126,\" \")","v":" "},{"$f":"+IF(C126=\"T3\",I126,\" \")","v":" "},{"$f":"+IF(C126=\"T4\",H126,\" \")","v":" "},{"$f":"+IF(C126=\"T4\",I126,\" \")","v":" "},{"$f":"+IF(C126=\"T5\",H126,\" \")","v":" "},{"$f":"+IF(C126=\"T5\",I126,\" \")","v":" "},{"$f":"+IF(C126=\"T6\",H126,\" \")","v":" "},{"$f":"+IF(C126=\"T6\",I126,\" \")","v":" "},null,7.112,{"$f":"IF(B126=\"B\",H126,\" \")","v":" "},{"$f":"IF(B126=\"B\",I126,\" \")","v":" "},{"$f":"IF(AA126=\"NOT SCORED\",\"NOT SCORED\",IF(B126=\"B\",AA126/AB126,\" \"))","v":" "}]
[{"$nulls":3}," RISK MANAGEMENT"]
[{"v":8,"d":"8.000"},null,null,"Establish and use a risk management process ",{"$nulls":3},{"$f":"SUM(H129:H135)","v":{"v":0,"d":"0.0000"}},{"$f":"SUM(I129:I135)","v":{"v":0.04924,"d":"0.0492"}},{"$f":"H128/I128","v":{"v":0,"d":"0%"}},null,{"v":8,"d":"8.000"},{"$nulls":13},{"v":8,"d":"8.000"},{"$f":"SUM(AA129:AA135)","v":{"v":0,"d":"0.000000"}},{"$f":"SUM(AB129:AB135)","v":{"v":0.04228,"d":"0.042280"}},{"$f":"AA128/AB128","v":{"v":0,"d":"0%"}}]
[8.101,"B","T2","Does the agency have a risk assessment process approved by its management, for managing threats and vulnerabilities?  If so, summarize the process in the justification.",{"$f":"+IF(Checklist!D134=\"\",0,Checklist!D134)","v":0},{"$f":"Weights!E129","v":{"v":1.8E-3,"d":"0.001800"}},{"$f":"IF(Checklist!C134=\"X\", 0, 1)","v":1},{"$f":"E129*F129*G129","v":0},{"$f":"F129*G129*4","v":{"v":0.0072,"d":"0.007200"}},{"$f":"H129/I129","v":{"v":0,"d":"0%"}},null,8.101,{"$f":"+IF(C129=\"T1\",H129,\" \")","v":" "},{"$f":"+IF(C129=\"T1\",I129,\" \")","v":" "},{"$f":"+IF(C129=\"T2\",H129,\" \")","v":0},{"$f":"+IF(C129=\"T2\",I129,\" \")","v":0.0072},{"$f":"+IF(C129=\"T3\",H129,\" \")","v":" "},{"$f":"+IF(C129=\"T3\",I129,\" \")","v":" "},{"$f":"+IF(C129=\"T4\",H129,\" \")","v":" "},{"$f":"+IF(C129=\"T4\",I129,\" \")","v":" "},{"$f":"+IF(C129=\"T5\",H129,\" \")","v":" "},{"$f":"+IF(C129=\"T5\",I129,\" \")","v":" "},{"$f":"+IF(C129=\"T6\",H129,\" \")","v":" "},{"$f":"+IF(C129=\"T6\",I129,\" \")","v":" "},null,8.101,{"$f":"IF(B129=\"B\",H129,\" \")","v":{"v":0,"d":"0.000000"}},{"$f":"IF(B129=\"B\",I129,\" \")","v":{"v":0.0072,"d":"0.007200"}},{"$f":"IF(AA129=\"NOT SCORED\",\"NOT SCORED\",IF(B129=\"B\",AA129/AB129,\" \"))","v":{"v":0,"d":"0%"}}]
[8.102,"B",null,"Has the agency identified facilities and systems it considers to be its critical assets?",{"$f":"+IF(Checklist!D135=\"\",0,Checklist!D135)","v":0},{"$f":"Weights!E130","v":{"v":0.00179,"d":"0.001790"}},{"$f":"IF(Checklist!C135=\"X\", 0, 1)","v":1},0,{"v":0.00716,"d":"0.007160"},{"v":0,"d":"0%"},null,8.102,{"$f":"+IF(C130=\"T1\",H130,\" \")","v":" "},{"$f":"+IF(C130=\"T1\",I130,\" \")","v":" "},{"$f":"+IF(C130=\"T2\",H130,\" \")","v":" "},{"$f":"+IF(C130=\"T2\",I130,\" \")","v":" "},{"$f":"+IF(C130=\"T3\",H130,\" \")","v":" "},{"$f":"+IF(C130=\"T3\",I130,\" \")","v":" "},{"$f":"+IF(C130=\"T4\",H130,\" \")","v":" "},{"$f":"+IF(C130=\"T4\",I130,\" \")","v":" "},{"$f":"+IF(C130=\"T5\",H130,\" \")","v":" "},{"$f":"+IF(C130=\"T5\",I130,\" \")","v":" "},{"$f":"+IF(C130=\"T6\",H130,\" \")","v":" "},{"$f":"+IF(C130=\"T6\",I130,\" \")","v":" "},null,8.102,{"$f":"IF(B130=\"B\",H130,\" \")","v":{"v":0,"d":"0.000000"}},{"$f":"IF(B130=\"B\",I130,\" \")","v":{"v":0.00716,"d":"0.007160"}},{"v":0,"d":"0%"}]
[8.103,"B","T2","Has the agency had an internal or external vulnerability assessment on its critical assets within the past 3 years?  Specify the dates of the most recent assessments and the entity(ies) that conducted the assessment(s).  ",{"$f":"+IF(Checklist!D136=\"\",0,Checklist!D136)","v":0},{"$f":"Weights!E131","v":{"v":1.75E-3,"d":"0.001750"}},{"$f":"IF(Checklist!C136=\"X\", 0, 1)","v":1},0,{"v":0.007,"d":"0.007000"},{"v":0,"d":"0%"},null,8.103," "," ",0,0.007," "," "," "," "," "," "," "," ",null,8.103,{"v":0,"d":"0.000000"},{"v":0.007,"d":"0.007000"},{"v":0,"d":"0%"}]
[8.104,"B","T1","Has the agency had an internal or external Risk Assessment, analyzing threat, vulnerability, & consequence, for critical assets and infrastructure, and systems within the past 3 years?  Have management and staff responsible for the risk assessment process been properly trained to manage the process?",{"$f":"+IF(Checklist!D137=\"\",0,Checklist!D137)","v":0},{"$f":"Weights!E132","v":{"v":0.00177,"d":"0.001770"}},{"$f":"IF(Checklist!C137=\"X\", 0, 1)","v":1},0,{"v":0.00708,"d":"0.007080"},{"v":0,"d":"0%"},null,8.104,0,{"v":0.00708,"d":"0.007080"}," "," "," "," "," "," "," "," "," "," ",null,8.104,{"v":0,"d":"0.000000"},{"v":0.00708,"d":"0.007080"},{"v":0,"d":"0%"}]
[8.105,"B","T2","Has the system implemented procedures to limit and monitor authorized access to underground and underwater tunnels?  If so, summarize procedures in the justification.",{"$f":"+IF(Checklist!D138=\"\",0,Checklist!D138)","v":0},{"$f":"Weights!E133","v":{"v":1.72E-3,"d":"0.001720"}},{"$f":"IF(Checklist!C138=\"X\", 0, 1)","v":1},0,{"v":0.00688,"d":"0.006880"},{"v":0,"d":"0%"},null,8.105," "," ",0,0.00688," "," "," "," "," "," "," "," ",null,8.105,{"v":0,"d":"0.000000"},{"v":0.00688,"d":"0.006880"},{"v":0,"d":"0%"}]
[8.106,null,null,"Are security investments prioritized using information developed in the risk assessment process?",{"$f":"+IF(Checklist!D139=\"\",0,Checklist!D139)","v":0},{"$f":"Weights!E134","v":{"v":1.74E-3,"d":"0.001740"}},{"$f":"IF(Checklist!C139=\"X\", 0, 1)","v":1},0,{"v":6.96E-3,"d":"0.006960"},{"v":0,"d":"0%"},null,8.106," "," "," "," "," "," "," "," "," "," "," "," ",null,8.106," "," "," "]
[8.107,"B","T1","Upon request, has TSA been provided access to the agency's vulnerability assessments, Security Plan and related documents?",{"$f":"+IF(Checklist!D140=\"\",0,Checklist!D140)","v":0},{"$f":"Weights!E135","v":{"v":1.74E-3,"d":"0.001740"}},{"$f":"IF(Checklist!C140=\"X\", 0, 1)","v":1},0,{"v":6.96E-3,"d":"0.006960"},{"v":0,"d":"0%"},null,8.107,0,{"v":6.96E-3,"d":"0.006960"}," "," "," "," "," "," "," "," "," "," ",null,8.107,{"v":0,"d":"0.000000"},{"v":6.96E-3,"d":"0.006960"},{"v":0,"d":"0%"}]
[{"$nulls":3},"ESTABLISH A RISK ASSESSMENT AND INFORMATION SHARING PROCESS"]
[{"v":9,"d":"9.000"},null,null,"Establish and use an information sharing process for threat and intelligence information.",{"$nulls":3},{"$f":"SUM(H138:H142)","v":{"v":0,"d":"0.0000"}},{"$f":"SUM(I138:I142)","v":{"v":0.038720000000000004,"d":"0.0387"}},{"$f":"H137/I137","v":{"v":0,"d":"0%"}},null,{"v":9,"d":"9.000"},{"$nulls":13},{"v":9,"d":"9.000"},{"$f":"SUM(AA138:AA142)","v":{"v":0,"d":"0.000000"}},{"$f":"SUM(AB138:AB142)","v":{"v":0.02368,"d":"0.023680"}},{"$f":"AA137/AB137","v":{"v":0,"d":"0%"}}]
[9.101,"B",null,"Does the agency have a formalized process and procedures for reporting and exchange of threat and intelligence information with Federal, State, and/or local law enforcement agencies? ",{"$f":"+IF(Checklist!D143=\"\",0,Checklist!D143)","v":0},{"$f":"Weights!E138","v":{"v":0.00201,"d":"0.002010"}},{"$f":"IF(Checklist!C143=\"X\", 0, 1)","v":1},{"$f":"E138*F138*G138","v":0},{"$f":"F138*G138*4","v":{"v":0.00804,"d":"0.008040"}},{"$f":"H138/I138","v":{"v":0,"d":"0%"}},null,9.101,{"$f":"+IF(C138=\"T1\",H138,\" \")","v":" "},{"$f":"+IF(C138=\"T1\",I138,\" \")","v":" "},{"$f":"+IF(C138=\"T2\",H138,\" \")","v":" "},{"$f":"+IF(C138=\"T2\",I138,\" \")","v":" "},{"$f":"+IF(C138=\"T3\",H138,\" \")","v":" "},{"$f":"+IF(C138=\"T3\",I138,\" \")","v":" "},{"$f":"+IF(C138=\"T4\",H138,\" \")","v":" "},{"$f":"+IF(C138=\"T4\",I138,\" \")","v":" "},{"$f":"+IF(C138=\"T5\",H138,\" \")","v":" "},{"$f":"+IF(C138=\"T5\",I138,\" \")","v":" "},{"$f":"+IF(C138=\"T6\",H138,\" \")","v":" "},{"$f":"+IF(C138=\"T6\",I138,\" \")","v":" "},null,9.101,{"$f":"IF(B138=\"B\",H138,\" \")","v":{"v":0,"d":"0.000000"}},{"$f":"IF(B138=\"B\",I138,\" \")","v":{"v":0.00804,"d":"0.008040"}},{"$f":"IF(AA138=\"NOT SCORED\",\"NOT SCORED\",IF(B138=\"B\",AA138/AB138,\" \"))","v":{"v":0,"d":"0%"}}]
[9.102,"B","T2","Does the system report threat and intelligence information directly to FBI Joint Terrorism Task Force (JTTF) or other regional anti-terrorism task force?",{"$f":"+IF(Checklist!D144=\"\",0,Checklist!D144)","v":0},{"$f":"Weights!E139","v":{"v":0.00195,"d":"0.001950"}},{"$f":"IF(Checklist!C144=\"X\", 0, 1)","v":1},0,{"v":0.0078,"d":"0.007800"},{"v":0,"d":"0%"},null,9.102,{"$f":"+IF(C139=\"T1\",H139,\" \")","v":" "},{"$f":"+IF(C139=\"T1\",I139,\" \")","v":" "},{"$f":"+IF(C139=\"T2\",H139,\" \")","v":0},{"$f":"+IF(C139=\"T2\",I139,\" \")","v":0.0078},{"$f":"+IF(C139=\"T3\",H139,\" \")","v":" "},{"$f":"+IF(C139=\"T3\",I139,\" \")","v":" "},{"$f":"+IF(C139=\"T4\",H139,\" \")","v":" "},{"$f":"+IF(C139=\"T4\",I139,\" \")","v":" "},{"$f":"+IF(C139=\"T5\",H139,\" \")","v":" "},{"$f":"+IF(C139=\"T5\",I139,\" \")","v":" "},{"$f":"+IF(C139=\"T6\",H139,\" \")","v":" "},{"$f":"+IF(C139=\"T6\",I139,\" \")","v":" "},null,9.102,{"$f":"IF(B139=\"B\",H139,\" \")","v":{"v":0,"d":"0.000000"}},{"$f":"IF(B139=\"B\",I139,\" \")","v":{"v":0.0078,"d":"0.007800"}},{"v":0,"d":"0%"}]
[9.103,"B","T2","Does the system have a protocol to report threats or significant security concerns to appropriate law enforcement authorities, and TSA's Transportation Security Operations Center (TSOC)?",{"$f":"+IF(Checklist!D145=\"\",0,Checklist!D145)","v":0},{"$f":"Weights!E140","v":{"v":0.00196,"d":"0.001960"}},{"$f":"IF(Checklist!C145=\"X\", 0, 1)","v":1},0,{"v":0.00784,"d":"0.007840"},{"v":0,"d":"0%"},null,9.103," "," ",0,0.00784," "," "," "," "," "," "," "," ",null,9.103,{"$f":"IF(B140=\"B\",H140,\" \")","v":{"v":0,"d":"0.000000"}},{"$f":"IF(B140=\"B\",I140,\" \")","v":{"v":0.00784,"d":"0.007840"}},{"v":0,"d":"0%"}]
[9.104,null,null,"Does the agency routinely receive threat and intelligence information directly from any Federal government agency, State Homeland Security Office, Regional or State Intelligence Fusion Center,  PT-ISAC, or other transit agencies?",{"$f":"+IF(Checklist!D146=\"\",0,Checklist!D146)","v":0},{"$f":"Weights!E141","v":{"v":0.00186,"d":"0.001860"}},{"$f":"IF(Checklist!C146=\"X\", 0, 1)","v":1},0,{"v":0.00744,"d":"0.007440"},{"v":0,"d":"0%"},null,9.104," "," "," "," "," "," "," "," "," "," "," "," ",null,9.104,{"$f":"IF(B141=\"B\",H141,\" \")","v":" "},{"$f":"IF(B141=\"B\",I141,\" \")","v":" "}," "]
[9.105,null,null,{"$f":"IF('Profile Sheet'!E14=\"X\",\"N/A Not Governed By 49 CFR Part 659\",\"Does the agency report their NTA security data to FTA as required by 49 CFR 659?\")","v":"Does the agency report their NTA security data to FTA as required by 49 CFR 659?"},{"$f":"+IF(Checklist!D147=\"\",0,Checklist!D147)","v":0},{"$f":"Weights!E142","v":{"v":1.9E-3,"d":"0.001900"}},{"$f":"IF(Checklist!C147=\"X\", 0, 1)","v":1},0,{"v":7.6E-3,"d":"0.007600"},{"v":0,"d":"0%"},null,9.105," "," "," "," "," "," "," "," "," "," "," "," ",null,9.105,{"$f":"IF(B142=\"B\",H142,\" \")","v":" "},{"$f":"IF(B142=\"B\",I142,\" \")","v":" "}," "]
[{"$nulls":3},"DRILLS AND EXERCISES"]
[{"v":10,"d":"10.000"},null,null,"Conduct Tabletop and Functional Drills",{"$nulls":3},{"$f":"SUM(H145:H157)","v":{"v":0,"d":"0.0000"}},{"$f":"SUM(I145:I157)","v":{"v":0.05779999999999999,"d":"0.0578"}},{"$f":"H144/I144","v":{"v":0,"d":"0%"}},null,{"v":10,"d":"10.000"},{"$nulls":13},{"v":10,"d":"10.000"},{"$f":"SUM(AA145:AA157)","v":{"v":0,"d":"0.000000"}},{"$f":"SUM(AB145:AB157)","v":{"v":0.03572,"d":"0.035720"}},{"$f":"AA144/AB144","v":{"v":0,"d":"0%"}}]
[10.101,"B",null,"Does the agency’s System Safety Program Plan (SSPP) contain or reference a document describing the process used by the agency to develop an approved, coordinated schedule for all emergency management program activities, including local/regional emergency planning and participation in exercises and drills?",{"$f":"+IF(Checklist!D150=\"\",0,Checklist!D150)","v":0},{"$f":"Weights!E144","v":{"v":1.16E-3,"d":"0.001160"}},{"$f":"IF(Checklist!C150=\"X\", 0, 1)","v":1},{"$f":"E145*F145*G145","v":0},{"$f":"F145*G145*4","v":{"v":4.64E-3,"d":"0.004640"}},{"$f":"H145/I145","v":{"v":0,"d":"0%"}},null,10.101,{"$f":"+IF(C145=\"T1\",H145,\" \")","v":" "},{"$f":"+IF(C145=\"T1\",I145,\" \")","v":" "},{"$f":"+IF(C145=\"T2\",H145,\" \")","v":" "},{"$f":"+IF(C145=\"T2\",I145,\" \")","v":" "},{"$f":"+IF(C145=\"T3\",H145,\" \")","v":" "},{"$f":"+IF(C145=\"T3\",I145,\" \")","v":" "},{"$f":"+IF(C145=\"T4\",H145,\" \")","v":" "},{"$f":"+IF(C145=\"T4\",I145,\" \")","v":" "},{"$f":"+IF(C145=\"T5\",H145,\" \")","v":" "},{"$f":"+IF(C145=\"T5\",I145,\" \")","v":" "},{"$f":"+IF(C145=\"T6\",H145,\" \")","v":" "},{"$f":"+IF(C145=\"T6\",I145,\" \")","v":" "},null,10.101,{"$f":"IF(B145=\"B\",H145,\" \")","v":{"v":0,"d":"0.000000"}},{"$f":"IF(B145=\"B\",I145,\" \")","v":{"v":4.64E-3,"d":"0.004640"}},{"v":0,"d":"0%"}]
[10.102,"B",null,"Does the agency’s SSPP or SSP describe or reference how the agency performs its emergency planning responsibilities and requirements regarding emergency drills and exercises?",{"$f":"+IF(Checklist!D151=\"\",0,Checklist!D151)","v":0},{"$f":"Weights!E145","v":{"v":1.14E-3,"d":"0.001140"}},{"$f":"IF(Checklist!C151=\"X\", 0, 1)","v":1},0,{"v":0.00456,"d":"0.004560"},{"v":0,"d":"0%"},null,10.102,{"$f":"+IF(C146=\"T1\",H146,\" \")","v":" "},{"$f":"+IF(C146=\"T1\",I146,\" \")","v":" "},{"$f":"+IF(C146=\"T2\",H146,\" \")","v":" "},{"$f":"+IF(C146=\"T2\",I146,\" \")","v":" "},{"$f":"+IF(C146=\"T3\",H146,\" \")","v":" "},{"$f":"+IF(C146=\"T3\",I146,\" \")","v":" "},{"$f":"+IF(C146=\"T4\",H146,\" \")","v":" "},{"$f":"+IF(C146=\"T4\",I146,\" \")","v":" "},{"$f":"+IF(C146=\"T5\",H146,\" \")","v":" "},{"$f":"+IF(C146=\"T5\",I146,\" \")","v":" "},{"$f":"+IF(C146=\"T6\",H146,\" \")","v":" "},{"$f":"+IF(C146=\"T6\",I146,\" \")","v":" "},null,10.102,{"$f":"IF(B146=\"B\",H146,\" \")","v":{"v":0,"d":"0.000000"}},{"$f":"IF(B146=\"B\",I146,\" \")","v":{"v":0.00456,"d":"0.004560"}},{"v":0,"d":"0%"}]
[10.103,"B","T5","Does the agency evaluate its emergency preparedness by using annual field exercises, tabletop exercises, and/or drills?  If so, please summarize the exercise events held in the past year.",{"$f":"+IF(Checklist!D152=\"\",0,Checklist!D152)","v":0},{"$f":"Weights!E146","v":{"v":1.17E-3,"d":"0.001170"}},{"$f":"IF(Checklist!C152=\"X\", 0, 1)","v":1},0,{"v":0.00468,"d":"0.004680"},{"v":0,"d":"0%"},null,10.103," "," "," "," "," "," "," "," ",0,0.00468," "," ",null,10.103,{"v":0,"d":"0.000000"},{"v":0.00468,"d":"0.004680"},{"v":0,"d":"0%"}]
[10.104,"B",null,"Does the agency's SSPP or a related document include a requirement for annual field exercises, tabletops and drills?",{"$f":"+IF(Checklist!D153=\"\",0,Checklist!D153)","v":0},{"$f":"Weights!E147","v":{"v":1E-3,"d":"0.001000"}},{"$f":"IF(Checklist!C153=\"X\", 0, 1)","v":1},0,{"v":0.004,"d":"0.004000"},{"v":0,"d":"0%"},null,10.104," "," "," "," "," "," "," "," "," "," "," "," ",null,10.104,{"v":0,"d":"0.000000"},{"v":0.004,"d":"0.004000"},{"v":0,"d":"0%"}]
[10.105,"B",null,"Does the agency’s SSPP or SSP describe or reference how the agency documents the results of its emergency preparedness evaluations (i.e., briefings, after action reports and implementation of findings)?",{"$f":"+IF(Checklist!D154=\"\",0,Checklist!D154)","v":0},{"$f":"Weights!E148","v":{"v":1.14E-3,"d":"0.001140"}},{"$f":"IF(Checklist!C154=\"X\", 0, 1)","v":1},0,{"v":0.00456,"d":"0.004560"},{"v":0,"d":"0%"},null,10.105," "," "," "," "," "," "," "," "," "," "," "," ",null,10.105,{"v":0,"d":"0.000000"},{"v":0.00456,"d":"0.004560"},{"v":0,"d":"0%"}]
[10.106,null,null,"Does the agency’s SSPP or a related document describe or reference its program for providing employee training on emergency response protocols and procedures?",{"$f":"+IF(Checklist!D155=\"\",0,Checklist!D155)","v":0},{"$f":"Weights!E149","v":{"v":0.00113,"d":"0.001130"}},{"$f":"IF(Checklist!C155=\"X\", 0, 1)","v":1},0,{"v":0.00452,"d":"0.004520"},{"v":0,"d":"0%"},null,10.106," "," "," "," "," "," "," "," "," "," "," "," ",null,10.106," "," "," "]
[10.107,"B",null,"Does the agency participate as an active player in full-scale, regional exercises held at least annually?",{"$f":"+IF(Checklist!D156=\"\",0,Checklist!D156)","v":0},{"$f":"Weights!E150","v":{"v":1.01E-3,"d":"0.001010"}},{"$f":"IF(Checklist!C156=\"X\", 0, 1)","v":1},0,{"v":0.00404,"d":"0.004040"},{"v":0,"d":"0%"},null,10.107," "," "," "," "," "," "," "," "," "," "," "," ",null,10.107,{"v":0,"d":"0.000000"},{"v":0.00404,"d":"0.004040"},{"v":0,"d":"0%"}]
[10.108,null,"T5","In the last year, has the agency conducted and/or participated in  a drill, tabletop exercise, and/or field exercise including scenarios involving (i) IED's and (ii) WMD (chemical, biological, radiological, nuclear) with other transit agencies and first responders (e.g., NTAS scenarios)? ",{"$f":"+IF(Checklist!D157=\"\",0,Checklist!D157)","v":0},{"$f":"Weights!E151","v":{"v":0.00099,"d":"0.000990"}},{"$f":"IF(Checklist!C157=\"X\", 0, 1)","v":1},0,{"v":3.96E-3,"d":"0.003960"},{"v":0,"d":"0%"},null,10.108," "," "," "," "," "," "," "," ",0,3.96E-3," "," ",null,10.108," "," "," "]
[10.109,null,"T5","In the last year, has the agency reviewed results and prepared after-action reports to assess performance and develop lessons learned for all drills, tabletop, and/or field exercises?",{"$f":"+IF(Checklist!D158=\"\",0,Checklist!D158)","v":0},{"$f":"Weights!E152","v":{"v":0.00111,"d":"0.001110"}},{"$f":"IF(Checklist!C158=\"X\", 0, 1)","v":1},0,{"v":0.00444,"d":"0.004440"},{"v":0,"d":"0%"},null,10.109," "," "," "," "," "," "," "," ",0,0.00444," "," ",null,10.109," "," "," "]
[{"v":10.11,"d":"10.110"},null,"T5","In the last 12 months, has the agency updated plans, protocols and processes to incorporate after-action report recommendations/findings and corrective actions?  If so, summarize the actions taken in the justification. ",{"$f":"+IF(Checklist!D159=\"\",0,Checklist!D159)","v":0},{"$f":"Weights!E153","v":{"v":1.16E-3,"d":"0.001160"}},{"$f":"IF(Checklist!C159=\"X\", 0, 1)","v":1},0,{"v":4.64E-3,"d":"0.004640"},{"v":0,"d":"0%"},null,{"v":10.11,"d":"10.110"}," "," "," "," "," "," "," "," ",0,4.64E-3," "," ",null,{"v":10.11,"d":"10.110"}," "," "," "]
[10.111,null,null,"Has the agency established metrics to assess its performance during emergency exercises and to measure improvements?",{"$f":"+IF(Checklist!D160=\"\",0,Checklist!D160)","v":0},{"$f":"Weights!E154","v":{"v":0.00113,"d":"0.001130"}},{"$f":"IF(Checklist!C160=\"X\", 0, 1)","v":1},0,{"v":0.00452,"d":"0.004520"},{"v":0,"d":"0%"},null,10.111," "," "," "," "," "," "," "," "," "," "," "," ",null,10.111," "," "," "]
