The United States Transportation Security Administration (TSA) has announced the renewal of the requirements that seek to reduce the risk cybersecurity threats pose to critical railroad operations and facilities.
TSA announced updates to three security directives (SD) regulating passenger and freight railroad carriers in the continued effort to enhance the cybersecurity of surface transportation systems and associated infrastructure. These revised directives, which were set to expire on October 24, have been renewed for one year, and include updates that seek to strengthen the industry’s defenses against cyberattacks.
TSA-specified passenger and freight railroad carriers are required to take action to prevent disruption and degradation to their infrastructure with a flexible, performance-based approach, consistent with TSA’s requirements for pipeline operators.
