DHS Announces New Cybersecurity Requirements for Critical Pipeline Owners and Operators

The Transportation Security Administration has issued a second Security Directive requiring operators of designated critical pipelines for hazardous liquids and natural gas to implement “a number of urgently needed protections against cyber intrusions.” The operators are required to implement specific mitigation measures to protect against ransomware attacks and other known threats to IT and OT systems, develop and implement a cybersecurity contingency and recovery plan, and conduct a cybersecurity architecture design review.