[10.112,"B","T1","Does the system conduct drills and exercises of its security and emergency response plans to test capabilities of i.) employees and ii.) first responders to operate effectively in underwater/underground infrastructure and other critical systems?",{"$f":"+IF(Checklist!D161=\"\",0,Checklist!D161)","v":0},{"$f":"Weights!E155","v":{"v":1.14E-3,"d":"0.001140"}},{"$f":"IF(Checklist!C161=\"X\", 0, 1)","v":1},0,{"v":0.00456,"d":"0.004560"},{"v":0,"d":"0%"},null,10.112,0,{"v":0.00456,"d":"0.004560"}," "," "," "," "," "," "," "," "," "," ",null,10.112,{"v":0,"d":"0.000000"},{"v":0.00456,"d":"0.004560"},{"v":0,"d":"0%"}]
[10.113,"B","T5","Does the transit system integrate local and regional first responders (law enforcement, firefighters, emergency medical teams) in drills, tabletop exercises, and/or field exercises?  If so, summarize each joint event and state when it took place.",{"$f":"+IF(Checklist!D162=\"\",0,Checklist!D162)","v":0},{"$f":"Weights!E156","v":{"v":1.17E-3,"d":"0.001170"}},{"$f":"IF(Checklist!C162=\"X\", 0, 1)","v":1},0,{"v":0.00468,"d":"0.004680"},{"v":0,"d":"0%"},null,10.113," "," "," "," "," "," "," "," ",0,0.00468," "," ",null,10.113,{"v":0,"d":"0.000000"},{"v":0.00468,"d":"0.004680"},{"v":0,"d":"0%"}]
[{"v":11,"d":"11.000"},null,null,"Developing a Comprehensive Cyber Security Strategy",{"$nulls":3},{"$f":"SUM(H159:H165)","v":{"v":0,"d":"0.0000"}},{"$f":"SUM(I159:I165)","v":{"v":0.059964,"d":"0.0600"}},{"$f":"H158/I158","v":{"v":0,"d":"0%"}},null,{"v":11,"d":"11.000"},{"$nulls":13},{"v":11,"d":"11.000"},{"$f":"SUM(AA159:AA165)","v":{"v":0,"d":"0.000000"}},{"$f":"SUM(AB159:AB165)","v":{"v":0.01704,"d":"0.017040"}},{"$f":"AA158/AB158","v":{"v":0,"d":"0%"}}]
[11.101,"B",null,"Has the agency conducted a risk assessment to identify operational control and communication/business enterprise IT assets and potential vulnerabilities?",{"$f":"+IF(Checklist!D164=\"\",0,Checklist!D164)","v":0},{"$f":"Weights!E158","v":{"v":2.137E-3,"d":"0.002137"}},{"$f":"IF(Checklist!C164=\"X\", 0, 1)","v":1},{"$f":"E159*F159*G159","v":0},{"$f":"F159*G159*4","v":{"v":8.548E-3,"d":"0.008548"}},{"$f":"H159/I159","v":{"v":0,"d":"0%"}},null,11.101,{"$f":"+IF(C159=\"T1\",H159,\" \")","v":" "},{"$f":"+IF(C159=\"T1\",I159,\" \")","v":" "},{"$f":"+IF(C159=\"T2\",H159,\" \")","v":" "},{"$f":"+IF(C159=\"T2\",I159,\" \")","v":" "},{"$f":"+IF(C159=\"T3\",H159,\" \")","v":" "},{"$f":"+IF(C159=\"T3\",I159,\" \")","v":" "},{"$f":"+IF(C159=\"T4\",H159,\" \")","v":" "},{"$f":"+IF(C159=\"T4\",I159,\" \")","v":" "},{"$f":"+IF(C159=\"T5\",H159,\" \")","v":" "},{"$f":"+IF(C159=\"T5\",I159,\" \")","v":" "},{"$f":"+IF(C159=\"T6\",H159,\" \")","v":" "},{"$f":"+IF(C159=\"T6\",I159,\" \")","v":" "},null,11.101,{"$f":"IF(B159=\"B\",H159,\" \")","v":{"v":0,"d":"0.000000"}},{"$f":"IF(B159=\"B\",I159,\" \")","v":{"v":8.548E-3,"d":"0.008548"}},{"v":0,"d":"0%"}]
[11.102,null,null,"Has the agency implemented protocols to ensure that all IT facilities (e.g., data centers, server rooms, etc.) and equipment are properly secured to guard against internal or external threats or attacks?",{"$f":"+IF(Checklist!D165=\"\",0,Checklist!D165)","v":0},{"$f":"Weights!E159","v":{"v":2.186E-3,"d":"0.002186"}},{"$f":"IF(Checklist!C165=\"X\", 0, 1)","v":1},0,{"v":8.744E-3,"d":"0.008744"},{"v":0,"d":"0%"},null,11.102,{"$f":"+IF(C160=\"T1\",H160,\" \")","v":" "},{"$f":"+IF(C160=\"T1\",I160,\" \")","v":" "},{"$f":"+IF(C160=\"T2\",H160,\" \")","v":" "},{"$f":"+IF(C160=\"T2\",I160,\" \")","v":" "},{"$f":"+IF(C160=\"T3\",H160,\" \")","v":" "},{"$f":"+IF(C160=\"T3\",I160,\" \")","v":" "},{"$f":"+IF(C160=\"T4\",H160,\" \")","v":" "},{"$f":"+IF(C160=\"T4\",I160,\" \")","v":" "},{"$f":"+IF(C160=\"T5\",H160,\" \")","v":" "},{"$f":"+IF(C160=\"T5\",I160,\" \")","v":" "},{"$f":"+IF(C160=\"T6\",H160,\" \")","v":" "},{"$f":"+IF(C160=\"T6\",I160,\" \")","v":" "},null,11.102,{"$f":"IF(B160=\"B\",H160,\" \")","v":" "},{"$f":"IF(B160=\"B\",I160,\" \")","v":" "}," "]
[11.103,null,null,"Has a written strategy been developed and integrated into the overall security program to mitigate the cyber risk identified?",{"$f":"+IF(Checklist!D166=\"\",0,Checklist!D166)","v":0},{"$f":"Weights!E160","v":0.002108},{"$f":"IF(Checklist!C166=\"X\", 0, 1)","v":1},0,0.008432,{"v":0,"d":"0%"},null,11.103," "," "," "," "," "," "," "," "," "," "," "," ",null,11.103," "," "," "]
[11.104,null,null,"Does the agency have a designated representative to secure the internal network through appropriate access controls for employees, a strong authentication (i.e., password) policy, encrypting sensitive data, and employing network security infrastructure (example: firewalls, intrusion detection systems, IT security audits, antivirus, etc.)?",{"$f":"+IF(Checklist!D167=\"\",0,Checklist!D167)","v":0},{"$f":"Weights!E161","v":{"v":2.166E-3,"d":"0.002166"}},{"$f":"IF(Checklist!C167=\"X\", 0, 1)","v":1},0,0.008664,{"v":0,"d":"0%"},null,11.104," "," "," "," "," "," "," "," "," "," "," "," ",null,11.104," "," "," "]
[11.105,null,null,"Does the agency ensure that recurring cyber security training reinforces security roles, responsibilities, and duties of employees at all levels to protect against and recognize cyber threats?",{"$f":"+IF(Checklist!D168=\"\",0,Checklist!D168)","v":0},{"$f":"Weights!E162","v":0.002123},{"$f":"IF(Checklist!C168=\"X\", 0, 1)","v":1},0,0.008492,{"v":0,"d":"0%"},null,11.105," "," "," "," "," "," "," "," "," "," "," "," ",null,11.105," "," "," "]
[11.106,"B",null,"Has the agency established a cyber-incident response and reporting protocol?",{"$f":"+IF(Checklist!D169=\"\",0,Checklist!D169)","v":0},{"$f":"Weights!E163","v":0.002123},{"$f":"IF(Checklist!C169=\"X\", 0, 1)","v":1},0,0.008492,{"v":0,"d":"0%"},null,11.106," "," "," "," "," "," "," "," "," "," "," "," ",null,11.106,{"v":0,"d":"0.000000"},0.008492,{"v":0,"d":"0%"}]
[11.107,null,null,"Is the agency aware of and using available resources (e.g., standards, PT-ISAC, US CERT, National Cyber Security Communication and Integration Center, etc.)?",{"$f":"+IF(Checklist!D170=\"\",0,Checklist!D170)","v":0},{"$f":"Weights!E164","v":0.002148},{"$f":"IF(Checklist!C170=\"X\", 0, 1)","v":1},0,0.008592,{"v":0,"d":"0%"},null,11.107," "," "," "," "," "," "," "," "," "," "," "," ",null,11.107," "," "," "]
[{"$nulls":3},"FACILITY SECURITY AND ACCESS CONTROLS"]
[{"v":12,"d":"12.000"},null,null,"Control Access to Security Critical Facilities with ID badges for all visitors, employees and contractors",{"$nulls":3},{"$f":"SUM(H168:H194)","v":{"v":0,"d":"0.0000"}},{"$f":"SUM(I168:I194)","v":{"v":0.056452,"d":"0.0565"}},{"$f":"H167/I167","v":{"v":0,"d":"0%"}},null,{"v":12,"d":"12.000"},{"$nulls":13},{"v":12,"d":"12.000"},{"$f":"SUM(AA168:AA194)","v":{"v":0,"d":"0.000000"}},{"$f":"SUM(AB168:AB194)","v":0.017332},{"$f":"AA167/AB167","v":{"v":0,"d":"0%"}}]
[12.101,"B",null,"Have assets and facilities requiring restricted access been identified? ",{"$f":"+IF(Checklist!D173=\"\",0,Checklist!D173)","v":0},{"$f":"Weights!E167","v":0.000549},{"$f":"IF(Checklist!C173=\"X\", 0, 1)","v":1},{"$f":"E168*F168*G168","v":0},{"$f":"F168*G168*4","v":{"v":2.196E-3,"d":"0.002196"}},{"$f":"H168/I168","v":{"v":0,"d":"0%"}},null,12.101,{"$f":"+IF(C168=\"T1\",H168,\" \")","v":" "},{"$f":"+IF(C168=\"T1\",I168,\" \")","v":" "},{"$f":"+IF(C168=\"T2\",H168,\" \")","v":" "},{"$f":"+IF(C168=\"T2\",I168,\" \")","v":" "},{"$f":"+IF(C168=\"T3\",H168,\" \")","v":" "},{"$f":"+IF(C168=\"T3\",I168,\" \")","v":" "},{"$f":"+IF(C168=\"T4\",H168,\" \")","v":" "},{"$f":"+IF(C168=\"T4\",I168,\" \")","v":" "},{"$f":"+IF(C168=\"T5\",H168,\" \")","v":" "},{"$f":"+IF(C168=\"T5\",I168,\" \")","v":" "},{"$f":"+IF(C168=\"T6\",H168,\" \")","v":" "},{"$f":"+IF(C168=\"T6\",I168,\" \")","v":" "},null,12.101,{"$f":"IF(B168=\"B\",H168,\" \")","v":{"v":0,"d":"0.000000"}},{"$f":"IF(B168=\"B\",I168,\" \")","v":{"v":2.196E-3,"d":"0.002196"}},{"$f":"IF(AA168=\"NOT SCORED\",\"NOT SCORED\",IF(B168=\"B\",AA168/AB168,\" \"))","v":{"v":0,"d":"0%"}}]
[12.102,"B",null,"Are ID badges or other measures employed to restrict access to facilities not open to the public?",{"$f":"+IF(Checklist!D174=\"\",0,Checklist!D174)","v":0},{"$f":"Weights!E168","v":0.000541},{"$f":"IF(Checklist!C174=\"X\", 0, 1)","v":1},0,0.002164,{"v":0,"d":"0%"},null,12.102,{"$f":"+IF(C169=\"T1\",H169,\" \")","v":" "},{"$f":"+IF(C169=\"T1\",I169,\" \")","v":" "},{"$f":"+IF(C169=\"T2\",H169,\" \")","v":" "},{"$f":"+IF(C169=\"T2\",I169,\" \")","v":" "},{"$f":"+IF(C169=\"T3\",H169,\" \")","v":" "},{"$f":"+IF(C169=\"T3\",I169,\" \")","v":" "},{"$f":"+IF(C169=\"T4\",H169,\" \")","v":" "},{"$f":"+IF(C169=\"T4\",I169,\" \")","v":" "},{"$f":"+IF(C169=\"T5\",H169,\" \")","v":" "},{"$f":"+IF(C169=\"T5\",I169,\" \")","v":" "},{"$f":"+IF(C169=\"T6\",H169,\" \")","v":" "},{"$f":"+IF(C169=\"T6\",I169,\" \")","v":" "},null,12.102,{"$f":"IF(B169=\"B\",H169,\" \")","v":{"v":0,"d":"0.000000"}},{"$f":"IF(B169=\"B\",I169,\" \")","v":0.002164},{"v":0,"d":"0%"}]
[12.103,"B","T2","Has the transit agency developed and implemented procedures to monitor, update and document access control (e.g. card key, ID badges, keys, safe combinations, etc.)?",{"$f":"+IF(Checklist!D175=\"\",0,Checklist!D175)","v":0},{"$f":"Weights!E169","v":0.000541},{"$f":"IF(Checklist!C175=\"X\", 0, 1)","v":1},0,0.002164,{"v":0,"d":"0%"},null,12.103," "," ",0,0.002164," "," "," "," "," "," "," "," ",null,12.103,{"v":0,"d":"0.000000"},0.002164,{"v":0,"d":"0%"}]
[12.104,"B",null,"Does the agency have procedures to issue ID badges for visitors and contractors?",{"$f":"+IF(Checklist!D176=\"\",0,Checklist!D176)","v":0},{"$f":"Weights!E170","v":0.000543},{"$f":"IF(Checklist!C176=\"X\", 0, 1)","v":1},0,0.002172,{"v":0,"d":"0%"},null,12.104," "," "," "," "," "," "," "," "," "," "," "," ",null,12.104,{"v":0,"d":"0.000000"},0.002172,{"v":0,"d":"0%"}]
[12.105,null,null,"Does the agency require escorts for visitors accessing non-public areas?",{"$f":"+IF(Checklist!D177=\"\",0,Checklist!D177)","v":0},{"$f":"Weights!E171","v":0.000541},{"$f":"IF(Checklist!C177=\"X\", 0, 1)","v":1},0,0.002164,{"v":0,"d":"0%"},null,12.105," "," "," "," "," "," "," "," "," "," "," "," ",null,12.105," "," "," "]
[12.106,null,null,"Is CCTV equipment installed in transit agency facilities?",{"$f":"+IF(Checklist!D178=\"\",0,Checklist!D178)","v":0},{"$f":"Weights!E172","v":0.000541},{"$f":"IF(Checklist!C178=\"X\", 0, 1)","v":1},0,0.002164,{"v":0,"d":"0%"},null,12.106," "," "," "," "," "," "," "," "," "," "," "," ",null,12.106," "," "," "]
[12.107,null,null,"Is CCTV equipment protecting critical assets interfaced with an access control system?",{"$f":"+IF(Checklist!D179=\"\",0,Checklist!D179)","v":0},{"$f":"Weights!E173","v":0.000539},{"$f":"IF(Checklist!C179=\"X\", 0, 1)","v":1},0,0.002156,{"v":0,"d":"0%"},null,12.107," "," "," "," "," "," "," "," "," "," "," "," ",null,12.107," "," "," "]
[12.108,null,null,"Is CCTV equipment installed on transit vehicles?",{"$f":"+IF(Checklist!D180=\"\",0,Checklist!D180)","v":0},{"$f":"Weights!E174","v":0.000487},{"$f":"IF(Checklist!C180=\"X\", 0, 1)","v":1},0,0.001948,{"v":0,"d":"0%"},null,12.108," "," "," "," "," "," "," "," "," "," "," "," ",null,12.108," "," "," "]
[12.109,null,null,"Are Crime Prevention through Environmental Design (CPTED) and technology (e.g., CCTV, access control, intrusion detection, bollards, etc.) incorporated into design criteria for all new and/or existing capital projects?",{"$f":"+IF(Checklist!D181=\"\",0,Checklist!D181)","v":0},{"$f":"Weights!E175","v":0.000532},{"$f":"IF(Checklist!C181=\"X\", 0, 1)","v":1},0,0.002128,{"v":0,"d":"0%"},null,12.109," "," "," "," "," "," "," "," "," "," "," "," ",null,12.109," "," "," "]
[{"v":12.11,"d":"12.110"},null,null,"Based on the risk assessment, does the agency use fencing, barriers, and/or intrusion detection to protect against unauthorized entry into stations, facilities, and other identified critical assets?",{"$f":"+IF(Checklist!D182=\"\",0,Checklist!D182)","v":0},{"$f":"Weights!E176","v":0.000532},{"$f":"IF(Checklist!C182=\"X\", 0, 1)","v":1},0,0.002128,{"v":0,"d":"0%"},null,{"v":12.11,"d":"12.110"}," "," "," "," "," "," "," "," "," "," "," "," ",null,{"v":12.11,"d":"12.110"}," "," "," "]
[12.111,"B","T2","Has the system implemented protective measures to secure high risk/high consequence assets and systems identified in risk assessments?  Examples of protective measures include but are not limited to CCTV, intrusion detection systems, smart camera technology, fencing, enhanced lighting, access control, LE patrols, K-9s, protection of ventilation systems.    If protective measures for this infrastructure are employed, summarize type and location in in the justification.",{"$f":"+IF(Checklist!D183=\"\",0,Checklist!D183)","v":0},{"$f":"Weights!E177","v":{"v":0.00054,"d":"0.000540"}},{"$f":"IF(Checklist!C183=\"X\", 0, 1)","v":1},0,{"v":2.16E-3,"d":"0.002160"},{"v":0,"d":"0%"},null,12.111," "," ",0,2.16E-3," "," "," "," "," "," "," "," ",null,12.111,{"v":0,"d":"0.000000"},{"v":2.16E-3,"d":"0.002160"},{"v":0,"d":"0%"}]
[12.112,null,null,"Does the transit agency monitor a network of security, fire, duress, intrusion, utility and internal 911 alarm systems?",{"$f":"+IF(Checklist!D184=\"\",0,Checklist!D184)","v":0},{"$f":"Weights!E178","v":0.000528},{"$f":"IF(Checklist!C184=\"X\", 0, 1)","v":1},0,0.002112,{"v":0,"d":"0%"},null,12.112," "," "," "," "," "," "," "," "," "," "," "," ",null,12.112," "," "," "]
[12.113,null,null,"Are emergency call boxes provided for passengers?",{"$f":"+IF(Checklist!D185=\"\",0,Checklist!D185)","v":0},{"$f":"Weights!E179","v":0.000481},{"$f":"IF(Checklist!C185=\"X\", 0, 1)","v":1},0,0.001924,{"v":0,"d":"0%"},null,12.113," "," "," "," "," "," "," "," "," "," "," "," ",null,12.113," "," "," "]
[12.114,null,null,"Do transit agency personnel administer an automated employee access control system and perform corrective analysis of security breaches?",{"$f":"+IF(Checklist!D186=\"\",0,Checklist!D186)","v":0},{"$f":"Weights!E180","v":{"v":0.00054,"d":"0.000540"}},{"$f":"IF(Checklist!C186=\"X\", 0, 1)","v":1},0,{"v":2.16E-3,"d":"0.002160"},{"v":0,"d":"0%"},null,12.114," "," "," "," "," "," "," "," "," "," "," "," ",null,12.114," "," "," "]
[12.115,null,null,"Does the agency have policies and procedures for screening of mail and/or outside deliveries?",{"$f":"+IF(Checklist!D187=\"\",0,Checklist!D187)","v":0},{"$f":"Weights!E181","v":0.000508},{"$f":"IF(Checklist!C187=\"X\", 0, 1)","v":1},0,{"v":2.032E-3,"d":"0.002032"},{"v":0,"d":"0%"},null,12.115," "," "," "," "," "," "," "," "," "," "," "," ",null,12.115," "," "," "]
[12.116,null,null,"Have locks, bullet resistant materials and anti-fragmentation materials been installed/used at critical locations?",{"$f":"+IF(Checklist!D188=\"\",0,Checklist!D188)","v":0},{"$f":"Weights!E182","v":0.000525},{"$f":"IF(Checklist!C188=\"X\", 0, 1)","v":1},0,{"v":0.0021,"d":"0.002100"},{"v":0,"d":"0%"},null,12.116," "," "," "," "," "," "," "," "," "," "," "," ",null,12.116," "," "," "]
[12.117,null,null,"Does the agency use National Fire Protection Association (NFPA) Standard 130 or equivalent to evaluate fire/life safety in station design or modification (including fire detection systems, firewalls and flame-resistant materials, back-up powered emergency lighting, defaults in turnstile and other systems supporting emergency exists, and pre-recorded public announcements)?",{"$f":"+IF(Checklist!D189=\"\",0,Checklist!D189)","v":0},{"$f":"Weights!E183","v":0.000499},{"$f":"IF(Checklist!C189=\"X\", 0, 1)","v":1},0,0.001996,{"v":0,"d":"0%"},null,12.117," "," "," "," "," "," "," "," "," "," "," "," ",null,12.117," "," "," "]
[12.118,null,null,"Is directional signage with adequate lighting provided in a consistent manner in all stations, both to provide orientation and to support emergency evacuation?",{"$f":"+IF(Checklist!D190=\"\",0,Checklist!D190)","v":0},{"$f":"Weights!E184","v":0.000532},{"$f":"IF(Checklist!C190=\"X\", 0, 1)","v":1},0,0.002128,{"v":0,"d":"0%"},null,12.118," "," "," "," "," "," "," "," "," "," "," "," ",null,12.118," "," "," "]
[12.119,null,null,"Are gates and locks used on all facility doors to prevent unauthorized access? ",{"$f":"+IF(Checklist!D191=\"\",0,Checklist!D191)","v":0},{"$f":"Weights!E185","v":0.000539},{"$f":"IF(Checklist!C191=\"X\", 0, 1)","v":1},0,0.002156,{"v":0,"d":"0%"},null,12.119," "," "," "," "," "," "," "," "," "," "," "," ",null,12.119," "," "," "]
[{"v":12.12,"d":"12.120"},null,null,"Are keys controlled through an established program managed by the security/police function? ",{"$f":"+IF(Checklist!D192=\"\",0,Checklist!D192)","v":0},{"$f":"Weights!E186","v":{"v":5.31E-4,"d":"0.000531"}},{"$f":"IF(Checklist!C192=\"X\", 0, 1)","v":1},0,{"v":2.124E-3,"d":"0.002124"},{"v":0,"d":"0%"},null,{"v":12.12,"d":"12.120"}," "," "," "," "," "," "," "," "," "," "," "," ",null,{"v":12.12,"d":"12.120"}," "," "," "]
[12.121,"B",null,"Are gates and locks also used to close down system facilities after operating hours?",{"$f":"+IF(Checklist!D193=\"\",0,Checklist!D193)","v":0},{"$f":"Weights!E187","v":{"v":0.00054,"d":"0.000540"}},{"$f":"IF(Checklist!C193=\"X\", 0, 1)","v":1},0,{"v":2.16E-3,"d":"0.002160"},{"v":0,"d":"0%"},null,12.121," "," "," "," "," "," "," "," "," "," "," "," ",null,12.121,{"v":0,"d":"0.000000"},{"v":2.16E-3,"d":"0.002160"},{"v":0,"d":"0%"}]
[12.122,null,null,"Do transit vehicles have radios, silent alarms, and/or passenger communication systems?",{"$f":"+IF(Checklist!D194=\"\",0,Checklist!D194)","v":0},{"$f":"Weights!E188","v":0.000526},{"$f":"IF(Checklist!C194=\"X\", 0, 1)","v":1},0,{"v":2.104E-3,"d":"0.002104"},{"v":0,"d":"0%"},null,12.122," "," "," "," "," "," "," "," "," "," "," "," ",null,12.122," "," "," "]
[12.123,null,null,"Does the transit agency use graffiti-resistant/etch-resistant materials for walls, ceilings, and windows?",{"$f":"+IF(Checklist!D195=\"\",0,Checklist!D195)","v":0},{"$f":"Weights!E189","v":0.000403},{"$f":"IF(Checklist!C195=\"X\", 0, 1)","v":1},0,0.001612,{"v":0,"d":"0%"},null,12.123," "," "," "," "," "," "," "," "," "," "," "," ",null,12.123," "," "," "]
