Cyber Risks · Dragos Blog

Emergency TSA Cybersecurity Directive for Airports & Aircraft Operators: How to Prepare

Summary: The U.S. Transportation Security Administration issued four new cybersecurity requirements for airports and aircraft operators on an emergency basis, following the Biden administration's National Cybersecurity Strategy announced March 2, 2023. The announcement references SD-1580/82-22-01, issued to passenger and freight railroad carriers in October 2022, but does not include a documented security directive specific to airports and aircraft operators.

Bottom line: The requirements cover incident response plans, implementation plans, and assessment programs, and Dragos notes that operators cannot design controls without first identifying the critical OT systems - such as baggage handling, passenger processing, or airport operations systems - that normal operations depend on.

Read the original at Dragos Blog ↗

Topics
OT / ICS & Critical Infrastructure
Related
Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026