U.S. Transportation Security Administration (TSA) Security Incident

Analysis Attacks and Vulnerabilities CISA Critical infrastructure News Regulation, Standards and Compliance Transportation Vulnerabilities TSA Security Directive addresses OT cybersecurity, as it adopts performance-based rules for pipeline operators July 27, 2023 In the wake of ongoing cybersecurity threats to pipeline systems, the U.S. Transportation Security Administration (TSA) updated on Wednesday its Security Directive regarding oil and natural gas pipeline cybersecurity, in its continued effort to reinforce cybersecurity preparedness and resilience for the nations critical pipelines. The agency uses this Security Directive to mandate TSA-specified owners/operators of pipeline and liquefied natural gas facilities to implement cybersecurity measures, in order to prevent disruption and degradation to their infrastructure. The latest requirements, Security Directive Pipeline-2021-02D, are a continuation of the SD Pipeline-2021-02 series that cancels and supersedes SD Pipeline-2021-02C, issued last July. The document continues to require performance-based regulatory cybersecurity measures first issued by TSA on July 26, 2021, under the Security Directive Pipeline-2021-02 series. It has been developed with input from industry stakeholders and federal partners, including the Cybersecurity and Infrastructure Security Agency (CISA) and the Department of Transportation (DoT), following the initial directive announced in July 2021, issued after the Colonial Pipeline attack , and renewed in July 2022. The TSA specified that these cybersecurity measures expire on July 27, 2024. The goal of this Security Directive is to reduce the risk that cybersecurity threats pose to critical pipeline systems and facilities by implementing layered cybersecurity measures that demonstrate a defense-in-depth approach against such threats, the TSA disclosed. Recent and evolving intelligence emphasizes the growing sophistication of nefarious persons, organizations, and governments,...

... (truncated for display)