Cyber Risks · Dragos Blog

TSA Security Directive Pipeline-2021-02D Reinforces Requirement for Tabletop Exercises and Rigor in Plan Auditing

Summary: The TSA released Security Directive Pipeline-2021-02D, effective July 27, 2023, superseding and replacing SD-02C as a minor revision that maintains and reinforces the community-driven controls from SD-02C. SD-02D adds audit language, new timelines, and processes for specific requirements of the TSA compliance program, affecting asset owners and operators of hazardous liquid and natural gas pipelines and liquefied natural gas facilities.

Bottom line: The update is incremental rather than a major overhaul, so the compliance work and funding pipeline operators committed to under SD-02C carry forward - but the new audit language and timelines mean those same operators now face scrutiny of plans they built under the prior directive.

Read the original at Dragos Blog ↗

Topics
OT / ICS & Critical Infrastructure
Related
Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026