TSA Pipeline Compliance
Dragos provides OT-native technology and services to help pipeline operators exceed TSA Security Directive Pipeline-2021-02F requirements.
TSA Security Directive Pipeline-2021-02F, effective May 3, 2025, requires owners/operators of TSA-designated critical pipeline systems notified before July 26, 2022, to implement cybersecurity measures protecting critical cyber systems from malicious intrusions, ensuring TSA pipeline security directive adherence.
The directive requires: identifying Critical Cyber Systems, implementing network segmentation, establishing access controls with MFA, continuous monitoring and detection, risk-based vulnerability management, cybersecurity incident response planning, and regular cybersecurity assessments, as per TSA pipeline security guidelines.
Dragos Platform provides comprehensive asset visibility and inventory across OT/IT/IoT systems through passive discovery and active validation. We help identify crown-jewel systems, map communication pathways, and provide continuous asset inventory updates required by the directive.
Pipeline operators face sophisticated threats from nation-state actors like VOLTZITE (targeting 23 pipeline operators), ICS-specific malware like CHERNOVITE’s PIPEDREAM, and increasing ransomware attacks. The sector experienced 44 documented ransomware incidents in 2024.
Our platform provides OT-native monitoring with deep packet inspection, intelligence-driven threat detection mapped to MITRE ATT&CK for ICS, and behavioral analysis specifically designed for pipeline operations without disrupting critical processes, ensuring compliance with the TSA pipeline security directive.
Yes, through NP-View network validation tools that map configurations,identify segmentation gaps, verify firewall rules, and provide assurance around network architecture. We help validate that segmentation policies effectively protect Critical Cyber Systems.
Our platform correlates vulnerabilities to asset inventories, recalculates risk scoring based on exploitability and operational criticality, provides “Now, Next, Never” prioritization guidance, and streamlines patching workflows for pipeline environments.
The renewal to Pipeline-2021-02F maintains all existing requirements, emphasizing that these are ongoing obligations, not one-time implementations. Organizations must continuously maintain and improve their Cybersecurity Implementation Plans, ensuring consistent TSA pipeline security directive adherence.
