TSA Pipeline Security

Following the Colonial Pipeline ransomware attack in 2021, the Transportation Security Administration (TSA) issued Security Directives establishing mandatory cybersecurity requirements for critical pipeline operators. These directives apply to owners and operators of hazardous liquid and natural gas pipelines designated as critical infrastructure.

The directives require pipeline operators to implement specific cybersecurity measures, report incidents, designate cybersecurity coordinators, and conduct vulnerability assessments. TSA continues to update requirements based on evolving threats to pipeline infrastructure.