A very interesting read. As the Department of Homeland Security (DHS) Transportation Security Administration (TSA) ratified cybersecurity€¦

← Back to Blog

A very interesting read. As the Department of Homeland Security (DHS) Transportation Security Administration (TSA) ratified cybersecurity requirements on U.S Oil and Gas companies in early June 2023. The ratification allowed the TSA to extend the expiration date of ‘Security Directive Pipeline€€œ2021€€œ02C beyond its current expiration date. Should the TSA Administrator determine such an extension is necessary to address the evolving threat that may continue beyond the original expiration date.

Security Directive Pipeline€€œ2021€€œ02C requires oil and gas infrastructure owner operations to
1. Establish and implement a TSA-approved Cybersecurity Implementation Plan.
2. Develop and maintain an up-to-date Cybersecurity Incident Response Plan.
3. Establish a Cybersecurity Assessment Program and submit an annual plan that describes how the Owner/Operator will proactively and regularly assess the effectiveness of cybersecurity measures.

In addition other regulations will effect the owners/ operators of oil and gas infrastructure, including the SEC cybersecurity risk management proposal. Multinational owners/ operators will also have to consider the effects of EU NIS 2.0, that includes oil and gas extraction, maritime transportation and on shore storage. For the Oil and gas firms that manage commodity trading, one wonders the effect of EU DORA?

Ted Dziekanowski Jamie Foster

#cybersecurity #cyberriskmanagement #cyberregulation

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7077351194850930690