IndustrialCyber.co: Strengthening Pipeline Security

johns aritcle 1 e1742504745655Pipeline security is under increasing scrutiny as cyber threats evolve. Following the Colonial Pipeline attack, the TSA issued cybersecurity directives in 2021, which have since been updated. Now, with the 2024 Notice of Proposed Rulemaking (NPRM), the focus has shifted further toward Operational Technology (OT) systems—the backbone of pipeline infrastructure.

Armexa’s John Cusimano recently was published in Industrial Cyber in “A Guide for OT Professionals on TSA Pipeline Security Directives and the 2024 Notice of Proposed Rules”

This article breaks down the key changes in the 2024 NPRM, including:
✅ Stronger cybersecurity measures for OT systems
✅ Risk-based assessments and continuous monitoring
✅ Expanded regulations covering more pipeline operators
✅ Increased collaboration between IT and OT security teams

Additionally, the U.S. Homeland Security Committee is recently questioning TSA’s cybersecurity posture, urging a balance between strong security and regulatory flexibility. With TSA’s response pending, OT professionals must prepare for evolving compliance requirements.

Learn how these changes impact pipeline operators and the future of cybersecurity in the energy sector. Read the full article here: Strengthening Pipeline Security: A Guide for OT Professionals on TSA Pipeline Security Directives and the 2024 Notice of Proposed Rules – Industrial Cyber

Facebook
X
LinkedIn

About author John Cusimano

John Cusimano is Chief Strategy Officer at Armexa and is an accomplished business and thought leader with more than 30 years of experience in process control, functional safety, operational technology (OT) and industrial control systems (ICS) cybersecurity. John has performed and led hundreds of OT cybersecurity vulnerability and risk assessments and helped dozens of companies establish OT cybersecurity programs. He is a voting member of the ISA 99 cybersecurity standards committee. As part of that committee, he chaired the subcommittee that authored the ISA/IEC 62443-3-2:2020 standard “IACS Security Risk Assessment & Design.” He is the developer and primary instructor of multiple training courses on OT cybersecurity. John is a Certified Functional Safety Expert (CFSE), a Certified Information Systems Security Professional (CISSP), Global Industrial Cyber Security Professional (GICSP), and ISA 62443 Expert.

Related Content

Skip to content