[12.124,"B",null,"Are Uninterruptible Power Supply (UPS) or redundant power sources provided for safety and security of critical equipment, such as but not limited to: exit and platform lighting; parking lot lighting; ancillary space and shop lighting; intrusion detection (alarmed rooms and spaces, fare collection equipment, etc.); fire detection, alarm and suppression systems; public address (shop and public areas); call-for-aid telephones; CCTV; emergency trip stations; vital train control functions; etc.?",{"$f":"+IF(Checklist!D196=\"\",0,Checklist!D196)","v":0},{"$f":"Weights!E190","v":0.000538},{"$f":"IF(Checklist!C196=\"X\", 0, 1)","v":1},0,0.002152,{"v":0,"d":"0%"},null,12.124," "," "," "," "," "," "," "," "," "," "," "," ",null,12.124,{"v":0,"d":"0.000000"},0.002152,{"v":0,"d":"0%"}]
[12.125,null,null,"At passenger stations at which a vulnerability assessment has identified a significant risk, and to the extent practicable, has the owner/operator removed trash receptacles and other non-essential receptacles or containers  (with the exception of bomb resistant receptacles or clear plastic containers) from the platform areas of passenger terminals and stations?",{"$f":"+IF(Checklist!D197=\"\",0,Checklist!D197)","v":0},{"$f":"Weights!E191","v":0.000467},{"$f":"IF(Checklist!C197=\"X\", 0, 1)","v":1},0,0.001868,{"v":0,"d":"0%"},null,12.125," "," "," "," "," "," "," "," "," "," "," "," ",null,12.125," "," "," "]
[12.126,"B",null,"Does the agency employ specific protective measures for all critical infrastructure  (e.g., tunnels, bridges, stations, control centers, etc) identified through the risk assessment particularly at access points and ventilation infrastructure in place and maintained in optimal condition? Examples of protective measures include, but are not limited to, CCTV, intrusion detection systems, smart camera technology, fencing, lighting, access control, law enforcement patrols, canine patrols, physical protection for ventilation systems.  If protective measures for this infrastructure are employed, summarize type and location in the justification.",{"$f":"+IF(Checklist!D198=\"\",0,Checklist!D198)","v":0},{"$f":"Weights!E192","v":0.000541},{"$f":"IF(Checklist!C198=\"X\", 0, 1)","v":1},0,0.002164,{"v":0,"d":"0%"},null,12.126," "," "," "," "," "," "," "," "," "," "," "," ",null,12.126,{"v":0,"d":"0.000000"},0.002164,{"v":0,"d":"0%"}]
[12.127,null,"T1","Does the agency have or utilize explosive detection canine teams, either maintained by the system or made available from other law enforcement agencies?  If so, has the system implemented procedures for reporting of and response to positive reactions by the canine?",{"$f":"+IF(Checklist!D199=\"\",0,Checklist!D199)","v":0},{"$f":"Weights!E193","v":0.000529},{"$f":"IF(Checklist!C199=\"X\", 0, 1)","v":1},0,0.002116,{"v":0,"d":"0%"},null,12.127,0,0.002116," "," "," "," "," "," "," "," "," "," ",null,12.127," "," "," "]
[{"v":13,"d":"13.000"},null,null,"Conduct Physical Security Inspections",{"$nulls":3},{"$f":"SUM(H196:H204)","v":{"v":0,"d":"0.0000"}},{"$f":"SUM(I196:I204)","v":{"v":0.062608,"d":"0.0626"}},{"$f":"H195/I195","v":{"v":0,"d":"0%"}},null,{"v":13,"d":"13.000"},{"$nulls":13},{"v":13,"d":"13.000"},{"$f":"SUM(AA196:AA201)","v":0},{"$f":"SUM(AB196:AB201)","v":0.02588},{"$f":"AA195/AB195","v":{"v":0,"d":"0%"}}]
[13.101,"B","T1","Does the agency conduct frequent inspections of key facilities, stations, terminals, trains and vehicles, or other critical assets for persons, materials, and items that do not belong?",{"$f":"+IF(Checklist!D201=\"\",0,Checklist!D201)","v":0},{"$f":"Weights!E195","v":{"v":0.00218,"d":"0.002180"}},{"$f":"IF(Checklist!C201=\"X\", 0, 1)","v":1},{"$f":"E196*F196*G196","v":0},{"$f":"F196*G196*4","v":{"v":0.00872,"d":"0.008720"}},{"$f":"H196/I196","v":{"v":0,"d":"0%"}},null,13.101,{"$f":"+IF(C196=\"T1\",H196,\" \")","v":0},{"$f":"+IF(C196=\"T1\",I196,\" \")","v":{"v":0.00872,"d":"0.008720"}},{"$f":"+IF(C196=\"T2\",H196,\" \")","v":" "},{"$f":"+IF(C196=\"T2\",I196,\" \")","v":" "},{"$f":"+IF(C196=\"T3\",H196,\" \")","v":" "},{"$f":"+IF(C196=\"T3\",I196,\" \")","v":" "},{"$f":"+IF(C196=\"T4\",H196,\" \")","v":" "},{"$f":"+IF(C196=\"T4\",I196,\" \")","v":" "},{"$f":"+IF(C196=\"T5\",H196,\" \")","v":" "},{"$f":"+IF(C196=\"T5\",I196,\" \")","v":" "},{"$f":"+IF(C196=\"T6\",H196,\" \")","v":" "},{"$f":"+IF(C196=\"T6\",I196,\" \")","v":" "},null,13.101,{"$f":"IF(B196=\"B\",H196,\" \")","v":{"v":0,"d":"0.000000"}},{"$f":"IF(B196=\"B\",I196,\" \")","v":{"v":0.00872,"d":"0.008720"}},{"v":0,"d":"0%"}]
[13.102,"B",null,"Has the transit agency established procedures for inspecting/sweeping vehicles and stations to identify and manage suspicious items, based on HOT characteristics (hidden, obviously suspicious, not typical) or equivalent system?",{"$f":"+IF(Checklist!D202=\"\",0,Checklist!D202)","v":0},{"$f":"Weights!E196","v":{"v":2.15E-3,"d":"0.002150"}},{"$f":"IF(Checklist!C202=\"X\", 0, 1)","v":1},0,{"v":8.6E-3,"d":"0.008600"},{"v":0,"d":"0%"},null,13.102,{"$f":"+IF(C197=\"T1\",H197,\" \")","v":" "},{"$f":"+IF(C197=\"T1\",I197,\" \")","v":" "},{"$f":"+IF(C197=\"T2\",H197,\" \")","v":" "},{"$f":"+IF(C197=\"T2\",I197,\" \")","v":" "},{"$f":"+IF(C197=\"T3\",H197,\" \")","v":" "},{"$f":"+IF(C197=\"T3\",I197,\" \")","v":" "},{"$f":"+IF(C197=\"T4\",H197,\" \")","v":" "},{"$f":"+IF(C197=\"T4\",I197,\" \")","v":" "},{"$f":"+IF(C197=\"T5\",H197,\" \")","v":" "},{"$f":"+IF(C197=\"T5\",I197,\" \")","v":" "},{"$f":"+IF(C197=\"T6\",H197,\" \")","v":" "},{"$f":"+IF(C197=\"T6\",I197,\" \")","v":" "},null,13.102,{"$f":"IF(B197=\"B\",H197,\" \")","v":{"v":0,"d":"0.000000"}},{"$f":"IF(B197=\"B\",I197,\" \")","v":{"v":8.6E-3,"d":"0.008600"}},{"v":0,"d":"0%"}]
[13.103,null,null,"Has the transit agency developed a form or quick reference guide for operations and personnel to conduct pre-trip, post-trip, and within-trip inspections?",{"$f":"+IF(Checklist!D203=\"\",0,Checklist!D203)","v":0},{"$f":"Weights!E197","v":{"v":0.00205,"d":"0.002050"}},{"$f":"IF(Checklist!C203=\"X\", 0, 1)","v":1},0,{"v":0.0082,"d":"0.008200"},{"v":0,"d":"0%"},null,13.103," "," "," "," "," "," "," "," "," "," "," "," ",null,13.103," "," "," "]
[13.104,null,null,"Has the transit agency developed a form or quick reference guide for station attendants and others regarding station and facility inspections?",{"$f":"+IF(Checklist!D204=\"\",0,Checklist!D204)","v":0},{"$f":"Weights!E198","v":{"v":0.00186,"d":"0.001860"}},{"$f":"IF(Checklist!C204=\"X\", 0, 1)","v":1},0,{"v":0.00744,"d":"0.007440"},{"v":0,"d":"0%"},null,13.104," "," "," "," "," "," "," "," "," "," "," "," ",null,13.104," "," "," "]
[13.105,null,"T2","Does the system document the results of inspections and implement any changes to policies and procedures or implement corrective actions, based on the findings?",{"$f":"+IF(Checklist!D205=\"\",0,Checklist!D205)","v":0},{"$f":"Weights!E199","v":{"v":0.00208,"d":"0.002080"}},{"$f":"IF(Checklist!C205=\"X\", 0, 1)","v":1},0,{"v":0.00832,"d":"0.008320"},{"v":0,"d":"0%"},null,13.105," "," ",0,0.00832," "," "," "," "," "," "," "," ",null,13.105," "," "," "]
[13.106,"B","T2","Does the agency conduct frequent inspections of access points, ventilation systems, and the interior of underground/underwater assets and systems for indications of suspicious activity?",{"$f":"+IF(Checklist!D206=\"\",0,Checklist!D206)","v":0},{"$f":"Weights!E200","v":{"v":2.14E-3,"d":"0.002140"}},{"$f":"IF(Checklist!C206=\"X\", 0, 1)","v":1},0,{"v":0.00856,"d":"0.008560"},{"v":0,"d":"0%"},null,13.106," "," ",0,0.00856," "," "," "," "," "," "," "," ",null,13.106,{"v":0,"d":"0.000000"},{"v":0.00856,"d":"0.008560"},{"v":0,"d":"0%"}]
[13.107,null,null,"Does the system integrate randomness and unpredictability into its security activities to enhance deterrent effect?",{"$f":"+IF(Checklist!D207=\"\",0,Checklist!D207)","v":0},{"$f":"Weights!E201","v":{"v":2.14E-3,"d":"0.002140"}},{"$f":"IF(Checklist!C207=\"X\", 0, 1)","v":1},0,{"v":0.00856,"d":"0.008560"},{"v":0,"d":"0%"},null,13.107," "," "," "," "," "," "," "," "," "," "," "," ",null,13.107," "," "," "]
[13.108,null,null,"Is there a process in place, with necessary training provided to personnel, to ensure that in service vehicles are inspected at regular periodic intervals for suspicious or unattended items? Specify type and frequency of inspections.",{"$f":"+IF(Checklist!D208=\"\",0,Checklist!D208)","v":0},{"$f":"Weights!E202","v":0.000525},{"$f":"IF(Checklist!C208=\"X\", 0, 1)","v":1},{"$f":"E203*F203*G203","v":0},{"$f":"F203*G203*4","v":{"v":0.0021,"d":"0.002100"}},{"$f":"H203/I203","v":{"v":0,"d":"0%"}},null,13.108,{"$nulls":13},13.108]
[13.109,null,null,"Is there a process in place, with necessary training provided to personnel, to ensure that all critical infrastructure are inspected at regular periodic intervals for suspicious or unattended items? Specify type and frequency of inspections.",{"$f":"+IF(Checklist!D209=\"\",0,Checklist!D209)","v":0},{"$f":"Weights!E203","v":0.000527},{"$f":"IF(Checklist!C209=\"X\", 0, 1)","v":1},0,0.002108,{"v":0,"d":"0%"},null,13.109,{"$nulls":13},13.109]
[{"$nulls":3},"BACKGROUND INVESTIGATIONS"]
[{"v":14,"d":"14.000"},null,null,"Conduct Background Investigations of Employees and Contractors",{"$nulls":3},{"$f":"SUM(H207:H211)","v":{"v":0,"d":"0.0000"}},{"$f":"SUM(I207:I211)","v":{"v":0.05956,"d":"0.0596"}},{"$f":"H206/I206","v":{"v":0,"d":"0%"}},null,{"v":14,"d":"14.000"},{"$nulls":13},{"v":14,"d":"14.000"},{"$f":"SUM(AA207:AA211)","v":{"v":0,"d":"0.000000"}},{"$f":"SUM(AB207:AB211)","v":{"v":0.03588,"d":"0.035880"}},{"$f":"AA206/AB206","v":{"v":0,"d":"0%"}}]
[14.101,"B","T2","Does the agency conduct background investigations (i.e., criminal history and motor vehicle records) on all new front-line operations and maintenance employees, and employees with access to sensitive security information, facilities and systems?",{"$f":"+IF(Checklist!D212=\"\",0,Checklist!D212)","v":0},{"$f":"Weights!E206","v":{"v":0.00303,"d":"0.003030"}},{"$f":"IF(Checklist!C212=\"X\", 0, 1)","v":1},{"$f":"E207*F207*G207","v":0},{"$f":"F207*G207*4","v":{"v":0.01212,"d":"0.012120"}},{"$f":"H207/I207","v":{"v":0,"d":"0%"}},null,14.101,{"$f":"+IF(C207=\"T1\",H207,\" \")","v":" "},{"$f":"+IF(C207=\"T1\",I207,\" \")","v":" "},{"$f":"+IF(C207=\"T2\",H207,\" \")","v":0},{"$f":"+IF(C207=\"T2\",I207,\" \")","v":0.01212},{"$f":"+IF(C207=\"T3\",H207,\" \")","v":" "},{"$f":"+IF(C207=\"T3\",I207,\" \")","v":" "},{"$f":"+IF(C207=\"T4\",H207,\" \")","v":" "},{"$f":"+IF(C207=\"T4\",I207,\" \")","v":" "},{"$f":"+IF(C207=\"T5\",H207,\" \")","v":" "},{"$f":"+IF(C207=\"T5\",I207,\" \")","v":" "},{"$f":"+IF(C207=\"T6\",H207,\" \")","v":" "},{"$f":"+IF(C207=\"T6\",I207,\" \")","v":" "},null,14.101,{"$f":"IF(B207=\"B\",H207,\" \")","v":{"v":0,"d":"0.000000"}},{"$f":"IF(B207=\"B\",I207,\" \")","v":{"v":0.01212,"d":"0.012120"}},{"$f":"IF(AA207=\"NOT SCORED\",\"NOT SCORED\",IF(B207=\"B\",AA207/AB207,\" \"))","v":{"v":0,"d":"0%"}}]
[14.102,"B","T2","To the extent allowed by agency policy or law, does the agency conduct background investigations on contractors, including vendors, with access to critical facilities, sensitive security systems, and sensitive security information?  ",{"$f":"+IF(Checklist!D213=\"\",0,Checklist!D213)","v":0},{"$f":"Weights!E207","v":{"v":0.003,"d":"0.003000"}},{"$f":"IF(Checklist!C213=\"X\", 0, 1)","v":1},0,{"v":0.012,"d":"0.012000"},{"v":0,"d":"0%"},null,14.102,{"$f":"+IF(C208=\"T1\",H208,\" \")","v":" "},{"$f":"+IF(C208=\"T1\",I208,\" \")","v":" "},{"$f":"+IF(C208=\"T2\",H208,\" \")","v":0},{"$f":"+IF(C208=\"T2\",I208,\" \")","v":0.012},{"$f":"+IF(C208=\"T3\",H208,\" \")","v":" "},{"$f":"+IF(C208=\"T3\",I208,\" \")","v":" "},{"$f":"+IF(C208=\"T4\",H208,\" \")","v":" "},{"$f":"+IF(C208=\"T4\",I208,\" \")","v":" "},{"$f":"+IF(C208=\"T5\",H208,\" \")","v":" "},{"$f":"+IF(C208=\"T5\",I208,\" \")","v":" "},{"$f":"+IF(C208=\"T6\",H208,\" \")","v":" "},{"$f":"+IF(C208=\"T6\",I208,\" \")","v":" "},null,14.102,{"$f":"IF(B208=\"B\",H208,\" \")","v":{"v":0,"d":"0.000000"}},{"$f":"IF(B208=\"B\",I208,\" \")","v":{"v":0.012,"d":"0.012000"}},{"v":0,"d":"0%"}]
[14.103,null,null,"Has counsel for the agency reviewed the process for conducting employee background investigations to confirm that procedures are consistent with applicable statutes and regulations?",{"$f":"+IF(Checklist!D214=\"\",0,Checklist!D214)","v":0},{"$f":"Weights!E208","v":{"v":2.99E-3,"d":"0.002990"}},{"$f":"IF(Checklist!C214=\"X\", 0, 1)","v":1},0,{"v":0.01196,"d":"0.011960"},{"v":0,"d":"0%"},null,14.103," "," "," "," "," "," "," "," "," "," "," "," ",null,14.103,{"$f":"IF(B209=\"B\",H209,\" \")","v":" "},{"$f":"IF(B209=\"B\",I209,\" \")","v":" "}," "]
[14.104,"B",null,"Is the background investigation process documented?",{"$f":"+IF(Checklist!D215=\"\",0,Checklist!D215)","v":0},{"$f":"Weights!E209","v":{"v":0.00294,"d":"0.002940"}},{"$f":"IF(Checklist!C215=\"X\", 0, 1)","v":1},0,{"v":0.01176,"d":"0.011760"},{"v":0,"d":"0%"},null,14.104," "," "," "," "," "," "," "," "," "," "," "," ",null,14.104,{"$f":"IF(B210=\"B\",H210,\" \")","v":{"v":0,"d":"0.000000"}},{"$f":"IF(B210=\"B\",I210,\" \")","v":{"v":0.01176,"d":"0.011760"}},{"v":0,"d":"0%"}]
[14.105,null,null,"Is the criteria for background investigations based on employee type (senior management staff, law enforcement officers, managers/supervisors, operators, maintenance, safety/security sensitive, contractor, etc.) and/or responsibility and access documented?  ",{"$f":"+IF(Checklist!D216=\"\",0,Checklist!D216)","v":0},{"$f":"Weights!E210","v":{"v":0.00293,"d":"0.002930"}},{"$f":"IF(Checklist!C216=\"X\", 0, 1)","v":1},0,{"v":0.01172,"d":"0.011720"},{"v":0,"d":"0%"},null,14.105," "," "," "," "," "," "," "," "," "," "," "," ",null,14.105,{"$f":"IF(B211=\"B\",H211,\" \")","v":" "},{"$f":"IF(B211=\"B\",I211,\" \")","v":" "}," "]
[{"$nulls":3},"DOCUMENT CONTROL"]
[{"v":15,"d":"15.000"},null,null,"Control Access to documents of security critical systems and facilities",{"$nulls":3},{"$f":"SUM(H214:H216)","v":{"v":0,"d":"0.0000"}},{"$f":"SUM(I214:I216)","v":{"v":0.05879999999999999,"d":"0.0588"}},{"$f":"H213/I213","v":{"v":0,"d":"0%"}},null,{"v":15,"d":"15.000"},{"$nulls":13},{"v":15,"d":"15.000"},{"$f":"SUM(AA214:AA216)","v":{"v":0,"d":"0.000000"}},{"$f":"SUM(AB214:AB216)","v":{"v":0.039599999999999996,"d":"0.039600"}},{"$f":"AA213/AB213","v":{"v":0,"d":"0%"}}]
[15.101,"B","T2","Does the agency keep documentation of its security critical systems, such as tunnels, bridges, HVAC systems and intrusion alarm detection systems (i.e. plans, schematics, etc.) protected from unauthorized access?",{"$f":"+IF(Checklist!D219=\"\",0,Checklist!D219)","v":0},{"$f":"Weights!E213","v":{"v":0.005,"d":"0.005000"}},{"$f":"IF(Checklist!C219=\"X\", 0, 1)","v":1},{"$f":"E214*F214*G214","v":0},{"$f":"F214*G214*4","v":{"v":0.02,"d":"0.020000"}},{"$f":"H214/I214","v":{"v":0,"d":"0%"}},null,15.101,{"$f":"+IF(C214=\"T1\",H214,\" \")","v":" "},{"$f":"+IF(C214=\"T1\",I214,\" \")","v":" "},{"$f":"+IF(C214=\"T2\",H214,\" \")","v":0},{"$f":"+IF(C214=\"T2\",I214,\" \")","v":0.02},{"$f":"+IF(C214=\"T3\",H214,\" \")","v":" "},{"$f":"+IF(C214=\"T3\",I214,\" \")","v":" "},{"$f":"+IF(C214=\"T4\",H214,\" \")","v":" "},{"$f":"+IF(C214=\"T4\",I214,\" \")","v":" "},{"$f":"+IF(C214=\"T5\",H214,\" \")","v":" "},{"$f":"+IF(C214=\"T5\",I214,\" \")","v":" "},{"$f":"+IF(C214=\"T6\",H214,\" \")","v":" "},{"$f":"+IF(C214=\"T6\",I214,\" \")","v":" "},null,15.101,{"$f":"IF(B214=\"B\",H214,\" \")","v":{"v":0,"d":"0.000000"}},{"$f":"IF(B214=\"B\",I214,\" \")","v":{"v":0.02,"d":"0.020000"}},{"$f":"IF(AA214=\"NOT SCORED\",\"NOT SCORED\",IF(B214=\"B\",AA214/AB214,\" \"))","v":{"v":0,"d":"0%"}}]
[15.102,"B",null,"Has the agency designated a department/person responsible for administering the access control policy with respect to agency documents?",{"$f":"+IF(Checklist!D220=\"\",0,Checklist!D220)","v":0},{"$f":"Weights!E214","v":{"v":0.0049,"d":"0.004900"}},{"$f":"IF(Checklist!C220=\"X\", 0, 1)","v":1},0,{"v":0.0196,"d":"0.019600"},{"v":0,"d":"0%"},null,15.102,{"$f":"+IF(C215=\"T1\",H215,\" \")","v":" "},{"$f":"+IF(C215=\"T1\",I215,\" \")","v":" "},{"$f":"+IF(C215=\"T2\",H215,\" \")","v":" "},{"$f":"+IF(C215=\"T2\",I215,\" \")","v":" "},{"$f":"+IF(C215=\"T3\",H215,\" \")","v":" "},{"$f":"+IF(C215=\"T3\",I215,\" \")","v":" "},{"$f":"+IF(C215=\"T4\",H215,\" \")","v":" "},{"$f":"+IF(C215=\"T4\",I215,\" \")","v":" "},{"$f":"+IF(C215=\"T5\",H215,\" \")","v":" "},{"$f":"+IF(C215=\"T5\",I215,\" \")","v":" "},{"$f":"+IF(C215=\"T6\",H215,\" \")","v":" "},{"$f":"+IF(C215=\"T6\",I215,\" \")","v":" "},null,15.102,{"$f":"IF(B215=\"B\",H215,\" \")","v":{"v":0,"d":"0.000000"}},{"$f":"IF(B215=\"B\",I215,\" \")","v":{"v":0.0196,"d":"0.019600"}},{"v":0,"d":"0%"}]
[15.103,null,null,"Does the security review committee (or other designated group) review document control practices, assess compliance applicable procedures, and identify discrepancies and necessary corrective action?",{"$f":"+IF(Checklist!D221=\"\",0,Checklist!D221)","v":0},{"$f":"Weights!E215","v":{"v":0.0048,"d":"0.004800"}},{"$f":"IF(Checklist!C221=\"X\", 0, 1)","v":1},0,{"v":0.0192,"d":"0.019200"},{"v":0,"d":"0%"},null,15.103," "," "," "," "," "," "," "," "," "," "," "," ",null,15.103,{"$f":"IF(B216=\"B\",H216,\" \")","v":" "},{"$f":"IF(B216=\"B\",I216,\" \")","v":" "}," "]
[{"v":16,"d":"16.000"},null,null,"Process for handling and access to Sensitive Security Information (SSI)",{"$nulls":3},{"$f":"SUM(H218:H221)","v":{"v":0,"d":"0.0000"}},{"$f":"SUM(I218:I221)","v":{"v":0.059036000000000005,"d":"0.0590"}},{"$f":"H217/I217","v":{"v":0,"d":"0%"}},null,{"v":16,"d":"16.000"},{"$nulls":13},{"v":16,"d":"16.000"},{"$f":"SUM(AA218:AA221)","v":{"v":0,"d":"0.000000"}},{"$f":"SUM(AB218:AB221)","v":0.029668},{"$f":"AA217/AB217","v":{"v":0,"d":"0%"}}]
