Stay Informed
of New Reports
Twitter
Where To Report Waste
Fraud, Abuse, Or Retaliation
Where To Report Waste Fraud, Abuse, Or Retaliation

Better TSA Tracking and Follow-up for the 2021 Security Directives Implementation Should Strengthen Pipeline Cybersecurity (REDACTED)

Submitting OIG: 
Department of Homeland Security OIG
Report Description: 
The Transportation Security Administration’s (TSA) fiscal year 2021 pipeline security directives, if implemented, should strengthen pipeline operators’ posture against cyber threats. TSA considered and partially addressed stakeholder feedback when drafting these two directives. However, TSA did not ensure all pipeline operators timely adhered to security requirements contained in the directives.
Date Issued: 
Wednesday, September 27, 2023
Agency Reviewed / Investigated: 
Department of Homeland Security
Submitting OIG-Specific Report Number: 
OIG-23-57
Component, if applicable: 
Transportation Security Administration (TSA)
Location(s): 
Agency-Wide
Type of Report: 
Audit
Questioned Costs: 
$0
Funds for Better Use: 
$0
Number of Recommendations: 
3
Report updated under NDAA 5274: 
No
Additional Details Link: 
https://www.oig.dhs.gov/sites/default/files/assets/2023-09/OIG-23-57-Sep23-Redac…

Related Open Recommendations

Recommendation Number Recommendation Status Significant Recommendation Additional Details
1 Open No
We recommend the TSA Assistant Administrator for Policy, Plans, and Engagement, in consultation with interagency partners, such as the Department of Transportation, complete rulemaking that will permanently codify critical cybersecurity requirements for pipelines.
2 Open No
We recommend the TSA Assistant Administrator for Surface Operations develop standard operating procedures and a formal tracking system to ensure consistent tracking and follow-up of the implementation of security directives and eventual regulations.
3 Open No
We recommend the TSA Assistant Administrator for Surface Operations include in TSA’s standard operating procedures developed in response to recommendation 2, a requirement to conduct follow-up inspections that ensure pipeline operators have completed mitigation activities to address cybersecurity vulnerabilities.
Displaying 3 of 3 Recommendations