TSA Pipeline Cybersecurity Directives: every control, and what you already have

26 controls 129 frameworks share controls with it United States verified against its source document

Every control below is one this framework asks for. The right hand column counts how many other frameworks in our corpus carry the same control, which is the difference between doing this work once and doing it again for the next standard.

There is no implementation kit for this framework yet. The control list and the overlap above are free and complete.

What you already have

Frameworks whose controls overlap this one, most first. If you run any of them, the count is roughly what you have already evidenced.

If you run	Shared controls
ISO 27002:2022	17	measure it →
API 1164	3	measure it →
AICPA Privacy Management Framework (PMF)	2	measure it →
AML/CTF Act 2006 (Australia)	2	measure it →
Annex 11 to EU GMP	2	measure it →
APRA CPS 230 Operational Risk Management	2	measure it →
ASIS SPC.1-2009	2	measure it →
Authorised Economic Operator (AEO) Programmes	2	measure it →
AWWA Cybersecurity Guidance for the Water Sector (American Water Works Association)	2	measure it →
Bahrain PDPL	2	measure it →
Barbados Data Protection Act 2019	2	measure it →
BSI IT-Grundschutz	2	measure it →

Every control

Code	Control	Also in
`SD-02-10`	Cybersecurity Assessment Program	0
`SD-02-11`	Annual Architecture Review	0
`SD-02-12`	Performance-Based Compliance	0
`SD-02-13`	NIST Framework Alignment	0
`TSA-SD-01`	TSA Cybersecurity Coordinator designation	1
`TSA-SD-02`	Cybersecurity incident reporting to CISA	1
`TSA-SD-03`	Cybersecurity Implementation Plan approval	1
`TSA-SD-04`	Critical Cyber System identification	1
`TSA-SD-05`	Network segmentation between IT and OT	1
`TSA-SD-06`	Access control to Critical Cyber Systems	1
`TSA-SD-07`	Continuous monitoring and detection	1
`TSA-SD-08`	Patch and vulnerability management	1
`TSA-SD-09`	Annual Cybersecurity Assessment Plan	1
`TSA-SD-10`	Cybersecurity Incident Response Plan	1
`TSA-SD-11`	Cybersecurity training and awareness	1
`TSA-SD-12`	Configuration and change management	1
`TSA-SD-13`	Backups and recovery for Critical Cyber Systems	1
`TSA-SD-14`	Supply chain and third party risk	1
`TSA-SD-15`	Annual Cybersecurity Assessment report submission	1
`TSA-SD-16`	Physical security of cyber assets	1
`TSA-SD-17`	Cybersecurity Coordinator update notifications	1
`TSA-SD-18`	Performance based outcome measurement	1
`TSAPIPE-1`	Cybersecurity Implementation Plan and Coordinator	76
`TSAPIPE-2`	OT/IT Network Segmentation and Access Control	109
`TSAPIPE-3`	Cybersecurity Incident Reporting to CISA	0
`TSAPIPE-4`	Cybersecurity Assessment Programme and Annual Testing	0

Tell me when TSA Pipeline Cybersecurity Directives files something new

One email when a public company newly discloses something this framework governs, naming the company and what our corpus says it puts in scope. Nothing else, and one click to stop.

What this page is

A control-level reference for TSA Pipeline Cybersecurity Directives, drawn from our framework corpus. Control codes and titles are references to the standard, not reproductions of it. The overlap counts and the auditor artefacts are our own work and are the part you will not find elsewhere.

Measure this against what you already run · All frameworks · Today's edition