U.S. announces new cybersecurity requirements for critical pipeline owners

Reuters

Published Jul 20, 2021 08:14AM ET

Updated Jul 20, 2021 08:36AM ET

WASHINGTON (Reuters) -The Department of Homeland Security on Tuesday required owners and operators of critical pipelines that transport hazardous liquids and natural gas to implement "urgently needed protections against cyber intrusions."

It was the second security directive issued by the department's Transportation Security Administration since May, after a hack of the Colonial Pipeline disrupted fuel supplies in the southeastern United States for days.

The department said the action was in response to "the ongoing cybersecurity threat to pipeline systems."

"The lives and livelihoods of the American people depend on our collective ability to protect our nation’s critical infrastructure from evolving threats," Secretary of Homeland Security Alejandro N. Mayorkas said in the statement.

The security directive requires TSA-designated critical pipelines to take certain mitigation measures to protect against ransomware attacks and other known threats to information technology and operational technology systems, implement a cybersecurity contingency and recovery plan, and conduct a cybersecurity architecture design review, DHS said.