[16.101,"B",null,"Does the agency have a documented policy for identifying and controlling the distribution of and access to documents  it considers to be Sensitive Security Information (SSI) pursuant to 49 CFR Part 15 or 1520?",{"$f":"+IF(Checklist!D223=\"\",0,Checklist!D223)","v":0},{"$f":"Weights!E217","v":{"v":3.764E-3,"d":"0.003764"}},{"$f":"IF(Checklist!C223=\"X\", 0, 1)","v":1},{"$f":"E218*F218*G218","v":0},{"$f":"F218*G218*4","v":0.015056},{"$f":"H218/I218","v":{"v":0,"d":"0%"}},null,16.101,{"$f":"+IF(C218=\"T1\",H218,\" \")","v":" "},{"$f":"+IF(C218=\"T1\",I218,\" \")","v":" "},{"$f":"+IF(C218=\"T2\",H218,\" \")","v":" "},{"$f":"+IF(C218=\"T2\",I218,\" \")","v":" "},{"$f":"+IF(C218=\"T3\",H218,\" \")","v":" "},{"$f":"+IF(C218=\"T3\",I218,\" \")","v":" "},{"$f":"+IF(C218=\"T4\",H218,\" \")","v":" "},{"$f":"+IF(C218=\"T4\",I218,\" \")","v":" "},{"$f":"+IF(C218=\"T5\",H218,\" \")","v":" "},{"$f":"+IF(C218=\"T5\",I218,\" \")","v":" "},{"$f":"+IF(C218=\"T6\",H218,\" \")","v":" "},{"$f":"+IF(C218=\"T6\",I218,\" \")","v":" "},null,16.101,{"$f":"IF(B218=\"B\",H218,\" \")","v":{"v":0,"d":"0.000000"}},{"$f":"IF(B218=\"B\",I218,\" \")","v":0.015056},{"v":0,"d":"0%"}]
[16.102,"B",null,"Does the agency have a documented policy for proper handling, control, and storage of documents labeled as or otherwise determined to be Sensitive Security Information (SSI) pursuant to 49 CFR Part 15 or 1520?",{"$f":"+IF(Checklist!D224=\"\",0,Checklist!D224)","v":0},{"$f":"Weights!E218","v":{"v":3.653E-3,"d":"0.003653"}},{"$f":"IF(Checklist!C224=\"X\", 0, 1)","v":1},0,0.014612,{"v":0,"d":"0%"},null,16.102,{"$f":"+IF(C219=\"T1\",H219,\" \")","v":" "},{"$f":"+IF(C219=\"T1\",I219,\" \")","v":" "},{"$f":"+IF(C219=\"T2\",H219,\" \")","v":" "},{"$f":"+IF(C219=\"T2\",I219,\" \")","v":" "},{"$f":"+IF(C219=\"T3\",H219,\" \")","v":" "},{"$f":"+IF(C219=\"T3\",I219,\" \")","v":" "},{"$f":"+IF(C219=\"T4\",H219,\" \")","v":" "},{"$f":"+IF(C219=\"T4\",I219,\" \")","v":" "},{"$f":"+IF(C219=\"T5\",H219,\" \")","v":" "},{"$f":"+IF(C219=\"T5\",I219,\" \")","v":" "},{"$f":"+IF(C219=\"T6\",H219,\" \")","v":" "},{"$f":"+IF(C219=\"T6\",I219,\" \")","v":" "},null,16.102,{"$f":"IF(B219=\"B\",H219,\" \")","v":{"v":0,"d":"0.000000"}},{"$f":"IF(B219=\"B\",I219,\" \")","v":0.014612},{"v":0,"d":"0%"}]
[16.103,null,null,"Are employees who may be provided SSI materials per 49 CFR Part 15 or 1520) familiar with the documented policy for the proper handling of such materials? ",{"$f":"+IF(Checklist!D225=\"\",0,Checklist!D225)","v":0},{"$f":"Weights!E219","v":0.003636},{"$f":"IF(Checklist!C225=\"X\", 0, 1)","v":1},0,0.014544,{"v":0,"d":"0%"},null,16.103," "," "," "," "," "," "," "," "," "," "," "," ",null,16.103,{"$f":"IF(B220=\"B\",H220,\" \")","v":" "},{"$f":"IF(B220=\"B\",I220,\" \")","v":" "}," "]
[16.104,null,null,"Have employees provided access to SSI material per 49 CFR Part 15 or 1520 received training on proper labeling, handling, dissemination, and storage (such as through the TSA on-line SSI training program)?",{"$f":"+IF(Checklist!D226=\"\",0,Checklist!D226)","v":0},{"$f":"Weights!E220","v":0.003706},{"$f":"IF(Checklist!C226=\"X\", 0, 1)","v":1},0,0.014824,{"v":0,"d":"0%"},null,16.104," "," "," "," "," "," "," "," "," "," "," "," ",null,16.104,{"$f":"IF(B221=\"B\",H221,\" \")","v":" "},{"$f":"IF(B221=\"B\",I221,\" \")","v":" "}," "]
[{"$nulls":3},"SECURITY PROGRAM AUDITS"]
[{"v":17,"d":"17.000"},null,null,"Audit Program",{"$nulls":3},{"$f":"SUM(H224:H237)","v":{"v":0,"d":"0.0000"}},{"$f":"SUM(I224:I237)","v":{"v":0.054684,"d":"0.0547"}},{"$f":"H223/I223","v":{"v":0,"d":"0%"}},null,{"v":17,"d":"17.000"},{"$nulls":13},{"v":17,"d":"17.000"},{"$f":"SUM(AA224:AA237)","v":{"v":0,"d":"0.000000"}},{"$f":"SUM(AB224:AB237)","v":0.019244},{"$f":"AA223/AB223","v":{"v":0,"d":"0%"}}]
[17.101,null,null,"Has the agency established a schedule for conducting  its internal security audit process?",{"$f":"+IF(Checklist!D229=\"\",0,Checklist!D229)","v":0},{"$f":"Weights!E223","v":0.000895},{"$f":"IF(Checklist!C229=\"X\", 0, 1)","v":1},{"$f":"E224*F224*G224","v":0},{"$f":"F224*G224*4","v":{"v":0.00358,"d":"0.003580"}},{"$f":"H224/I224","v":{"v":0,"d":"0%"}},null,17.101,{"$f":"+IF(C224=\"T1\",H224,\" \")","v":" "},{"$f":"+IF(C224=\"T1\",I224,\" \")","v":" "},{"$f":"+IF(C224=\"T2\",H224,\" \")","v":" "},{"$f":"+IF(C224=\"T2\",I224,\" \")","v":" "},{"$f":"+IF(C224=\"T3\",H224,\" \")","v":" "},{"$f":"+IF(C224=\"T3\",I224,\" \")","v":" "},{"$f":"+IF(C224=\"T4\",H224,\" \")","v":" "},{"$f":"+IF(C224=\"T4\",I224,\" \")","v":" "},{"$f":"+IF(C224=\"T5\",H224,\" \")","v":" "},{"$f":"+IF(C224=\"T5\",I224,\" \")","v":" "},{"$f":"+IF(C224=\"T6\",H224,\" \")","v":" "},{"$f":"+IF(C224=\"T6\",I224,\" \")","v":" "},null,17.101,{"$f":"IF(B224=\"B\",H224,\" \")","v":" "},{"$f":"IF(B224=\"B\",I224,\" \")","v":" "},{"$f":"IF(AA224=\"NOT SCORED\",\"NOT SCORED\",IF(B224=\"B\",AA224/AB224,\" \"))","v":" "}]
[17.102,"B",null,"Does the SSP contain a description of the process used by the agency to audit its implementation of the SSP over the course of the agency's published schedule?",{"$f":"+IF(Checklist!D230=\"\",0,Checklist!D230)","v":0},{"$f":"Weights!E224","v":{"v":0.00121,"d":"0.001210"}},{"$f":"IF(Checklist!C230=\"X\", 0, 1)","v":1},0,{"v":0.00484,"d":"0.004840"},{"v":0,"d":"0%"},null,17.102,{"$f":"+IF(C225=\"T1\",H225,\" \")","v":" "},{"$f":"+IF(C225=\"T1\",I225,\" \")","v":" "},{"$f":"+IF(C225=\"T2\",H225,\" \")","v":" "},{"$f":"+IF(C225=\"T2\",I225,\" \")","v":" "},{"$f":"+IF(C225=\"T3\",H225,\" \")","v":" "},{"$f":"+IF(C225=\"T3\",I225,\" \")","v":" "},{"$f":"+IF(C225=\"T4\",H225,\" \")","v":" "},{"$f":"+IF(C225=\"T4\",I225,\" \")","v":" "},{"$f":"+IF(C225=\"T5\",H225,\" \")","v":" "},{"$f":"+IF(C225=\"T5\",I225,\" \")","v":" "},{"$f":"+IF(C225=\"T6\",H225,\" \")","v":" "},{"$f":"+IF(C225=\"T6\",I225,\" \")","v":" "},null,17.102,{"$f":"IF(B225=\"B\",H225,\" \")","v":{"v":0,"d":"0.000000"}},{"$f":"IF(B225=\"B\",I225,\" \")","v":{"v":0.00484,"d":"0.004840"}},{"v":0,"d":"0%"}]
[17.103,"B",null,"Has the transit agency established checklists and procedures to govern the conduct of its internal security audit process?",{"$f":"+IF(Checklist!D231=\"\",0,Checklist!D231)","v":0},{"$f":"Weights!E225","v":{"v":1.209E-3,"d":"0.001209"}},{"$f":"IF(Checklist!C231=\"X\", 0, 1)","v":1},0,{"v":4.836E-3,"d":"0.004836"},{"v":0,"d":"0%"},null,17.103," "," "," "," "," "," "," "," "," "," "," "," ",null,17.103,{"v":0,"d":"0.000000"},{"v":4.836E-3,"d":"0.004836"},{"v":0,"d":"0%"}]
[17.104,"B",null,"Is the transit agency complying with its internal security audit schedule? ",{"$f":"+IF(Checklist!D232=\"\",0,Checklist!D232)","v":0},{"$f":"Weights!E226","v":{"v":1.188E-3,"d":"0.001188"}},{"$f":"IF(Checklist!C232=\"X\", 0, 1)","v":1},0,0.004752,{"v":0,"d":"0%"},null,17.104," "," "," "," "," "," "," "," "," "," "," "," ",null,17.104,{"v":0,"d":"0.000000"},0.004752,{"v":0,"d":"0%"}]
[17.105,"B",null,"Is each internal security audit documented in a written report, which includes evaluation of the adequacy and effectiveness of the SSP element and applicable implementing procedures audited, needed corrected actions, needed recommendations, an implementation schedule for corrective actions and status reporting?",{"$f":"+IF(Checklist!D233=\"\",0,Checklist!D233)","v":0},{"$f":"Weights!E227","v":{"v":1.204E-3,"d":"0.001204"}},{"$f":"IF(Checklist!C233=\"X\", 0, 1)","v":1},0,{"v":4.816E-3,"d":"0.004816"},{"v":0,"d":"0%"},null,17.105," "," "," "," "," "," "," "," "," "," "," "," ",null,17.105,{"v":0,"d":"0.000000"},{"v":4.816E-3,"d":"0.004816"},{"v":0,"d":"0%"}]
[17.106,null,null,"In the last 12 months, has the Security Review Committee (or other designated group) addressed the findings and recommendations from the internal security audits, and updated plans, protocols and processes as necessary?",{"$f":"+IF(Checklist!D234=\"\",0,Checklist!D234)","v":0},{"$f":"Weights!E228","v":{"v":1.157E-3,"d":"0.001157"}},{"$f":"IF(Checklist!C234=\"X\", 0, 1)","v":1},0,0.004628,{"v":0,"d":"0%"},null,17.106," "," "," "," "," "," "," "," "," "," "," "," ",null,17.106," "," "," "]
[17.107,null,null,"Does the transit agency’s internal security audit process ensure that auditors are independent from those responsible for the activity being audited?",{"$f":"+IF(Checklist!D235=\"\",0,Checklist!D235)","v":0},{"$f":"Weights!E229","v":0.001118},{"$f":"IF(Checklist!C235=\"X\", 0, 1)","v":1},0,0.004472,{"v":0,"d":"0%"},null,17.107," "," "," "," "," "," "," "," "," "," "," "," ",null,17.107," "," "," "]
[17.108,null,null,{"$f":"IF('Profile Sheet'!E14=\"X\",\"N/A Not Governed By 49 CFR Part 659\",\"Has the agency made its internal security audit schedule available to the SSO agency?\")","v":"Has the agency made its internal security audit schedule available to the SSO agency?"},{"$f":"+IF(Checklist!D236=\"\",0,Checklist!D236)","v":0},{"$f":"Weights!E230","v":0.000863},{"$f":"IF(Checklist!C236=\"X\", 0, 1)","v":1},0,0.003452,{"v":0,"d":"0%"},null,17.108," "," "," "," "," "," "," "," "," "," "," "," ",null,17.108," "," "," "]
[17.109,null,null,{"$f":"IF('Profile Sheet'!E14=\"X\",\"N/A Not Governed By 49 CFR Part 659\",\"Has the agency made checklists and procedures used in its internal security audits available to the SSO agency?\")","v":"Has the agency made checklists and procedures used in its internal security audits available to the SSO agency?"},{"$f":"+IF(Checklist!D237=\"\",0,Checklist!D237)","v":0},{"$f":"Weights!E231","v":0.000845},{"$f":"IF(Checklist!C237=\"X\", 0, 1)","v":1},0,{"v":0.00338,"d":"0.003380"},{"v":0,"d":"0%"},null,17.109," "," "," "," "," "," "," "," "," "," "," "," ",null,17.109," "," "," "]
[{"v":17.11,"d":"17.110"},null,null,{"$f":"IF('Profile Sheet'!E14=\"X\",\"N/A Not Governed By 49 CFR Part 659\",\"Has the agency notified the SSO agency 30 days prior to the conduct of an internal security audit?\")","v":"Has the agency notified the SSO agency 30 days prior to the conduct of an internal security audit?"},{"$f":"+IF(Checklist!D238=\"\",0,Checklist!D238)","v":0},{"$f":"Weights!E232","v":{"v":0.00081,"d":"0.000810"}},{"$f":"IF(Checklist!C238=\"X\", 0, 1)","v":1},0,{"v":0.00324,"d":"0.003240"},{"v":0,"d":"0%"},null,{"v":17.11,"d":"17.110"}," "," "," "," "," "," "," "," "," "," "," "," ",null,{"v":17.11,"d":"17.110"}," "," "," "]
[17.111,null,null,{"$f":"IF('Profile Sheet'!E14=\"X\",\"N/A Not Governed By 49 CFR Part 659\",\"Has a report documenting internal security audit process and the status of findings and corrective actions been made available to the SSO agency within the previous 12 months?\")","v":"Has a report documenting internal security audit process and the status of findings and corrective actions been made available to the SSO agency within the previous 12 months?"},{"$f":"+IF(Checklist!D239=\"\",0,Checklist!D239)","v":0},{"$f":"Weights!E233","v":{"v":0.00081,"d":"0.000810"}},{"$f":"IF(Checklist!C239=\"X\", 0, 1)","v":1},0,{"v":0.00324,"d":"0.003240"},{"v":0,"d":"0%"},null,17.111," "," "," "," "," "," "," "," "," "," "," "," ",null,17.111," "," "," "]
[17.112,null,null,{"$f":"IF('Profile Sheet'!E14=\"X\",\"N/A Not Governed By 49 CFR Part 659\",\"Has the agency's chief executive certified to the SSO agency that the agency is in compliance with its SSP? \")","v":"Has the agency's chief executive certified to the SSO agency that the agency is in compliance with its SSP? "},{"$f":"+IF(Checklist!D240=\"\",0,Checklist!D240)","v":0},{"$f":"Weights!E234","v":0.000817},{"$f":"IF(Checklist!C240=\"X\", 0, 1)","v":1},0,0.003268,{"v":0,"d":"0%"},null,17.112," "," "," "," "," "," "," "," "," "," "," "," ",null,17.112," "," "," "]
[17.113,null,null,{"$f":"IF('Profile Sheet'!E14=\"X\",\"N/A Not Governed By 49 CFR Part 659\",\"Was that certification included with the most recent annual report submitted to the SSO agency?\")","v":"Was that certification included with the most recent annual report submitted to the SSO agency?"},{"$f":"+IF(Checklist!D241=\"\",0,Checklist!D241)","v":0},{"$f":"Weights!E235","v":0.000789},{"$f":"IF(Checklist!C241=\"X\", 0, 1)","v":1},0,{"v":3.156E-3,"d":"0.003156"},{"v":0,"d":"0%"},null,17.113," "," "," "," "," "," "," "," "," "," "," "," ",null,17.113," "," "," "]
[17.114,null,null,{"$f":"IF('Profile Sheet'!E14=\"X\",\"N/A Not Governed By 49 CFR Part 659\",\"If the agency's chief executive was not able to certify to the SSO agency that the agency is in compliance with its SSP, was a corrective action plan developed and made available to the SSO?\")","v":"If the agency's chief executive was not able to certify to the SSO agency that the agency is in compliance with its SSP, was a corrective action plan developed and made available to the SSO?"},{"$f":"+IF(Checklist!D242=\"\",0,Checklist!D242)","v":0},{"$f":"Weights!E236","v":0.000756},{"$f":"IF(Checklist!C242=\"X\", 0, 1)","v":1},0,0.003024,{"v":0,"d":"0%"},null,17.114," "," "," "," "," "," "," "," "," "," "," "," ",null,17.114," "," "," "]
[{"$nulls":3},"Non blank cells",{"$f":"COUNTBLANK(E8:E237)","v":29}]
[{"$nulls":3},"Cells w/text",{"$f":"COUNTA(E8:E237)","v":201}]
[{"$nulls":3},"Grey cells",28]
[]
[{"$nulls":3},"Total cells",221]
[{"$nulls":3},"Non blank cells + cells w/text",{"$f":"SUM(E238+E239)","v":230}]
[{"$nulls":3},"This should be 0 if all Line Items were rated",{"$f":"SUM(E242-E243)","v":-9}]

{"sheet":"Weights","index":11,"n_rows":255,"n_cols":5,"rows_kept":255,"hidden":true}
["BASE Technical Weights Sheet"]
[]
["Top 17 Scoring Detail"]
["Category",null,null,"Questions","Weight"]
[{"$nulls":3},"MANAGEMENT AND ACCOUNTABILITY"]
[{"v":1,"d":"1.000"},null,null,"Establish Written System Security Plans (SSPs) and Emergency Response Plans (ERPs)"]
[{"v":1.1,"d":"1.100"},null,null,"System Security Plan (SSP)"]
[1.101,"B",null,"Does the transit agency have a System Security Plan (SSP)?",0.000472]
[1.102,null,null,"Does the SSP identify the goals and objectives for the security program?",0.000465]
[1.103,"B",null,"Does a written policy statement exist that endorses and adopts the policies and procedures of the SSP that is approved and signed by top management, including the agency's chief executive? ",{"v":4.66E-4,"d":"0.000466"}]
[1.104,"B",null,"Is the SSP separate from the agency’s System Safety Program Plan (SSPP)?",0.000385]
[1.105,"B","T1","Do the Security and Emergency Response Plans address protection and response for critical underwater tunnels, underground stations/ tunnels and other critical systems, where applicable?",0.000459]
[1.106,null,null,"Does the SSP contain or reference other documents establishing procedures for the management of security incidents by the operations control center (or dispatch center)?",0.000445]
[1.107,"B",null,"Does the SSP contain or reference other documents establishing plans, procedures, or protocols for responding to security events with external agencies (such as law enforcement, local EMA, fire departments, etc.)?",{"v":0.00045,"d":"0.000450"}]
[1.108,null,null,"Does the SSP contain or reference other documents that establish protocols addressing specific threats from (i) Improvised Explosive Devices (IED) and (ii) Weapons of Mass Destruction (chemical, biological, radiological hazards)?",0.000463]
[1.109,null,"T3","Are visible, random security measures integrated into security plans to introduce unpredictability into security activities for deterrent effect?   ",0.000454]
[{"v":1.11,"d":"1.110"},null,null,"Does the SSP include provisions requiring that security be addressed in extensions, major projects, new vehicles and equipment procurement and other capital projects, and including integration with the transit agency’s safety certification process?",0.000465]
[1.111,null,null,"Does the SSP include or reference other documents adopting Crime Prevention Through Environmental Design (CPTED) principles as part of the agency's engineering practices?",0.000454]
[1.112,null,null,"Does the SSP require an annual review?",0.000449]
[1.113,null,null,"Does the transit agency produce periodic reports reviewing its progress in meeting its SSP goals and objectives?",0.000438]
[1.114,null,null,"Has an annual review of the SSP been performed and documented in the preceding 12 months?",0.000447]
[1.115,null,null,{"$f":"IF('Profile Sheet'!E14=\"X\",\"N/A Not Governed By 49 CFR Part 659\",\"Does the SSP outline a process for securing SSO agency review and approval of updates to the SSP?\")","v":"Does the SSP outline a process for securing SSO agency review and approval of updates to the SSP?"},{"v":0.0004,"d":"0.000400"}]
[1.116,null,null,{"$f":"IF('Profile Sheet'!E14=\"X\",\"N/A Not Governed By 49 CFR Part 659\",\"Has the transit agency submitted and received documentation from the SSO confirming its review and approval of the SSP currently in effect?\")","v":"Has the transit agency submitted and received documentation from the SSO confirming its review and approval of the SSP currently in effect?"},{"v":4.06E-4,"d":"0.000406"}]
[{"v":1.2,"d":"1.200"},null,null,"Emergency Response Plan (ERP)"]
[1.201,"B",null,"Does the transit agency have an Emergency Response Plan (ERP)?",0.000652]
[1.202,"B",null,"Does a written policy statement exist that endorses and adopts the policies and procedures of the ERP that is approved and signed by top management, including the agency's chief executive? ",0.000643]
[1.203,"B",null,"Does the ERP require an annual review to determine if it needs to be updated?",0.000631]
[1.204,null,null,"Has an annual review of the ERP been performed and documented in the preceding 12 months?",0.000631]
[1.205,"B",null,"Does the ERP include a process or review provision to ensure coordination with the rail transit agency’s SSPP and SSP?",0.000612]
[1.206,null,null,{"$f":"IF('Profile Sheet'!E14=\"X\",\"N/A Not Governed By 49 CFR Part 659\",\"Has the transit agency received documentation from the SSO confirming its review and approval of the ERP currently in effect?\")","v":"Has the transit agency received documentation from the SSO confirming its review and approval of the ERP currently in effect?"},0.000585]
[1.207,"B",null,"Does the ERP contain or reference other documents establishing plans, procedures, or protocols for responding to emergency events with external agencies (such as law enforcement, local EMA, fire departments, etc.)?",{"v":6.29E-4,"d":"0.000629"}]
[1.208,"B",null,"Does the ERP contain or reference other documents that establish procedures for the management of emergency events, including those to be employed by the operations control center (or dispatch center)?",0.000623]
[1.209,null,null,"Does the ERP contain or reference other documents to provide for Continuity of Operations (COOP) while responding to emergency events?",0.000634]
