Owner/operators must report to CISA cybersecurity incidents involving systems they are responsible for operating or maintaining, including unauthorized access to an IT or OT system; discovery of malicious software on an IT or OT system; activity causing denial of service to an IT or OT system; a physical attack on network infrastructure such as deliberate damage to communication lines; and any other cybersecurity incident that results, or could result, in operational disruption to IT or OT systems, other aspects of the pipeline systems or facilities, critical infrastructure or core government functions, or national security, economic security or public health and safety. A cybersecurity incident includes an event still under investigation as a possible incident before its root cause or nature is determined.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.