Updated TSA Pipeline Cybersecurity Requirements Offer More Flexibility

guest · Jul 25, 2022

The Transportation Security Administration (TSA) has updated its directive for oil and natural gas pipeline cybersecurity
July 25, 2022
https://www.securityweek.com/updated-tsa-pipeline-cybersecurity-requirements-offer-more-flexibility

After a ransomware attack conducted by a Russia-linked cybercrime group forced Colonial Pipeline to shut down systems in May 2021, the TSA issued a directive requiring pipeline owners and operators to improve their defenses and work with authorities in the event of an attack.

However, those requirements, described as inflexible and confusing, posed some serious issues to the pipeline industry. Organizations and experts in the pipeline and cybersecurity industries complained that some of the requirements seemed to be best practices designed for IT systems rather than operational technology (OT). Applying IT security principles to OT could result in significant disruptions and safety issues.
Click to expand...

The latest version of the security directive, named Security Directive Pipeline-2021-02C, which goes into effect on July 27 and expires on the same date in 2023, aims to address many of these issues by providing owners and operators more flexibility.

The TSA says the new rules, which have been developed based on the feedback received from the industry, focus on “performance-based – rather than prescriptive – measures to achieve critical cybersecurity outcomes.”
Click to expand...

Log in or Sign up

Updated TSA Pipeline Cybersecurity Requirements Offer More Flexibility

guest Guest

Log in or Sign up

Updated TSA Pipeline Cybersecurity Requirements Offer More Flexibility

guest Guest

Useful Searches