[{"v":1.21,"d":"1.210"},null,null,"Does the agency have a written Business Recovery Plan to guide restoration of facilities and services following an emergency event?",0.000628]
[1.211,null,null,"Does the agency have a written Business Continuity Plan and COOP to guide restoration of facilities and services following an emergency event?",{"v":6.29E-4,"d":"0.000629"}]
[1.212,"B",null,"Does the agency have a back-up operations control center capability?",0.000626]
[{"v":2,"d":"2.000"},null,null,"Define Roles and Responsibilities for Security and Emergency Management"]
[{"v":2.1,"d":"2.100"},null,null,"System Security Plan (SSP)"]
[2.101,null,null,"Does the SSP establish and assign responsibility for implementation of the security program to a Senior Manager who is a \"direct report\" to the agency's Chief Executive Officer?",0.000761]
[2.102,null,null,"Has the agency established lines of delegated authority/succession of security responsibilities and, if so, has that information been distributed to agency managers?",{"v":0.00073,"d":"0.000730"}]
[2.103,"B",null,"Are roles and responsibilities for security and/or law enforcement personnel assigned by title and/or position established in the SSP or other documents?",0.000744]
[2.104,"B",null,"Are security-related roles and responsibilities for non-security and/or law enforcement personnel  (i.e., operators, conductors, maintenance workers and station attendants) established in the SSP or other documents?",0.000731]
[2.105,null,"T2","Do senior staff and middle management conduct security meetings to review recommendations for changes to plans and processes?  ",{"v":7.27E-4,"d":"0.000727"}]
[2.106,null,null,"Does a Security Review Committee (or other designated group) regularly review security incident reports, trends, and program audit findings?",{"v":7.18E-4,"d":"0.000718"}]
[2.107,"B",null,"Are informational briefings with appropriate personnel held whenever security protocols, threat levels, or protective measures  are updated or as security conditions warrant?",0.000757]
[2.108,"B",null,"Have appropriate reference guides or other written instructions or procedures been distributed to transit employees to implement the requirements of the SSP?",0.000694]
[2.109,"B",null,"Has the agency appointed a Primary and Alternate Security Coordinator to serve as its primary and immediate 24-hr contact for intelligence and security-related contact with TSA and are the names of those Coordinators on file with TSA OSPIE office correct?",0.000758]
[2.11,null,null,"Does the agency maintain a record of security related incidents that are reported within the agency? ",0.000744]
[{"v":2.2,"d":"2.200"},null,null,"2.b. Emergency Response Plan (ERP):"]
[2.201,null,null,"Does the ERP establish and assign responsibility for implementation of the security program to a Senior Manager who is a \"direct report\" to the agency's Chief Executive Officer?",0.00098]
[2.202,"B",null,"Are emergency response roles and responsibilities for all departments identified in the ERP or other supporting documents?",{"v":9.5E-4,"d":"0.00095"}]
[2.203,"B","T5","Are roles and responsibilities for front-line personnel (i.e. system law enforcement, system security officials, train or vehicle operators, conductors, station attendants, maintenance workers) described in the system's Emergency Response Plan (ERP)?",{"v":9.5E-4,"d":"0.00095"}]
[2.204,"B",null,"Has the ERP been distributed to appropriate departments in the organization?",0.00096]
[2.205,"B",null,"Have appropriate reference guides or other written instructions or procedures been distributed to transit employees to implement the requirements of the ERP?",{"v":9.5E-4,"d":"0.00095"}]
[2.206,null,null,"Are senior staff and middle management ERP coordination meetings held on a regular basis?",0.00093]
[2.207,"B",null,"Are informational briefings with appropriate personnel held whenever emergency response protocols are substantially changed or updated?",{"v":9.5E-4,"d":"0.00095"}]
[{"v":3,"d":"3.000"},null,null,"Ensure that operations and maintenance supervisors, forepersons and managers are held accountable for security issues under their control"]
[3.101,"B",null,"Do managers and supervisors routinely provide information to front-line personnel regarding security and emergency response issues?",0.0037]
[3.102,null,null,"Are regular supervisor, manager, and/or foreperson security review and coordination briefings held?  If so, detail frequency and subjects covered in the justification.",0.0036]
[3.103,"B",null,"Does the agency have a program for confirming that personnel have a working knowledge of security protocols?  If so, summarize program in the justification.",0.0036]
[3.104,"B",null,"Are managers and/or supervisors required to debrief front-line employees regarding their involvement in or management of any security or emergency incidents?",0.0036]
[{"v":4,"d":"4.000"},null,null,"Coordinate Security and Emergency Management Plan(s) with local and regional agencies"]
[4.101,null,null,"Have Mutual Aid agreements been established between the transit agency and entities in the area that would be called upon to supplement the agency's resources in the event of an emergency event? ",0.001331]
[4.102,"B",null,"Does the agency participate in a regional Emergency Management Working Group or similar regional coordinating body for emergency preparedness and response?",0.001336]
[4.103,"B",null,"Have regional incident management protocols been shared with the agency and incorporated into the agency's ERP/SSP/SEPP?",0.001293]
[4.104,null,null,"Have agency resources been appropriately identified and provided to the regional EMA?",{"v":1.263E-3,"d":"0.001263"}]
[4.105,"B",null,"Does the agency have a designated point-of-contact or liaison with the local/regional Emergency Operations Center (EOC)?",0.001394]
[4.106,null,null,"Does the agency send a representative to the local/regional EOC, should it be activated?",0.001347]
[4.107,null,null,"Does the agency have information sharing capabilities with the regional/local EOC (i.e., contacts, procedures, resource inventories, etc.)?",{"v":1.343E-3,"d":"0.001343"}]
[4.108,"B",null,"Has the agency developed internal incident management protocols that comply with the National Response Plan and the National Incident Management System (NIMS)?",0.001314]
[4.109,null,null,"Have the agency's emergency response protocols been shared with the EMA and appropriate first responder agencies?",{"v":1.286E-3,"d":"0.001286"}]
[{"v":4.11,"d":"4.110"},"B","T5","Has the transit system tested its communications systems for interoperability with appropriate emergency response agencies? ",{"v":1.325E-3,"d":"0.001325"}]
[4.111,"B",null,"If the agency's communications systems are NOT inter-operable with appropriate emergency response agencies, have alternate communication protocols been established?  Describe the alternate communication protocols in the justification.",{"v":1.372E-3,"d":"0.001372"}]
[{"$nulls":3},"SECURITY AND EMERGENCY RESPONSE TRAINING"]
[{"v":5,"d":"5.000"},null,null,"Establish and Maintain a Security and Emergency Training Program"]
[5.101,"B","T4","Is initial training provided to all new agency employees regarding security orientation/awareness?",0.000487928746457381]
[5.102,null,"T4","Is annual refresher training provided regarding security orientation/awareness to Senior Management staff, managers and supervisors?",0.00047312575801753]
[5.103,"B","T4","Is annual refresher training provided regarding security orientation/awareness to managers and supervisors? ",0.000475541379263667]
[5.104,"B","T4","Is annual refresher training provided regarding security orientation/awareness  to front-line employees? ",0.000472456850266779]
[5.105,null,null,"Is ongoing advanced security training focused on job function provided at least annually?",0.000467883352386892]
[5.106,"B","T4","Is initial training provided to all new transit employees regarding emergency response?",0.000484489080362702]
[5.107,null,"T4"," Is annual refresher training provided regarding emergency response to Senior Management staff, supervisors, and managers?",0.000472331155893336]
[5.108,"B","T4","Is annual refresher training provided regarding emergency response to Managers and Supervisors?",0.000477200601856777]
[5.109,"B","T4","Is annual refresher training provided regarding emergency response to front-line Employees?",0.000472176776887891]
[{"v":5.11,"d":"5.110"},"B","T4","Have agency employees received general training on Incident Command System (ICS) procedures in accordance with National Incident Management System at least annually?",4.62040847141104E-4]
[5.111,null,null," Has ICS and NIMS training appropriate to the position been provided to Senior Management staff, supervisors, and managers at least annually?  ",0.000440190621929495]
[5.112,"B",null,"Has ICS and NIMS training appropriate to the position been provided to managers and supervisors at least annually? ",0.00046550487734309]
[5.113,null,null,"Has ICS and NIMS training appropriate to the position been provided to front-line employees at least annually?",4.4980538460371E-4]
[5.114,"B",null,"Has the agency developed a program and provided annual training on its own incident response protocols?",0.00047380099030864]
[5.115,null,"T4","Has training on the agency's incident response protocols appropriate to the position been provided to Senior Management staff, managers and supervisors at least annually?                                      ",0.000464969681741424]
[5.116,"B","T4","Has training on the agency's incident response protocols appropriate to the position been provided to managers and supervisors? ",0.000470552563467142]
[5.117,"B","T4"," Has training on the agency's incident response protocols appropriate to the position been provided to front-line employees at least annually?",0.000467856296932919]
[5.118,null,"T4","Has the transit system implemented an annual training program for personnel regarding response to terrorism, including (i) Improvised Explosive Devices and ii) Weapons of Mass Destruction (chemical, biological, radiological, nuclear)?  If so, summarize the relevant programs in the justification?",0.00043045542574805]
[5.119,null,null,"Has training focused on IEDs and WMDs appropriate to the position been provided to Senior Management staff, managers, and supervisors at least annually?                                                ",0.000460300554975443]
[{"v":5.12,"d":"5.120"},null,null,"Has training focused on IEDs and WMDs appropriate to the position been provided to manager and supervisors?",0.000475592078875264]
[5.121,null,null,"Has training focused on IEDs and WMDs appropriate to the position been provided to front-line employees at least annually? ",0.000470336960106654]
[5.122,null,null,"Do law enforcement/security department personnel at the agency receive specialized training in counter-terrorism annually? Summarize program in the justification.",0.000483931223688622]
[5.123,null,null,"Do law enforcement/security department personnel at the agency receive specialized training supporting their incident management and emergency response roles at least annually? Summarize program in the justification. ",0.000485520861932092]
[5.124,"B",null,"  Does the agency have an established program to monitor employee training and to schedule employees for training?",0.000464591962654644]
[5.125,null,null,"Does the agency have a system that records and tracks personnel training for all security-related courses (including initial, annual, periodic and other)?",0.000460540979970563]
[5.126,null,null,"Does the transit agency have a system that records and tracks personnel training for emergency response courses (including initial, periodic and other)?",0.000461316480359174]
[5.127,null,null,"Does the agency have a program to regularly review and update security awareness and emergency response training materials?",0.000457362354476246]
[5.128,"B","T4","Are all appropriate personnel notified via briefings, email, voicemail, or signage of changes in threat condition, protective measures or the employee watch programs?",0.000478910524061484]
[5.129,"B","T1","Do the agency's security awareness and emergency response training programs cover response and recovery operations in critical facilities and infrastructure?  If so, summarize relevant provisions of program in the justification.",0.000459250516841564]
[{"v":5.13,"d":"5.130"},"B","T1","Has the agency provided training to regional first responders (law enforcement agencies, firefighters, and emergency medical response teams) to enable them to operate in critical facilities and infrastructure?",0.000432079639168799]
[5.131,null,"T3","Does training of transit system law enforcement and/or security personnel integrate the concept and employment of visible, random security measures? ",0.000480745078470998]
[5.132,"B","T4","Has the agency implemented a program to train or orient first responders (law enforcement, firefighters, emergency medical teams) and other potential supporting assets (e.g., TSA regional personnel for VIPR exercises) on their system vehicle familiarization?",4.34303060682288E-4]
[{"$nulls":3},"HOMELAND SECURITY ADVISORY SYSTEM (HSAS)  "]
[{"v":6,"d":"6.000"},null,null,"Establish plans and protocols to respond to the National Terrorism Advisory System (NTAS) alert system"]
[6.101,"B",null,"Does the SSP contain or reference other documents identifying incremental actions (imminent or elevated) to be implemented for a NTAS threat?",0.00439]
[6.102,"B","T2","Does the agency have actionable operational response protocols for the specific threat scenarios from NTAS?",0.00474]
[6.103,null,null,"Has the agency provided annual training and/or instruction focused on job function regarding the incremental activities to be performed by employees?",0.00483]
[{"$nulls":3},"PUBLIC AWARENESS "]
[{"v":7,"d":"7.000"},null,null,"Implement and reinforce a Public Security and Emergency Awareness program       "]
[7.101,"B",null,"Has the transit agency developed and implemented a public security and emergency awareness program?",1.19540386604709E-3]
[7.102,"B","T6","Does the agency provide active public outreach for security awareness and emergency preparedness (e.g., Transit Watch, “If You See Something, Say Something”, message boards, brochures, channel cards, posters, fliers)?",1.18557076565193E-3]
[7.103,null,"T6","Is the above consistent with agency's overall announcement program?",1.01963848012143E-3]
[7.104,"B","T6","Are general security awareness and emergency preparedness messages included in public announcement messages at stations and on board vehicles?",0.00106499908164458]
[7.105,"B","T6","Are passengers urged to report unattended property, suspicious behavior, and security concerns to uniformed crew members, law enforcement or security personnel, and/or a contact telephone number?  If so, summarize the type of materials used and content in the justification.",0.00119353434511714]
[7.106,"B","T6","Does the agency have an appropriate mechanism in place for passengers to communicate an (e.g., 1-800 number, smart phone applications, social media, etc.)  that can be called or used to report security concerns?  If so, is this information indicated in public awareness materials and messages?",1.06896925363511E-3]
[7.107,null,null,"Does the agency issue public service announcements or press releases to social media (e.g. Twitter/ Facebook/etc., QRC codes, and/or apps for smart phones) regarding security and emergency protocols?",0.00103935438738433]
[7.108,null,"T6","Does the agency issue public service announcements or press releases to local media (e.g. newspaper, radio and/or television) regarding security or emergency protocols?",1.02358373744854E-3]
[7.109,null,null,"Does the transit agency conduct a volunteer training program for non-employees to aid with system evacuations and emergency response?",0.00109041597393305]
[{"v":7.11,"d":"7.110"},null,null,"Does the transit agency conduct an outreach program to enlist members of the public as security awareness volunteers, similar to Neighborhood Watch programs?",0.00108911426741419]
[7.111,"B","T1","Do public awareness materials and/or messages inform passengers on the means to evacuate safely from transit vehicles and underwater/underground facilities?",1.17807890732278E-3]
[7.112,null,null,"Does the agency track and monitor customer complaints reported by passengers?",0.00104226350144822]
[{"$nulls":3}," RISK MANAGEMENT"]
[{"v":8,"d":"8.000"},null,null,"Establish and use a risk management process "]
[8.101,"B","T2","Does the agency have a risk assessment process approved by its management, for managing threats and vulnerabilities?  If so, summarize the process in the justification.",{"v":1.8E-3,"d":"0.00180"}]
[8.102,"B",null,"Has the agency identified facilities and systems it considers to be its critical assets?",0.00179]
[8.103,"B","T2","Has the agency had an internal or external vulnerability assessment on its critical assets within the past 3 years?  Specify the dates of the most recent assessments and the entity(ies) that conducted the assessment(s).  ",{"v":1.75E-3,"d":"0.00175"}]
[8.104,"B","T1","Has the agency had an internal or external Risk Assessment, analyzing threat, vulnerability, & consequence, for critical assets and infrastructure, and systems within the past 3 years?  Have management and staff responsible for the risk assessment process been properly trained to manage the process?",0.00177]
[8.105,"B","T2","Has the system implemented procedures to limit and monitor authorized access to underground and underwater tunnels?  If so, summarize procedures in the justification.",{"v":1.72E-3,"d":"0.00172"}]
[8.106,null,null,"Are security investments prioritized using information developed in the risk assessment process?",{"v":1.74E-3,"d":"0.00174"}]
[8.107,"B","T1","Upon request, has TSA been provided access to the agency's vulnerability assessments, Security Plan and related documents?",{"v":1.74E-3,"d":"0.00174"}]
[{"$nulls":3},"ESTABLISH A RISK ASSESSMENT AND INFORMATION SHARING PROCESS"]
[{"v":9,"d":"9.000"},null,null,"Establish and use an information sharing process for threat and intelligence information."]
