; (6) by inserting after paragraph (2) the following: (3) the term chemical of interest means a chemical designated as a chemical of interest under Appendix A to part 27 of title 6, Code of Federal Regulations, or any successor thereto; ; (7) in paragraph (9), as so redesignated, by striking section 2102(c)(4)(B)(i) and inserting section 2102(c)(4) by the Secretary that identifies specific security measures that are sufficient to meet the risk-based performance standards for facilities in tiers 3 and 4 that elect to utilize the expedited approval program ; (8) by inserting after paragraph (9), as so redesignated, the following: (10) the term hybrid physical-cybersecurity vulnerability — (A) means a vulnerability in the security of a covered chemical facility that relates to the combination of the physical operations and cybersecurity operations of the covered chemical facility; and (B) includes a vulnerability of a covered chemical facility to— (i) a physical threat to a cybersecurity operation affecting the chemical of interest of the covered chemical facility; or (ii) a cybersecurity threat to a physical operation of the covered chemical facility; ; (9) by inserting after paragraph (11), as so redesignated, the following: (12) the term security vulnerability assessment means an assessment of the vulnerabilities of a covered chemical facility to— (A) physical threats; and (B) cybersecurity threats relating to— (i) the information technology or operational technology of the covered chemical facility; and (ii) (I) a chemical of interest; (II) an operation involving a chemical of interest; or (III) a security measure of the covered chemical facility; ; (10) in paragraph (15), as so redesignated, by inserting and after the semicolon; and (11) in paragraph (16), as so redesignated, by striking