Posts Tagged ‘U.S. Cybersecurity and Infrastructure Agency’

TSA Issues Cybersecurity Directives to Railroads

December 4, 2021

Two directives have been issued to surface transportation providers by the Transportation Security Administration that seek to combat cybersecurity threats.

In a news release, the U.S. Department of Homeland Security, which oversees TSA, said the directives provide guidance for voluntary measures to strengthen cybersecurity in response to ongoing threats to transportation providers and the infrastructure that they use.

The directives require higher-risk freight and passenger railroads to designate a cybersecurity coordinator, report cybersecurity incidents to the Cybersecurity and Infrastructure Security Agency within 24 hours, develop and implement a cybersecurity incident response plan to reduce the risk of an operational disruption; and complete a cybersecurity vulnerability assessment to identify potential gaps or vulnerabilities in their systems.

TSA recommended that lower-risk surface transportation providers adopt the same practices.

The directives were developed in consultation with the Association of American Railroads

AAR said it plans to work with TSA and its Canadian counterparts to create similar measures for transportation providers based in Canada.

Agency Defines Critical Infrastructure Functions

March 24, 2020

The U.S. Cybersecurity and Infrastructure Agency last week issued guidance to states and the private sector that identifies “essential critical infrastructure” workers during the COVID-19 pandemic.

The agency said in a news release that the list is advisory and is intended to help state and local officials as they implement rules designed to limit the spread of the virus.

On the list are workers and job positions the agency said are crucial to conducting operations and services essential to infrastructure viability.

In the transportation field, the list included employees supporting or enabling transportation functions, including truck drivers, bus drivers, dispatchers, maintenance and repair technicians, warehouse workers, truck stop and rest area workers, and workers that maintain and inspect infrastructure (including those that require cross-jurisdiction travel. The complete list is:

  • Employees of firms providing services that enable logistics operations, including cooling, storing, packaging, and distributing products for wholesale or retail sale or use.
  • Mass transit workers
  • Workers responsible for operating dispatching passenger, commuter and freight trains and maintaining rail infrastructure and equipment
  • Maritime transportation workers – port workers, mariners, equipment operators
  • Truck drivers who haul hazardous and waste materials to support critical infrastructure, capabilities, functions, and services
  • Automotive repair and maintenance facilities
  • Manufacturers and distributors (to include service centers and related operations) of packaging materials, pallets, crates, containers, and other supplies needed to support manufacturing, packaging staging and distribution operations
  • Postal and shipping workers, to include private companies
  • Employees who repair and maintain vehicles, aircraft, rail equipment, marine vessels, and the equipment and infrastructure that enables operations that encompass movement of cargo and passengers
  • Air transportation employees, including air traffic controllers and maintenance personnel, ramp workers, aviation and aerospace safety, security, and operations personnel and accident investigations
  • Workers who support the maintenance and operation of cargo by air transportation, including flight crews, maintenance, airport operations, and other on- and off- airport facilities workers.