; (II) assess any security vulnerability of the participating facility using a formal recognized methodology— (aa) in the initial security vulnerability assessment of the participating facility; (bb) not less than every 3 years after the initial security vulnerability assessment of the participating facility; and (cc) if there is a significant change to the security measures of the participating facility; and (III) develop and maintain a site security plan that— (aa) addresses any security vulnerability of the participating facility; and (bb) includes security measures, including— (AA) detection measures; (BB) delay measures; (CC) response measures; and (DD) security management. (iii) Program incentives Not later than 180 days after the date of enactment of this paragraph, the Secretary shall— (I) establish incentives for participation in the CFATS Recognition Program, which shall include— (aa) a reduction of the Chemical Facility Anti-Terrorism Standards Program risk tier level at which a participating facility is currently tiered; (bb) a reduction in the frequency of compliance inspections; (cc) streamlined vulnerability assessment and site security plan processes; and (dd) any other regulatory relief as determined appropriate by the Secretary; and (II) provide written guidance on any incentive established under subclause (I). (D) Implementation (i) Applications An industry stewardship program desiring to participate in the CFATS Recognition Program shall submit an application to the Secretary that contains information relating to— (I) the industry stewardship program submitting the application and the sponsor organization of the industry stewardship program; (II) each participating facility that is a member of the industry stewardship program