New Whitepaper Details Latest TSA Security Directive 2021-02C, With Guidance On How to Adapt
Summary: The U.S. Transportation Security Administration issued Security Directive Pipeline-2021-02C, a revision to its pipeline cybersecurity requirements that followed the May 2021 Colonial Pipeline ransomware attack. Dragos says the directive resulted from collaboration between business and government and aligns with the NIST Cybersecurity Framework, API 1164, and the ISA/IEC 62443 series.
Bottom line: Pipeline owners and operators are working through a directive that follows earlier TSA requirements Dragos describes as prescriptive with seemingly impossible implementation timeframes - and the shift to standards-aligned guidance changes what evidence of compliance looks like.
Read the original at Dragos Blog ↗
- Topics
- OT / ICS & Critical Infrastructure
- Related
- Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026How to Assess OT Incident Response Preparedness Cyber Risks · Nov 10, 2026Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem Cyber Risks · Nov 10, 2026