Recent Transportation Security Administration (TSA) Security Directive Establishes New Cybersecurity Measures for Railroad Carriers
Summary: On October 18, 2022, the Transportation Security Administration issued Security Directive 1580/82-2022-01 for designated passenger and freight railroad carriers, extending Security Directive 1580-21-01, with an effective date of October 24, 2022. The directive requires technical and procedural controls to segregate and secure IT and OT networks, a Cybersecurity Implementation Plan with an implementation schedule, and a Cybersecurity Assessment Program including a Cybersecurity Architecture Design Review to validate that network architecture isolates critical OT systems.
Key Takeaway: The directive makes railroad carriers document and schedule their own path to network segmentation, continuous monitoring, MFA on remote OT access, and patch prioritization, and TSA can add further freight and passenger railroads to the covered set based on its own risk determination.
Read the original at Dragos Blog ↗
- Topics
- OT / ICS & Critical Infrastructure
- Related
- Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026How to Assess OT Incident Response Preparedness Cyber Risks · Nov 10, 2026Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem Cyber Risks · Nov 10, 2026