Pipeline Cybersecurity: Interpreting the New TSA Pipeline Security Directive

On July 21, 2022, the U.S. Transportation Security Administration (TSA) issued Security Directive Pipeline-2021-02C (SD02C) for owners and operators of critical pipelines and liquified natural gas facilities. SD02C represents a major shift from previous directives in that it allows pipeline owners / operators the flexibility to determine the correct risk-based solutions to meet the cybersecurity requirements in the standard.

Another shift is the timing for compliance with different parts of the directive. The first major item required by the TSA in SD02C is a Cybersecurity Implementation Plan, due on October 25, 2022.

Topics covered will include:

• History of TSA pipeline security directives
• Overview of SD02C’s key elements and due dates
• Requirements for the Cybersecurity Implementation Plan