RCP Inc.

Search Open Menu

In This Issue

  1. PHMSA Advisory Bulletin: Eliminating Hazardous Leaks and Minimizing Releases of Natural Gas from Pipeline Facilities
  2. PHMSA Max Civil Penalty Adjustment Final Rule
  3. PHMSA Notice: Terminates Stay of Enforcement Related to COVID-19
  4. PHMSA Notice Pipeline Safety Information Collection Activities
  5. TSA Security Directive “Enhancing Pipeline Cybersecurity”
  6. TSA Pipeline Security Guideline
  7. Indiana Pipeline Safety Regulation Amendments
  8. Dura-Line Pauses NGD Polyethylene Pipe Orders

TSA Security Directive “Enhancing Pipeline Cybersecurity”

The Transportation Security Administration (TSA) issued a Security Directive (2021-01), effective May 28, 2021, titled Enhancing Pipeline Cybersecurity. This Directive was sent to the specific pipeline operators who were identified by the TSA as operating critical pipeline systems or facilities. The Directive has three requirements:

  • Report cybersecurity incidents to the Cybersecurity and Infrastructure Security Agency within 12 hours of discovery of a cybersecurity incident.
  • Designate a Cybersecurity Coordinator and at least one alternate for 24/7 coverage.
  • Review and use the TSA’s pipeline security recommendations (Section 7 of the 2018 Pipeline Security Guidelines (with Change 1 (April 2021)) to assess cyber risk and develop action plans to address any gaps.

Since all pipeline operators are not included in this Directive, and in light of recent events, all pipeline operators should review their own cybersecurity plans and assess the plans against the guidelines in 2018 Pipeline Security Guidelines (with Change 1 (April 2021) and take action as necessary to address vulnerability gaps. TSA highlighted that the plans, assessments and action plans be considered security sensitive information and managed per the requirements of 49 CFR 1520 – Protection of Sensitive Security Information.

For a copy of the directive, contact Jessica Foley.