; (ii) barriers and barricades; (iii) hardened targets; and (iv) well-coordinated response planning; (5) securing and monitoring the shipping, receipt, and storage of a substance of concern for the covered chemical facility; (6) deterring theft or diversion of a substance of concern; (7) deterring insider sabotage; (8) deterring cyber sabotage, including by preventing unauthorized onsite or remote access to critical process controls, including— (A) supervisory control and data acquisition systems; (B) distributed control systems; (C) process control systems; (D) industrial control systems; (E) critical business systems; and (F) other sensitive computerized systems; (9) developing and conducting exercises of an internal emergency plan for owners, operators, and covered individuals for a covered chemical facility for responding to chemical facility terrorist incidents at the covered chemical facility, including providing appropriate information to any local emergency planning committee, State emergency response commission, local law enforcement officials, and emergency response providers to ensure an effective, collective response to terrorist incidents; (10) maintaining effective monitoring, communications, and warning systems, including— (A) measures designed to ensure that security systems and equipment are in good working order and inspected, tested, calibrated, and otherwise maintained; (B) measures designed to regularly test security systems, note deficiencies, correct for detected deficiencies, and record results so that the results are available for inspection by the Secretary; and (C) measures to allow the chemical facility to promptly identify and respond to security system and equipment failures or malfunctions