Security News > 2023 > August > A closer look at the new TSA oil and gas pipeline regulations

The TSA has announced updates to its Security Directive to strengthen the operational resilience of oil and natural gas pipeline owners and operators against cyber-attacks.

In this Help Net Security video, Chris Warner, OT Senior Security Consultant at GuidePoint Security, discusses how these newly introduced provisions mandate pipeline owners and operators to proactively enhance their systems' security and protect against potential cybersecurity threats in the oil and natural gas sector.

Section II.A.3 now requires Owner/Operators to reassess their systems if they change their method of pipeline operations, notifying TSA of a schedule for compliance with the SD's requirements.

A new Section II.B.3 clarifies whether an Owner/Operator needs to amend their TSA-approved Cybersecurity Implementation Plan based on the updated SD. Section II.B.4 has been removed, and Section III.A allows TSA to identify additional Critical Cyber Systems not previously identified during review.

Section III.G changes the acronym CAP to Cybersecurity Assessment Plan, requiring its annual submission and TSA approval.

Finally, Section V.C is a new requirement addressing how documents are written and submitted to the TSA to provide flexibility for future capabilities in enhancing operational resilience.

News URL

https://www.helpnetsecurity.com/2023/08/18/tsa-oil-and-gas-pipeline-regulations-video/