[9.101,"B",null,"Does the agency have a formalized process and procedures for reporting and exchange of threat and intelligence information with Federal, State, and/or local law enforcement agencies? ",0.00201]
[9.102,"B","T2","Does the system report threat and intelligence information directly to FBI Joint Terrorism Task Force (JTTF) or other regional anti-terrorism task force?",0.00195]
[9.103,"B","T2","Does the system have a protocol to report threats or significant security concerns to appropriate law enforcement authorities, and TSA's Transportation Security Operations Center (TSOC)?",0.00196]
[9.104,null,null,"Does the agency routinely receive threat and intelligence information directly from any Federal government agency, State Homeland Security Office, Regional or State Intelligence Fusion Center,  PT-ISAC, or other transit agencies?",0.00186]
[9.105,null,null,{"$f":"IF('Profile Sheet'!E14=\"X\",\"N/A Not Governed By 49 CFR Part 659\",\"Does the agency report their NTA security data to FTA as required by 49 CFR 659?\")","v":"Does the agency report their NTA security data to FTA as required by 49 CFR 659?"},{"v":1.9E-3,"d":"0.00190"}]
[{"v":10,"d":"10.000"},null,null,"Conduct Tabletop and Functional Drills"]
[10.101,"B",null,"Does the agency’s System Safety Program Plan (SSPP) contain or reference a document describing the process used by the agency to develop an approved, coordinated schedule for all emergency management program activities, including local/regional emergency planning and participation in exercises and drills?",{"v":1.16E-3,"d":"0.00116"}]
[10.102,"B",null,"Does the agency’s SSPP or SSP describe or reference how the agency performs its emergency planning responsibilities and requirements regarding emergency drills and exercises?",{"v":1.14E-3,"d":"0.00114"}]
[10.103,"B","T5","Does the agency evaluate its emergency preparedness by using annual field exercises, tabletop exercises, and/or drills?  If so, please summarize the exercise events held in the past year.",{"v":1.17E-3,"d":"0.00117"}]
[10.104,"B",null,"Does the agency's SSPP or a related document include a requirement for annual field exercises, tabletops and drills?",{"v":1E-3,"d":"0.00100"}]
[10.105,"B",null,"Does the agency’s SSPP or SSP describe or reference how the agency documents the results of its emergency preparedness evaluations (i.e., briefings, after action reports and implementation of findings)?",{"v":1.14E-3,"d":"0.00114"}]
[10.106,null,null,"Does the agency’s SSPP or a related document describe or reference its program for providing employee training on emergency response protocols and procedures?",0.00113]
[10.107,"B",null,"Does the agency participate as an active player in full-scale, regional exercises held at least annually?",{"v":1.01E-3,"d":"0.00101"}]
[10.108,null,"T5","In the last year, has the agency conducted and/or participated in  a drill, tabletop exercise, and/or field exercise including scenarios involving (i) IED's and (ii) WMD (chemical, biological, radiological, nuclear) with other transit agencies and first responders (e.g., NTAS scenarios)? ",0.00099]
[10.109,null,"T5","In the last year, has the agency reviewed results and prepared after-action reports to assess performance and develop lessons learned for all drills, tabletop, and/or field exercises?",0.00111]
[{"v":10.11,"d":"10.110"},null,"T5","In the last 12 months, has the agency updated plans, protocols and processes to incorporate after-action report recommendations/findings and corrective actions?  If so, summarize the actions taken in the justification. ",{"v":1.16E-3,"d":"0.00116"}]
[10.111,null,null,"Has the agency established metrics to assess its performance during emergency exercises and to measure improvements?",0.00113]
[10.112,"B","T1","Does the system conduct drills and exercises of its security and emergency response plans to test capabilities of i.) employees and ii.) first responders to operate effectively in underwater/underground infrastructure and other critical systems?",{"v":1.14E-3,"d":"0.00114"}]
[10.113,"B","T5","Does the transit system integrate local and regional first responders (law enforcement, firefighters, emergency medical teams) in drills, tabletop exercises, and/or field exercises?  If so, summarize each joint event and state when it took place.",{"v":1.17E-3,"d":"0.00117"}]
[{"v":11,"d":"11.000"},null,null,"Developing a Comprehensive Cyber Security Strategy"]
[11.101,"B",null,"Has the agency conducted a risk assessment to identify operational control and communication/business enterprise IT assets and potential vulnerabilities?",{"v":2.137E-3,"d":"0.002137"}]
[11.102,null,null,"Has the agency implemented protocols to ensure that all IT facilities (e.g., data centers, server rooms, etc.) and equipment are properly secured to guard against internal or external threats or attacks?",{"v":2.186E-3,"d":"0.002186"}]
[11.103,null,null,"Has a written strategy been developed and integrated into the overall security program to mitigate the cyber risk identified?",0.002108]
[11.104,null,null,"Does the agency have a designated representative to secure the internal network through appropriate access controls for employees, a strong authentication (i.e., password) policy, encrypting sensitive data, and employing network security infrastructure (example: firewalls, intrusion detection systems, IT security audits, antivirus, etc.)?",{"v":2.166E-3,"d":"0.002166"}]
[11.105,null,null,"Does the agency ensure that recurring cyber security training reinforces security roles, responsibilities, and duties of employees at all levels to protect against and recognize cyber threats?",0.002123]
[11.106,"B",null,"Has the agency established a cyber-incident response and reporting protocol?",0.002123]
[11.107,null,null,"Is the agency aware of and using available resources (e.g., standards, PT-ISAC, US CERT, National Cyber Security Communication and Integration Center, etc.)?",0.002148]
[{"$nulls":3},"FACILITY SECURITY AND ACCESS CONTROLS"]
[{"v":12,"d":"12.000"},null,null,"Control Access to Security Critical Facilities with ID badges for all visitors, employees and contractors"]
[12.101,"B",null,"Have assets and facilities requiring restricted access been identified? ",0.000549]
[12.102,"B",null,"Are ID badges or other measures employed to restrict access to facilities not open to the public?",0.000541]
[12.103,"B","T2","Has the transit agency developed and implemented procedures to monitor, update and document access control (e.g. card key, ID badges, keys, safe combinations, etc.)?",0.000541]
[12.104,"B",null,"Does the agency have procedures to issue ID badges for visitors and contractors?",0.000543]
[12.105,null,null,"Does the agency require escorts for visitors accessing non-public areas?",0.000541]
[12.106,null,null,"Is CCTV equipment installed in transit agency facilities?",0.000541]
[12.107,null,null,"Is CCTV equipment protecting critical assets interfaced with an access control system?",0.000539]
[12.108,null,null,"Is CCTV equipment installed on transit vehicles?",0.000487]
[12.109,null,null,"Are Crime Prevention through Environmental Design (CPTED) and technology (e.g., CCTV, access control, intrusion detection, bollards, etc.) incorporated into design criteria for all new and/or existing capital projects?",0.000532]
[{"v":12.11,"d":"12.110"},null,null,"Based on the risk assessment, does the agency use fencing, barriers, and/or intrusion detection to protect against unauthorized entry into stations, facilities, and other identified critical assets?",0.000532]
[12.111,"B","T2","Has the system implemented protective measures to secure high risk/high consequence assets and systems identified in risk assessments?  Examples of protective measures include but are not limited to CCTV, intrusion detection systems, smart camera technology, fencing, enhanced lighting, access control, LE patrols, K-9s, protection of ventilation systems.    If protective measures for this infrastructure are employed, summarize type and location in in the justification.",{"v":0.00054,"d":"0.000540"}]
[12.112,null,null,"Does the transit agency monitor a network of security, fire, duress, intrusion, utility and internal 911 alarm systems?",0.000528]
[12.113,null,null,"Are emergency call boxes provided for passengers?",0.000481]
[12.114,null,null,"Do transit agency personnel administer an automated employee access control system and perform corrective analysis of security breaches?",{"v":0.00054,"d":"0.000540"}]
[12.115,null,null,"Does the agency have policies and procedures for screening of mail and/or outside deliveries?",0.000508]
[12.116,null,null,"Have locks, bullet resistant materials and anti-fragmentation materials been installed/used at critical locations?",0.000525]
[12.117,null,null,"Does the agency use National Fire Protection Association (NFPA) Standard 130 or equivalent to evaluate fire/life safety in station design or modification (including fire detection systems, firewalls and flame-resistant materials, back-up powered emergency lighting, defaults in turnstile and other systems supporting emergency exists, and pre-recorded public announcements)?",0.000499]
[12.118,null,null,"Is directional signage with adequate lighting provided in a consistent manner in all stations, both to provide orientation and to support emergency evacuation?",0.000532]
[12.119,null,null,"Are gates and locks used on all facility doors to prevent unauthorized access? ",0.000539]
[{"v":12.12,"d":"12.120"},null,null,"Are keys controlled through an established program managed by the security/police function? ",{"v":5.31E-4,"d":"0.000531"}]
[12.121,"B",null,"Are gates and locks also used to close down system facilities after operating hours?",{"v":0.00054,"d":"0.000540"}]
[12.122,null,null,"Do transit vehicles have radios, silent alarms, and/or passenger communication systems?",0.000526]
[12.123,null,null,"Does the transit agency use graffiti-resistant/etch-resistant materials for walls, ceilings, and windows?",0.000403]
[12.124,"B",null,"Are Uninterruptible Power Supply (UPS) or redundant power sources provided for safety and security of critical equipment, such as but not limited to: exit and platform lighting; parking lot lighting; ancillary space and shop lighting; intrusion detection (alarmed rooms and spaces, fare collection equipment, etc.); fire detection, alarm and suppression systems; public address (shop and public areas); call-for-aid telephones; CCTV; emergency trip stations; vital train control functions; etc.?",0.000538]
[12.125,null,null,"At passenger stations at which a vulnerability assessment has identified a significant risk, and to the extent practicable, has the owner/operator removed trash receptacles and other non-essential receptacles or containers  (with the exception of bomb resistant receptacles or clear plastic containers) from the platform areas of passenger terminals and stations?",0.000467]
[12.126,"B",null,"Does the agency employ specific protective measures for all critical infrastructure  (e.g., tunnels, bridges, stations, control centers, etc) identified through the risk assessment particularly at access points and ventilation infrastructure in place and maintained in optimal condition? Examples of protective measures include, but are not limited to, CCTV, intrusion detection systems, smart camera technology, fencing, lighting, access control, law enforcement patrols, canine patrols, physical protection for ventilation systems.  If protective measures for this infrastructure are employed, summarize type and location in the justification.",0.000541]
[12.127,null,"T1","Does the agency have or utilize explosive detection canine teams, either maintained by the system or made available from other law enforcement agencies?  If so, has the system implemented procedures for reporting of and response to positive reactions by the canine?",0.000529]
[{"v":13,"d":"13.000"},null,null,"Conduct Physical Security Inspections"]
[13.101,"B","T1","Does the agency conduct frequent inspections of key facilities, stations, terminals, trains and vehicles, or other critical assets for persons, materials, and items that do not belong?",0.00218]
[13.102,"B",null,"Has the transit agency established procedures for inspecting/sweeping vehicles and stations to identify and manage suspicious items, based on HOT characteristics (hidden, obviously suspicious, not typical) or equivalent system?",{"v":2.15E-3,"d":"0.00215"}]
[13.103,null,null,"Has the transit agency developed a form or quick reference guide for operations and personnel to conduct pre-trip, post-trip, and within-trip inspections?",0.00205]
[13.104,null,null,"Has the transit agency developed a form or quick reference guide for station attendants and others regarding station and facility inspections?",0.00186]
[13.105,null,"T2","Does the system document the results of inspections and implement any changes to policies and procedures or implement corrective actions, based on the findings?",0.00208]
[13.106,"B","T2","Does the agency conduct frequent inspections of access points, ventilation systems, and the interior of underground/underwater assets and systems for indications of suspicious activity?",{"v":2.14E-3,"d":"0.00214"}]
[13.107,null,null,"Does the system integrate randomness and unpredictability into its security activities to enhance deterrent effect?",{"v":2.14E-3,"d":"0.00214"}]
[13.108,null,null,"Is there a process in place, with necessary training provided to personnel, to ensure that in service vehicles are inspected at regular periodic intervals for suspicious or unattended items? Specify type and frequency of inspections.",0.000525]
[13.109,null,null,"Is there a process in place, with necessary training provided to personnel, to ensure that all critical infrastructure are inspected at regular periodic intervals for suspicious or unattended items? Specify type and frequency of inspections.",0.000527]
[{"$nulls":3},"BACKGROUND INVESTIGATIONS"]
[{"v":14,"d":"14.000"},null,null,"Conduct Background Investigations of Employees and Contractors"]
[14.101,"B","T2","Does the agency conduct background investigations (i.e., criminal history and motor vehicle records) on all new front-line operations and maintenance employees, and employees with access to sensitive security information, facilities and systems?",0.00303]
[14.102,"B","T2","To the extent allowed by agency policy or law, does the agency conduct background investigations on contractors, including vendors, with access to critical facilities, sensitive security systems, and sensitive security information?  ",{"v":0.003,"d":"0.00300"}]
[14.103,null,null,"Has counsel for the agency reviewed the process for conducting employee background investigations to confirm that procedures are consistent with applicable statutes and regulations?",{"v":2.99E-3,"d":"0.00299"}]
[14.104,"B",null,"Is the background investigation process documented?",0.00294]
[14.105,null,null,"Is the criteria for background investigations based on employee type (senior management staff, law enforcement officers, managers/supervisors, operators, maintenance, safety/security sensitive, contractor, etc.) and/or responsibility and access documented?  ",0.00293]
[{"$nulls":3},"DOCUMENT CONTROL"]
[{"v":15,"d":"15.000"},null,null,"Control Access to documents of security critical systems and facilities"]
[15.101,"B","T2","Does the agency keep documentation of its security critical systems, such as tunnels, bridges, HVAC systems and intrusion alarm detection systems (i.e. plans, schematics, etc.) protected from unauthorized access?",{"v":0.005,"d":"0.0050"}]
[15.102,"B",null,"Has the agency designated a department/person responsible for administering the access control policy with respect to agency documents?",0.0049]
