© Shutterstock
A proposed final rule would mandate cyber risk management and reporting requirements for certain surface transportation owners and operators, the Transportation Security Administration (TSA) said.
In a Notice of Proposed Rulemaking published Wednesday, the TSA said the proposed rule would leverage the cybersecurity framework developed by the National Institute of Standards and Technology and the Cybersecurity and Infrastructure Security Agency (CISA). The rule would require certain pipeline, freight railroad, passenger railroad and rail transit owner/operators with higher cybersecurity risk profiles establish and maintain a comprehensive cyber risk management program.
“TSA has collaborated closely with its industry partners to increase the cybersecurity resilience of the nation’s critical transportation infrastructure,” TSA Administrator David Pekoske said. “The requirements in the proposed rule seek to build on this collaborative effort and further strengthen the cybersecurity posture of…
