The Transportation Security Administration intends to release the first of at least two security directives that would require pipeline operators to notify it when they are targets or victims of cyberattacks, according to senior officials at the Department of Homeland Security.
The action, expected this week, also will require each company to designate a point person for cybersecurity.
The order “should be understood as step one” in a detailed program by the Biden administration to boost the security of more than 2.5 million miles of U.S. pipelines, said one of the DHS officials.
“Step two will be a more muscular mandate,” in coming weeks, that will require pipeline owners to take concrete steps to secure their assets against attacks, the official said.
The action by TSA, which is part of DHS, provides the first solid evidence that the Biden administration intends to insert itself into pipeline security more directly than the Trump, Obama and Bush administrations, which deferred to the pipeline industry’s desire to avoid regulations for physical- and cybersecurity.
Biden, Trump, Bush
Transportation Security Administration, Department of Homeland Security, DHS, TSA, Obama, Colonial Pipeline Co