[15.103,null,null,"Does the security review committee (or other designated group) review document control practices, assess compliance applicable procedures, and identify discrepancies and necessary corrective action?",0.0048]
[{"v":16,"d":"16.000"},null,null,"Process for handling and access to Sensitive Security Information (SSI)"]
[16.101,"B",null,"Does the agency have a documented policy for identifying and controlling the distribution of and access to documents  it considers to be Sensitive Security Information (SSI) pursuant to 49 CFR Part 15 or 1520?",{"v":3.764E-3,"d":"0.003764"}]
[16.102,"B",null,"Does the agency have a documented policy for proper handling, control, and storage of documents labeled as or otherwise determined to be Sensitive Security Information (SSI) pursuant to 49 CFR Part 15 or 1520?",{"v":3.653E-3,"d":"0.003653"}]
[16.103,null,null,"Are employees who may be provided SSI materials per 49 CFR Part 15 or 1520) familiar with the documented policy for the proper handling of such materials? ",0.003636]
[16.104,null,null,"Have employees provided access to SSI material per 49 CFR Part 15 or 1520 received training on proper labeling, handling, dissemination, and storage (such as through the TSA on-line SSI training program)?",0.003706]
[{"$nulls":3},"SECURITY PROGRAM AUDITS"]
[{"v":17,"d":"17.000"},null,null,"Audit Program"]
[17.101,null,null,"Has the agency established a schedule for conducting  its internal security audit process?",0.000895]
[17.102,"B",null,"Does the SSP contain a description of the process used by the agency to audit its implementation of the SSP over the course of the agency's published schedule?",{"v":0.00121,"d":"0.001210"}]
[17.103,"B",null,"Has the transit agency established checklists and procedures to govern the conduct of its internal security audit process?",{"v":1.209E-3,"d":"0.001209"}]
[17.104,"B",null,"Is the transit agency complying with its internal security audit schedule? ",{"v":1.188E-3,"d":"0.001188"}]
[17.105,"B",null,"Is each internal security audit documented in a written report, which includes evaluation of the adequacy and effectiveness of the SSP element and applicable implementing procedures audited, needed corrected actions, needed recommendations, an implementation schedule for corrective actions and status reporting?",{"v":1.204E-3,"d":"0.001204"}]
[17.106,null,null,"In the last 12 months, has the Security Review Committee (or other designated group) addressed the findings and recommendations from the internal security audits, and updated plans, protocols and processes as necessary?",{"v":1.157E-3,"d":"0.001157"}]
[17.107,null,null,"Does the transit agency’s internal security audit process ensure that auditors are independent from those responsible for the activity being audited?",0.001118]
[17.108,null,null,{"$f":"IF('Profile Sheet'!E14=\"X\",\"N/A Not Governed By 49 CFR Part 659\",\"Has the agency made its internal security audit schedule available to the SSO agency?\")","v":"Has the agency made its internal security audit schedule available to the SSO agency?"},0.000863]
[17.109,null,null,{"$f":"IF('Profile Sheet'!E14=\"X\",\"N/A Not Governed By 49 CFR Part 659\",\"Has the agency made checklists and procedures used in its internal security audits available to the SSO agency?\")","v":"Has the agency made checklists and procedures used in its internal security audits available to the SSO agency?"},0.000845]
[{"v":17.11,"d":"17.110"},null,null,{"$f":"IF('Profile Sheet'!E14=\"X\",\"N/A Not Governed By 49 CFR Part 659\",\"Has the agency notified the SSO agency 30 days prior to the conduct of an internal security audit?\")","v":"Has the agency notified the SSO agency 30 days prior to the conduct of an internal security audit?"},{"v":0.00081,"d":"0.000810"}]
[17.111,null,null,{"$f":"IF('Profile Sheet'!E14=\"X\",\"N/A Not Governed By 49 CFR Part 659\",\"Has a report documenting internal security audit process and the status of findings and corrective actions been made available to the SSO agency within the previous 12 months?\")","v":"Has a report documenting internal security audit process and the status of findings and corrective actions been made available to the SSO agency within the previous 12 months?"},{"v":0.00081,"d":"0.000810"}]
[17.112,null,null,{"$f":"IF('Profile Sheet'!E14=\"X\",\"N/A Not Governed By 49 CFR Part 659\",\"Has the agency's chief executive certified to the SSO agency that the agency is in compliance with its SSP?\")","v":"Has the agency's chief executive certified to the SSO agency that the agency is in compliance with its SSP?"},0.000817]
[17.113,null,null,{"$f":"IF('Profile Sheet'!E14=\"X\",\"N/A Not Governed By 49 CFR Part 659\",\"Was that certification included with the most recent annual report submitted to the SSO agency?\")","v":"Was that certification included with the most recent annual report submitted to the SSO agency?"},0.000789]
[17.114,null,null,{"$f":"IF('Profile Sheet'!E14=\"X\",\"N/A Not Governed By 49 CFR Part 659\",\"If the agency's chief executive was not able to certify to the SSO agency that the agency is in compliance with its SSP, was a corrective action plan developed and made available to the SSO?\")","v":"If the agency's chief executive was not able to certify to the SSO agency that the agency is in compliance with its SSP, was a corrective action plan developed and made available to the SSO?"},0.000756]
[]
[]
[]
[]
[]
["Color Key:"]
[]
[{"$nulls":3},"Transportation Security Fundamentals Questions","Baseline Security Questions"]
[]
[]
[]
[]
[]
[]
[null,null,0]
[null,null,1]
[null,null,2]
[null,null,3]
[null,null,4]

{"sheet":"Pivot Stats","index":12,"n_rows":6,"n_cols":289,"rows_kept":6,"hidden":true}
["Date","Airport","Region","Type Visit","Revisit","Last Date","Agency","Street","City","State","Zip","HTUA Name","HTUA","Chosen By","Not Governed by","60K Club","Ridership","Grant Funding","Funding Year","Light Rail","Heavy Rail","Rapid Rail","Monorail","Inclined Plane","Funicular","Trolley","Automated Guideway","Tourist / Scenic","Commuter","Intercity","Transit Bus","Sec Coor Name","Sec Coor Title","Sec Coor Phone","Sec Coor Cell","Sec Coor Email","Alt Sec Coor Name","Alt Sec Coor Title","Alt Sec Coor Phone","Alt Sec Coor Cell","Alt Sec Coor Email","Alt Lead TSI Name","Alt Lead TSI Title","Alt Lead TSI Airport","Alt Lead TSI Phone","Alt Lead TSI Email","Alt Sec TSI Name","Alt Sec TSI Title","Alt Sec TSI Airport","Alt Sec TSI Phone","Alt Sec TSI Email",1.101,1.102,1.103,1.104,"1.105 / T1",1.106,1.107,1.108,"1.109 / T3",{"v":1.11,"d":"1.110"},1.111,1.112,1.113,1.114,1.115,1.116,1.117,1.201,1.202,1.203,1.204,1.205,1.206,1.207,1.208,1.209,{"v":1.21,"d":"1.210"},1.211,1.212,2.101,2.102,2.103,2.104,"2.105 / T2",2.106,2.107,2.108,2.109,{"v":2.11,"d":"2.110"},2.201,2.202,"2.203 / T5",2.204,2.205,2.206,2.207,3.101,3.102,3.103,3.104,4.101,4.102,4.103,4.104,4.105,4.106,4.107,4.108,4.109,"4.11 / T5",4.111,"5.101 / T4","5.102 / T4","5.103 / T4","5.104 / T4",5.105,"5.106 / T4","5.107 / T4","5.108 / T4","5.109 / T4","5.110 / T4",5.111,5.112,5.113,5.114,"5.115 / T4","5.116 / T4","5.117 / T4","5.118 / T4",5.119,{"v":5.12,"d":"5.120"},5.121,5.122,5.123,5.124,5.125,5.126,5.127,"5.128 / T4","5.129 / T1","5.13 / T1","5.131 / T3","5.132 / T4",6.101,"6.102 / T2",6.103,7.101,"7.102 / T6","7.103 / T6","7.104 / T6","7.105 / T6","7.106 / T6",7.107,"7.108 / T6",7.109,{"v":7.11,"d":"7.110"},"7.111 / T1",7.112,"8.101 / T2",8.102,"8.103 / T2","8.104 / T1","8.105 / T2",8.106,"8.107 / T1",9.101,"9.102 / T2","9.103 / T2",9.104,9.105,10.101,10.102,"10.103 / T5",10.104,10.105,10.106,10.107,"10.108 / T5","10.109 / T5","10.11 / T5",10.111,"10.112 / T1","10.113 / T5",11.101,11.102,11.103,11.104,11.105,11.106,11.107,12.101,12.102,"12.103 / T2",12.104,12.105,12.106,12.107,12.108,12.109,{"v":12.11,"d":"12.110"},"12.111 / T2",12.112,12.113,12.114,12.115,12.116,12.117,12.118,12.119,{"v":12.12,"d":"12.120"},12.121,12.122,12.123,12.124,12.125,12.126,"12.127 / T1",12.128,12.129,"13.101 / T1",13.102,13.103,13.104,"13.105 / T2","13.106 / T2",13.107,13.108,13.109,"14.101 / T2","14.102 / T2",14.103,14.104,14.105,"15.101 / T2",15.102,15.103,16.101,16.102,16.103,16.104,17.101,17.102,17.103,17.104,17.105,17.106,17.107,17.108,17.109,{"v":17.11,"d":"17.110"},17.111,17.112,17.113,17.114,"SAI 1","SAI 2","SAI 3","SAI 4","SAI 5","SAI 6","SAI 7","SAI 8","SAI 9","SAI 10","SAI 11","SAI 12","SAI 13","SAI 14","SAI 15","SAI 16","SAI 17","SAI Overall","Gold Standard","TSF 1","TSF 2","TSF 3","TSF 4","TSF 5","TSF 6","TSF Overall","Smart Practice","Crit Inf A","Crit Inf B","Crit Inf C","Crit Inf D","Crit Inf E","Crit Inf F","Crit Inf G"]
[{"$f":"'Profile Sheet'!G5","v":"00:00:00"},{"$f":"'Profile Sheet'!J5","v":0},{"$f":"'Profile Sheet'!M5","v":0},{"$f":"'Profile Sheet'!A11","v":"Corporate Review"},{"$f":"'Profile Sheet'!A13","v":0},{"$f":"'Profile Sheet'!C13","v":"00:00:00"},{"$f":"'Profile Sheet'!G11","v":0},{"$f":"'Profile Sheet'!H12","v":0},{"$f":"'Profile Sheet'!H13","v":0},{"$f":"'Profile Sheet'!K13","v":0},{"$f":"'Profile Sheet'!M13","v":{"v":0,"d":"00000"}},{"$f":"IF('Profile Sheet'!I16=\"\", \"\", 'Profile Sheet'!I16)","v":""},{"$f":"IF(OR(L2=\"<Please Select>\", L2=\"Not an HTUA\"), \"\", \"X\")","v":"X"},{"$f":"'Profile Sheet'!I15","v":0},{"$f":"'Profile Sheet'!E14","v":0},{"$f":"IF(P3=\"Over 60K Daily Ridership\", \"Yes\", \"No\")","v":"No"},{"$f":"'Profile Sheet'!E16","v":0},{"$f":"IF(R3=\"Agency has received Grant Funding\", \"Yes\", \"No\")","v":"No"},{"$f":"'Profile Sheet'!L17","v":0},{"$f":"IF('Profile Sheet'!$D$19=\"X\", \"X\", \"\")","v":""},{"$f":"IF('Profile Sheet'!$D$20=\"X\", \"X\", \"\")","v":""},{"$f":"IF('Profile Sheet'!$D$21=\"X\", \"X\", \"\")","v":""},{"$f":"IF('Profile Sheet'!$D$22=\"X\", \"X\", \"\")","v":""},{"$f":"IF('Profile Sheet'!$G$19=\"X\", \"X\", \"\")","v":""},{"$f":"IF('Profile Sheet'!$G$20=\"X\", \"X\", \"\")","v":""},{"$f":"IF('Profile Sheet'!$G$21=\"X\", \"X\", \"\")","v":""},{"$f":"IF('Profile Sheet'!$G$22=\"X\", \"X\", \"\")","v":""},{"$f":"IF('Profile Sheet'!$J$19=\"X\", \"X\", \"\")","v":""},{"$f":"IF('Profile Sheet'!$J$20=\"X\", \"X\", \"\")","v":""},{"$f":"IF('Profile Sheet'!$J$21=\"X\", \"X\", \"\")","v":""},{"$f":"IF('Profile Sheet'!$J$22=\"X\", \"X\", \"\")","v":""},{"$f":"'Profile Sheet'!A25","v":0},{"$f":"'Profile Sheet'!D25","v":"Security Coordinator"},{"$f":"'Profile Sheet'!G25","v":0},{"$f":"'Profile Sheet'!I25","v":0},{"$f":"'Profile Sheet'!K25","v":0},{"$f":"'Profile Sheet'!A26","v":0},{"$f":"'Profile Sheet'!D26","v":"Alternate Security Coordinator"},{"$f":"'Profile Sheet'!G26","v":0},{"$f":"'Profile Sheet'!I26","v":0},{"$f":"'Profile Sheet'!K26","v":0},{"$f":"'Profile Sheet'!A40","v":0},{"$f":"'Profile Sheet'!D40","v":"Lead TSI"},{"$f":"'Profile Sheet'!G40","v":0},{"$f":"'Profile Sheet'!I40","v":0},{"$f":"'Profile Sheet'!K40","v":0},{"$f":"'Profile Sheet'!A41","v":0},{"$f":"'Profile Sheet'!D41","v":"Secondary TSI"},{"$f":"'Profile Sheet'!G41","v":0},{"$f":"'Profile Sheet'!I41","v":0},{"$f":"'Profile Sheet'!K41","v":0},{"$f":"IF(AZ4=\"X\", \"\", AZ3)","v":0},{"$f":"IF(BA4=\"X\", \"\", BA3)","v":0},0,0,0,0,0,0,0,0,0,0,0,0,0,0,{"$error":"#REF!"},0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,{"$f":"IF(DM4=\"X\", \"\", DM3)","v":0},0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,{"$f":"IF(FY4=\"X\", \"\", FY3)","v":0},0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,{"$error":"#REF!"},{"$error":"#REF!"},0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,{"$f":"IF(IK4=\"X\", \"\", IK3)","v":0},0,0,0,0,0,0,0,0,0,0,{"$f":"'Scoring Summary'!$C$18","v":{"v":0,"d":"0%"}},{"$f":"'Scoring Summary'!$C$19","v":{"v":0,"d":"0%"}},{"$f":"'Scoring Summary'!$C$20","v":{"v":0,"d":"0%"}},{"$f":"'Scoring Summary'!$C$21","v":{"v":0,"d":"0%"}},{"$f":"'Scoring Summary'!$C$22","v":{"v":0,"d":"0%"}},{"$f":"'Scoring Summary'!$C$23","v":{"v":0,"d":"0%"}},{"$f":"'Scoring Summary'!$C$24","v":{"v":0,"d":"0%"}},{"$f":"'Scoring Summary'!$C$25","v":{"v":0,"d":"0%"}},{"$f":"'Scoring Summary'!$C$26","v":{"v":0,"d":"0%"}},{"$f":"'Scoring Summary'!$C$27","v":{"v":0,"d":"0%"}},{"$f":"'Scoring Summary'!$C$28","v":{"v":0,"d":"0%"}},{"$f":"'Scoring Summary'!$C$29","v":{"v":0,"d":"0%"}},{"$f":"'Scoring Summary'!$C$30","v":{"v":0,"d":"0%"}},{"$f":"'Scoring Summary'!$C$31","v":{"v":0,"d":"0%"}},{"$f":"'Scoring Summary'!$C$32","v":{"v":0,"d":"0%"}},{"$f":"'Scoring Summary'!$C$33","v":{"v":0,"d":"0%"}},{"$f":"'Scoring Summary'!$C$34","v":{"v":0,"d":"0%"}},{"$f":"'Scoring Summary'!$C$36","v":{"v":0,"d":"0%"}},{"$f":"IF(JN3=\"This Agency Received Scores Worthy of the Gold Standard Award!\", \"YES\", \"No\")","v":"No"},{"$f":"'Scoring Summary'!$C$8","v":{"v":0,"d":"0%"}},{"$f":"'Scoring Summary'!$C$9","v":{"v":0,"d":"0%"}},{"$f":"'Scoring Summary'!$C$10","v":{"v":0,"d":"0%"}},{"$f":"'Scoring Summary'!$C$11","v":{"v":0,"d":"0%"}},{"$f":"'Scoring Summary'!$C$12","v":{"v":0,"d":"0%"}},{"$f":"'Scoring Summary'!$C$13","v":{"v":0,"d":"0%"}},{"$f":"'Scoring Summary'!$C$15","v":{"v":0,"d":"0%"}},{"$f":"'Additional Information'!A22","v":0},{"$f":"'Additional Information'!$A$27","v":"a."},{"$f":"'Additional Information'!$A$28","v":"b."},{"$f":"'Additional Information'!$A$29","v":"c."},{"$f":"'Additional Information'!$A$30","v":"d."},{"$f":"'Additional Information'!$A$31","v":"e."},{"$f":"'Additional Information'!$A$32","v":"f."},{"$f":"'Additional Information'!$A$33","v":"g."}]
[{"$nulls":15},{"$f":"'Profile Sheet'!D15","v":0},null,{"$f":"'Profile Sheet'!E17","v":0},{"$nulls":33},{"$f":"Checklist!$D$13","v":0},{"$f":"Checklist!$D$14","v":0},{"$f":"Checklist!$D$15","v":0},{"$f":"Checklist!$D$16","v":0},{"$f":"Checklist!$D$17","v":0},{"$f":"Checklist!$D$18","v":0},{"$f":"Checklist!$D$19","v":0},{"$f":"Checklist!$D$20","v":0},{"$f":"Checklist!$D$21","v":0},{"$f":"Checklist!$D$22","v":0},{"$f":"Checklist!$D$23","v":0},{"$f":"Checklist!$D$24","v":0},{"$f":"Checklist!$D$25","v":0},{"$f":"Checklist!$D$26","v":0},{"$f":"Checklist!$D$27","v":0},{"$f":"Checklist!$D$28","v":0},{"$f":"Checklist!#REF!","v":{"$error":"#REF!"}},{"$f":"Checklist!$D$30","v":0},{"$f":"Checklist!$D$31","v":0},{"$f":"Checklist!$D$32","v":0},{"$f":"Checklist!$D$33","v":0},{"$f":"Checklist!$D$34","v":0},{"$f":"Checklist!$D$35","v":0},{"$f":"Checklist!$D$36","v":0},{"$f":"Checklist!$D$37","v":0},{"$f":"Checklist!$D$38","v":0},{"$f":"Checklist!$D$39","v":0},{"$f":"Checklist!$D$40","v":0},{"$f":"Checklist!$D$41","v":0},{"$f":"Checklist!$D$44","v":0},{"$f":"Checklist!$D$45","v":0},{"$f":"Checklist!$D$46","v":0},{"$f":"Checklist!$D$47","v":0},{"$f":"Checklist!$D$48","v":0},{"$f":"Checklist!$D$49","v":0},{"$f":"Checklist!$D$50","v":0},{"$f":"Checklist!$D$51","v":0},{"$f":"Checklist!$D$52","v":0},{"$f":"Checklist!$D$53","v":0},{"$f":"Checklist!$D$55","v":0},{"$f":"Checklist!$D$56","v":0},{"$f":"Checklist!$D$57","v":0},{"$f":"Checklist!$D$58","v":0},{"$f":"Checklist!$D$59","v":0},{"$f":"Checklist!$D$60","v":0},{"$f":"Checklist!$D$61","v":0},{"$f":"Checklist!$D$63","v":0},{"$f":"Checklist!$D$64","v":0},{"$f":"Checklist!$D$65","v":0},{"$f":"Checklist!$D$66","v":0},{"$f":"Checklist!$D$68","v":0},{"$f":"Checklist!$D$69","v":0},{"$f":"Checklist!$D$70","v":0},{"$f":"Checklist!$D$71","v":0},{"$f":"Checklist!$D$72","v":0},{"$f":"Checklist!$D$73","v":0},{"$f":"Checklist!$D$74","v":0},{"$f":"Checklist!$D$75","v":0},{"$f":"Checklist!$D$76","v":0},{"$f":"Checklist!$D$77","v":0},{"$f":"Checklist!$D$78","v":0},{"$f":"Checklist!$D$81","v":0},{"$f":"Checklist!$D$82","v":0},{"$f":"Checklist!$D$83","v":0},{"$f":"Checklist!$D$84","v":0},{"$f":"Checklist!$D$85","v":0},{"$f":"Checklist!$D$86","v":0},{"$f":"Checklist!$D$87","v":0},{"$f":"Checklist!$D$88","v":0},{"$f":"Checklist!$D$89","v":0},{"$f":"Checklist!$D$90","v":0},{"$f":"Checklist!$D$91","v":0},{"$f":"Checklist!$D$92","v":0},{"$f":"Checklist!$D$93","v":0},{"$f":"Checklist!$D$94","v":0},{"$f":"Checklist!$D$95","v":0},{"$f":"Checklist!$D$96","v":0},{"$f":"Checklist!$D$97","v":0},{"$f":"Checklist!$D$98","v":0},{"$f":"Checklist!$D$99","v":0},{"$f":"Checklist!$D$100","v":0},{"$f":"Checklist!$D$101","v":0},{"$f":"Checklist!$D$102","v":0},{"$f":"Checklist!$D$103","v":0},{"$f":"Checklist!$D$104","v":0},{"$f":"Checklist!$D$105","v":0},{"$f":"Checklist!$D$106","v":0},{"$f":"Checklist!$D$107","v":0},{"$f":"Checklist!$D$108","v":0},{"$f":"Checklist!$D$109","v":0},{"$f":"Checklist!$D$110","v":0},{"$f":"Checklist!$D$111","v":0},{"$f":"Checklist!$D$112","v":0},{"$f":"Checklist!$D$115","v":0},{"$f":"Checklist!$D$116","v":0},{"$f":"Checklist!$D$117","v":0},{"$f":"Checklist!$D$120","v":0},{"$f":"Checklist!$D$121","v":0},{"$f":"Checklist!$D$122","v":0},{"$f":"Checklist!$D$123","v":0},{"$f":"Checklist!$D$124","v":0},{"$f":"Checklist!$D$125","v":0},{"$f":"Checklist!$D$126","v":0},{"$f":"Checklist!$D$127","v":0},{"$f":"Checklist!$D$128","v":0},{"$f":"Checklist!$D$129","v":0},{"$f":"Checklist!$D$130","v":0},{"$f":"Checklist!$D$131","v":0},{"$f":"Checklist!$D$134","v":0},{"$f":"Checklist!$D$135","v":0},{"$f":"Checklist!$D$136","v":0},{"$f":"Checklist!$D$137","v":0},{"$f":"Checklist!$D$138","v":0},{"$f":"Checklist!$D$139","v":0},{"$f":"Checklist!$D$140","v":0},{"$f":"Checklist!$D$143","v":0},{"$f":"Checklist!$D$144","v":0},{"$f":"Checklist!$D$145","v":0},{"$f":"Checklist!$D$146","v":0},{"$f":"Checklist!$D$147","v":0},{"$f":"Checklist!$D$150","v":0},{"$f":"Checklist!$D$151","v":0},{"$f":"Checklist!$D$152","v":0},{"$f":"Checklist!$D$153","v":0},{"$f":"Checklist!$D$154","v":0},{"$f":"Checklist!$D$155","v":0},{"$f":"Checklist!$D$156","v":0},{"$f":"Checklist!$D$157","v":0},{"$f":"Checklist!$D$158","v":0},{"$f":"Checklist!$D$159","v":0},{"$f":"Checklist!$D$160","v":0},{"$f":"Checklist!$D$161","v":0},{"$f":"Checklist!$D$162","v":0},{"$f":"Checklist!$D$164","v":0},{"$f":"Checklist!$D$165","v":0},{"$f":"Checklist!$D$166","v":0},{"$f":"Checklist!$D$167","v":0},{"$f":"Checklist!$D$168","v":0},{"$f":"Checklist!$D$169","v":0},{"$f":"Checklist!$D$170","v":0},{"$f":"Checklist!$D$173","v":0},{"$f":"Checklist!$D$174","v":0},{"$f":"Checklist!$D$175","v":0},{"$f":"Checklist!$D$176","v":0},{"$f":"Checklist!$D$177","v":0},{"$f":"Checklist!$D$178","v":0},{"$f":"Checklist!$D$179","v":0},{"$f":"Checklist!$D$180","v":0},{"$f":"Checklist!$D$181","v":0},{"$f":"Checklist!$D$182","v":0},{"$f":"Checklist!$D$183","v":0},{"$f":"Checklist!$D$184","v":0},{"$f":"Checklist!$D$185","v":0},{"$f":"Checklist!$D$186","v":0},{"$f":"Checklist!$D$187","v":0},{"$f":"Checklist!$D$188","v":0},{"$f":"Checklist!$D$189","v":0},{"$f":"Checklist!$D$190","v":0},{"$f":"Checklist!$D$191","v":0},{"$f":"Checklist!$D$192","v":0},{"$f":"Checklist!$D$193","v":0},{"$f":"Checklist!$D$194","v":0},{"$f":"Checklist!$D$195","v":0},{"$f":"Checklist!$D$196","v":0},{"$f":"Checklist!$D$197","v":0},{"$f":"Checklist!$D$198","v":0},{"$f":"Checklist!$D$199","v":0},{"$f":"Checklist!#REF!","v":{"$error":"#REF!"}},{"$f":"Checklist!#REF!","v":{"$error":"#REF!"}},{"$f":"Checklist!$D$201","v":0},{"$f":"Checklist!$D$202","v":0},{"$f":"Checklist!$D$203","v":0},{"$f":"Checklist!$D$204","v":0},{"$f":"Checklist!$D$205","v":0},{"$f":"Checklist!$D$206","v":0},{"$f":"Checklist!$D$207","v":0},{"$f":"Checklist!$D$208","v":0},{"$f":"Checklist!$D$209","v":0},{"$f":"Checklist!$D$212","v":0},{"$f":"Checklist!$D$213","v":0},{"$f":"Checklist!$D$214","v":0},{"$f":"Checklist!$D$215","v":0},{"$f":"Checklist!$D$216","v":0},{"$f":"Checklist!$D$219","v":0},{"$f":"Checklist!$D$220","v":0},{"$f":"Checklist!$D$221","v":0},{"$f":"Checklist!$D$223","v":0},{"$f":"Checklist!$D$224","v":0},{"$f":"Checklist!$D$225","v":0},{"$f":"Checklist!$D$226","v":0},{"$f":"Checklist!$D$229","v":0},{"$f":"Checklist!$D$230","v":0},{"$f":"Checklist!$D$231","v":0},{"$f":"Checklist!$D$232","v":0},{"$f":"Checklist!$D$233","v":0},{"$f":"Checklist!$D$234","v":0},{"$f":"Checklist!$D$235","v":0},{"$f":"Checklist!$D$236","v":0},{"$f":"Checklist!$D$237","v":0},{"$f":"Checklist!$D$238","v":0},{"$f":"Checklist!$D$239","v":0},{"$f":"Checklist!$D$240","v":0},{"$f":"Checklist!$D$241","v":0},{"$f":"Checklist!$D$242","v":0},{"$nulls":18},{"$f":"'Gold Standard Award'!A1","v":"This Agency Did Not Meet the Requirements of the Gold Standard Award."}]
[{"$nulls":51},{"$f":"Checklist!$C$13","v":0},{"$f":"Checklist!$C$14","v":0},{"$f":"Checklist!$C$15","v":0},{"$f":"Checklist!$C$16","v":0},{"$f":"Checklist!$C$17","v":0},{"$f":"Checklist!$C$18","v":0},{"$f":"Checklist!$C$19","v":0},{"$f":"Checklist!$C$20","v":0},{"$f":"Checklist!$C$21","v":0},{"$f":"Checklist!$C$22","v":0},{"$f":"Checklist!$C$23","v":0},{"$f":"Checklist!$C$24","v":0},{"$f":"Checklist!$C$25","v":0},{"$f":"Checklist!$C$26","v":0},{"$f":"Checklist!$C$27","v":""},{"$f":"Checklist!$C$28","v":""},{"$f":"Checklist!#REF!","v":{"$error":"#REF!"}},{"$f":"Checklist!$C$30","v":0},{"$f":"Checklist!$C$31","v":0},{"$f":"Checklist!$C$32","v":0},{"$f":"Checklist!$C$33","v":0},{"$f":"Checklist!$C$34","v":0},{"$f":"Checklist!$C$35","v":0},{"$f":"Checklist!$C$36","v":0},{"$f":"Checklist!$C$37","v":0},{"$f":"Checklist!$C$38","v":0},{"$f":"Checklist!$C$39","v":0},{"$f":"Checklist!$C$40","v":0},{"$f":"Checklist!$C$41","v":0},{"$f":"Checklist!$C$44","v":0},{"$f":"Checklist!$C$45","v":0},{"$f":"Checklist!$C$46","v":0},{"$f":"Checklist!$C$47","v":0},{"$f":"Checklist!$C$48","v":0},{"$f":"Checklist!$C$49","v":0},{"$f":"Checklist!$C$50","v":0},{"$f":"Checklist!$C$51","v":0},{"$f":"Checklist!$C$52","v":0},{"$f":"Checklist!$C$53","v":0},{"$f":"Checklist!$C$55","v":0},{"$f":"Checklist!$C$56","v":0},{"$f":"Checklist!$C$57","v":0},{"$f":"Checklist!$C$58","v":0},{"$f":"Checklist!$C$59","v":0},{"$f":"Checklist!$C$60","v":0},{"$f":"Checklist!$C$61","v":0},{"$f":"Checklist!$C$63","v":0},{"$f":"Checklist!$C$64","v":0},{"$f":"Checklist!$C$65","v":0},{"$f":"Checklist!$C$66","v":0},{"$f":"Checklist!$C$68","v":0},{"$f":"Checklist!$C$69","v":0},{"$f":"Checklist!$C$70","v":0},{"$f":"Checklist!$C$71","v":0},{"$f":"Checklist!$C$72","v":0},{"$f":"Checklist!$C$73","v":0},{"$f":"Checklist!$C$74","v":0},{"$f":"Checklist!$C$75","v":0},{"$f":"Checklist!$C$76","v":0},{"$f":"Checklist!$C$77","v":0},{"$f":"Checklist!$C$78","v":0},{"$f":"Checklist!$C$81","v":0},{"$f":"Checklist!$C$82","v":0},{"$f":"Checklist!$C$83","v":0},{"$f":"Checklist!$C$84","v":0},{"$f":"Checklist!$C$85","v":0},{"$f":"Checklist!$C$86","v":0},{"$f":"Checklist!$C$87","v":0},{"$f":"Checklist!$C$88","v":0},{"$f":"Checklist!$C$89","v":0},{"$f":"Checklist!$C$90","v":0},{"$f":"Checklist!$C$91","v":0},{"$f":"Checklist!$C$92","v":0},{"$f":"Checklist!$C$93","v":0},{"$f":"Checklist!$C$94","v":0},{"$f":"Checklist!$C$95","v":0},{"$f":"Checklist!$C$96","v":0},{"$f":"Checklist!$C$97","v":0},{"$f":"Checklist!$C$98","v":0},{"$f":"Checklist!$C$99","v":0},{"$f":"Checklist!$C$100","v":0},{"$f":"Checklist!$C$101","v":0},{"$f":"Checklist!$C$102","v":0},{"$f":"Checklist!$C$103","v":0},{"$f":"Checklist!$C$104","v":0},{"$f":"Checklist!$C$105","v":0},{"$f":"Checklist!$C$106","v":0},{"$f":"Checklist!$C$107","v":0},{"$f":"Checklist!$C$108","v":0},{"$f":"Checklist!$C$109","v":0},{"$f":"Checklist!$C$110","v":0},{"$f":"Checklist!$C$111","v":0},{"$f":"Checklist!$C$112","v":0},{"$f":"Checklist!$C$115","v":0},{"$f":"Checklist!$C$116","v":0},{"$f":"Checklist!$C$117","v":0},{"$f":"Checklist!$C$120","v":0},{"$f":"Checklist!$C$121","v":0},{"$f":"Checklist!$C$122","v":0},{"$f":"Checklist!$C$123","v":0},{"$f":"Checklist!$C$124","v":0},{"$f":"Checklist!$C$125","v":0},{"$f":"Checklist!$C$126","v":0},{"$f":"Checklist!$C$127","v":0},{"$f":"Checklist!$C$128","v":0},{"$f":"Checklist!$C$129","v":0},{"$f":"Checklist!$C$130","v":0},{"$f":"Checklist!$C$131","v":0},{"$f":"Checklist!$C$134","v":0},{"$f":"Checklist!$C$135","v":0},{"$f":"Checklist!$C$136","v":0},{"$f":"Checklist!$C$137","v":0},{"$f":"Checklist!$C$138","v":0},{"$f":"Checklist!$C$139","v":0},{"$f":"Checklist!$C$140","v":0},{"$f":"Checklist!$C$143","v":0},{"$f":"Checklist!$C$144","v":0},{"$f":"Checklist!$C$145","v":0},{"$f":"Checklist!$C$146","v":0},{"$f":"Checklist!$C$147","v":""},{"$f":"Checklist!$C$150","v":0},{"$f":"Checklist!$C$151","v":0},{"$f":"Checklist!$C$152","v":0},{"$f":"Checklist!$C$153","v":0},{"$f":"Checklist!$C$154","v":0},{"$f":"Checklist!$C$155","v":0},{"$f":"Checklist!$C$156","v":0},{"$f":"Checklist!$C$157","v":0},{"$f":"Checklist!$C$158","v":0},{"$f":"Checklist!$C$159","v":0},{"$f":"Checklist!$C$160","v":0},{"$f":"Checklist!$C$161","v":0},{"$f":"Checklist!$C$162","v":0},{"$f":"Checklist!$C$164","v":0},{"$f":"Checklist!$C$165","v":0},{"$f":"Checklist!$C$166","v":0},{"$f":"Checklist!$C$167","v":0},{"$f":"Checklist!$C$168","v":0},{"$f":"Checklist!$C$169","v":0},{"$f":"Checklist!$C$170","v":0},{"$f":"Checklist!$C$173","v":0},{"$f":"Checklist!$C$174","v":0},{"$f":"Checklist!$C$175","v":0},{"$f":"Checklist!$C$176","v":0},{"$f":"Checklist!$C$177","v":0},{"$f":"Checklist!$C$178","v":0},{"$f":"Checklist!$C$179","v":0},{"$f":"Checklist!$C$180","v":0},{"$f":"Checklist!$C$181","v":0},{"$f":"Checklist!$C$182","v":0},{"$f":"Checklist!$C$183","v":0},{"$f":"Checklist!$C$184","v":0},{"$f":"Checklist!$C$185","v":0},{"$f":"Checklist!$C$186","v":0},{"$f":"Checklist!$C$187","v":0},{"$f":"Checklist!$C$188","v":0},{"$f":"Checklist!$C$189","v":0},{"$f":"Checklist!$C$190","v":0},{"$f":"Checklist!$C$191","v":0},{"$f":"Checklist!$C$192","v":0},{"$f":"Checklist!$C$193","v":0},{"$f":"Checklist!$C$194","v":0},{"$f":"Checklist!$C$195","v":0},{"$f":"Checklist!$C$196","v":0},{"$f":"Checklist!$C$197","v":0},{"$f":"Checklist!$C$198","v":0},{"$f":"Checklist!$C$199","v":0},{"$f":"Checklist!#REF!","v":{"$error":"#REF!"}},{"$f":"Checklist!#REF!","v":{"$error":"#REF!"}},{"$f":"Checklist!$C$201","v":0},{"$f":"Checklist!$C$202","v":0},{"$f":"Checklist!$C$203","v":0},{"$f":"Checklist!$C$204","v":0},{"$f":"Checklist!$C$205","v":0},{"$f":"Checklist!$C$206","v":0},{"$f":"Checklist!$C$207","v":0},{"$f":"Checklist!$C$208","v":0},{"$f":"Checklist!$C$209","v":0},{"$f":"Checklist!$C$212","v":0},{"$f":"Checklist!$C$213","v":0},{"$f":"Checklist!$C$214","v":0},{"$f":"Checklist!$C$215","v":0},{"$f":"Checklist!$C$216","v":0},{"$f":"Checklist!$C$219","v":0},{"$f":"Checklist!$C$220","v":0},{"$f":"Checklist!$C$221","v":0},{"$f":"Checklist!$C$223","v":0},{"$f":"Checklist!$C$224","v":0},{"$f":"Checklist!$C$225","v":0},{"$f":"Checklist!$C$226","v":0},{"$f":"Checklist!$C$229","v":0},{"$f":"Checklist!$C$230","v":0},{"$f":"Checklist!$C$231","v":0},{"$f":"Checklist!$C$232","v":0},{"$f":"Checklist!$C$233","v":0},{"$f":"Checklist!$C$234","v":0},{"$f":"Checklist!$C$235","v":0},{"$f":"Checklist!$C$236","v":""},{"$f":"Checklist!$C$237","v":""},{"$f":"Checklist!$C$238","v":""},{"$f":"Checklist!$C$239","v":""},{"$f":"Checklist!$C$240","v":""},{"$f":"Checklist!$C$241","v":""},{"$f":"Checklist!$C$242","v":""}]
[null,"When transferring to database,",{"$nulls":49},13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,31,32,33,34,35,36,37,38,39,40,41,42,45,46,47,48,49,50,51,52,53,54,56,57,58,59,60,61,62,64,65,66,67,69,70,71,72,73,74,75,76,77,78,79,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,116,117,118,121,122,123,124,125,126,127,128,129,130,131,132,135,136,137,138,139,140,141,144,145,146,147,148,151,152,153,154,155,156,157,158,159,160,161,162,163,165,166,167,168,169,170,171,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,204,205,206,207,208,209,210,211,212,215,216,217,218,219,222,223,224,226,227,228,229,232,233,234,235,236,237,238,239,240,241,242,243,244,245]
[null,"PASTE - \"VALUES and NUMBER FORMATS\" ONLY!!!"]

{"sheet":"Dropdown Menus","index":13,"n_rows":67,"n_cols":35,"rows_kept":67,"hidden":true,"merged":[[0,0,0,13]]}
["Dropdown Menus",{"$nulls":14},"FY2014",null,"SAI 1","SAI 2","SAI 3","SAI 4","SAI 5","SAI 6","SAI 7","SAI 8","SAI 9","SAI 10","SAI 11","SAI 12","SAI 13","SAI 14","SAI 15","SAI 16","SAI 17","Average"]
[{"$nulls":3},"<Please Select>",{"$nulls":11},"60K Club","Averages",{"v":0.9147,"d":"91.47%"},{"v":0.9475,"d":"94.75%"},{"v":0.9209,"d":"92.09%"},{"v":0.9634,"d":"96.34%"},{"v":0.8855,"d":"88.55%"},{"v":0.8683,"d":"86.83%"},{"v":0.8605,"d":"86.05%"},{"v":0.9058,"d":"90.58%"},{"v":0.9367,"d":"93.67%"},{"v":0.9313,"d":"93.13%"},{"v":0.948,"d":"94.80%"},{"v":0.9311,"d":"93.11%"},{"v":0.9189,"d":"91.89%"},{"v":0.9252,"d":"92.52%"},{"v":0.923,"d":"92.30%"},{"v":0.8517,"d":"85.17%"},{"v":0.8659,"d":"86.59%"},{"v":0.9119,"d":"91.19%"}]
["Over 60K Daily Ridership","X",1,"Not an HTUA",0,"No","TSI Work Plan List","Corporate Review","AK","Agency has received Grant Funding","N/A",{"$nulls":4},"Non-60K","Averages",{"v":0.7281,"d":"72.81%"},{"v":0.8063,"d":"80.63%"},{"v":0.7729,"d":"77.29%"},{"v":0.8246,"d":"82.46%"},{"v":0.7332,"d":"73.32%"},{"v":0.6003,"d":"60.03%"},{"v":0.6476,"d":"64.76%"},{"v":0.665,"d":"66.50%"},{"v":0.7278,"d":"72.78%"},{"v":0.6721,"d":"67.21%"},{"v":0.7912,"d":"79.12%"},{"v":0.8075,"d":"80.75%"},{"v":0.8141,"d":"81.41%"},{"v":0.859,"d":"85.90%"},{"v":0.8041,"d":"80.41%"},{"v":0.4446,"d":"44.46%"},{"v":0.6691,"d":"66.91%"},{"v":0.7277,"d":"72.77%"}]
["Under 60K Daily Ridership",null,2,"Albany NY",1,"Yes","Agency Chosen Outside of Workplan","Facility Review","AL","Agency has NOT received Grant Funding","FY16"]
[null,null,3,"Anaheim/Santa Ana CA",2,{"$nulls":3},"AR",null,"FY15"]
[null,null,4,"Atlanta GA",3,{"$nulls":3},"AZ",null,"FY14"]
[null,null,5,"Austin TX",4,{"$nulls":3},"CA",null,"FY13"]
[null,null,6,"Bakersfield CA",{"$nulls":4},"CO",null,"FY12"]
[null,null,7,"Baltimore MD",{"$nulls":4},"CT",null,"FY11"]
[{"$nulls":3},"Baton Rouge LA",{"$nulls":4},"DC",null,"FY10"]
[{"$nulls":3},"Bay Area CA",{"$nulls":4},"DE",null,"FY09"]
[{"$nulls":3},"Boston MA",{"$nulls":4},"FL",null,"FY08"]
[{"$nulls":3},"Bridgeport CT",{"$nulls":4},"GA",null,"FY07"]
[{"$nulls":3},"Buffalo NY",{"$nulls":4},"HI",null,"FY06"]
[{"$nulls":3},"Charlotte NC",{"$nulls":4},"IA"]
[{"$nulls":3},"Chicago IL",{"$nulls":4},"ID"]
[{"$nulls":3},"Cincinatti OH",{"$nulls":4},"IL"]
[{"$nulls":3},"Cleveland OH",{"$nulls":4},"IN"]
[{"$nulls":3},"Columbus OH",{"$nulls":4},"KS"]
[{"$nulls":3},"Dallas/Fort Worth/Arlington TX",{"$nulls":4},"KY"]
[{"$nulls":3},"Denver CO",{"$nulls":4},"LA"]
[{"$nulls":3},"Detroit MI",{"$nulls":4},"MA"]
[{"$nulls":3},"El Paso TX",{"$nulls":4},"MD"]
[{"$nulls":3},"Fort Lauderdale FL",{"$nulls":4},"ME"]
[{"$nulls":3},"Hartford CT",{"$nulls":4},"MI"]
[{"$nulls":3},"Honolulu HI",{"$nulls":4},"MN"]
[{"$nulls":3},"Houston TX",{"$nulls":4},"MO"]
[{"$nulls":3},"Indianapolis IN",{"$nulls":4},"MS"]
[{"$nulls":3},"Jacksonville FL",{"$nulls":4},"MT"]
[{"$nulls":3},"Jersey City/Newark NJ",{"$nulls":4},"NC"]
[{"$nulls":3},"Kansas City MO",{"$nulls":4},"ND"]
[{"$nulls":3},"Las Vegas NV",{"$nulls":4},"NE"]
[{"$nulls":3},"Los Angeles/Long Beach CA",{"$nulls":4},"NH"]
[{"$nulls":3},"Louisville KY",{"$nulls":4},"NJ"]
[{"$nulls":3},"Memphis TN",{"$nulls":4},"NM"]
[{"$nulls":3},"Miami FL",{"$nulls":4},"NV"]
[{"$nulls":3},"Milwaukee WI",{"$nulls":4},"NY"]
[{"$nulls":3},"Nashville TN",{"$nulls":4},"OH"]
[{"$nulls":3},"National Capital Region DC",{"$nulls":4},"OK"]
[{"$nulls":3},"New Orleans LA",{"$nulls":4},"OR"]
[{"$nulls":3},"New York City NY",{"$nulls":4},"PA"]
[{"$nulls":3},"Norfolk VA",{"$nulls":4},"PR"]
[{"$nulls":3},"Oklahoma City OK",{"$nulls":4},"RI"]
[{"$nulls":3},"Omaha NE",{"$nulls":4},"SC"]
[{"$nulls":3},"Orlando FL",{"$nulls":4},"SD"]
[{"$nulls":3},"Oxnard CA",{"$nulls":4},"TN"]
[{"$nulls":3},"Philadelphia PA",{"$nulls":4},"TX"]
[{"$nulls":3},"Phoenix AZ",{"$nulls":4},"UT"]
[{"$nulls":3},"Pittsburgh PA",{"$nulls":4},"VA"]
[{"$nulls":3},"Portland OR",{"$nulls":4},"VT"]
[{"$nulls":3},"Providence RI",{"$nulls":4},"WA"]
[{"$nulls":3},"Richmond VA",{"$nulls":4},"WI"]
[{"$nulls":3},"Riverside CA",{"$nulls":4},"WV"]
[{"$nulls":3},"Rochester NY",{"$nulls":4},"WY"]
[{"$nulls":3},"Sacramento CA"]
[{"$nulls":3},"Salt Lake City UT"]
[{"$nulls":3},"San Antonio TX"]
[{"$nulls":3},"San Diego CA"]
[{"$nulls":3},"San Juan PR"]
[{"$nulls":3},"Seattle WA"]
[{"$nulls":3},"St. Louis MO"]
[{"$nulls":3},"Syracuse NY"]
[{"$nulls":3},"Tampa FL"]
[{"$nulls":3},"Toledo OH"]
[{"$nulls":3},"Tucson AZ"]
[{"$nulls":3},"Tulsa OK"]
[{"$nulls":3},"Twin Cities MN"]