TSA Pipeline Cybersecurity Directives SD01-II.D.2: SD01 II.D.2 and 3 Use TSA Form 1604 and submit the assessment and remediation plan

The assessment and gap identification must use the form TSA provides (TSA Form 1604, Pipeline Cybersecurity Self-Assessment, aligned with the NIST Cybersecurity Framework functions and categories; Sensitive Security Information once any question is answered), and the completed form and remediation plan must be emailed to TSA (SurfOps-SD@tsa.dhs.gov) with appropriate SSI protection. Owner/operators that have already submitted an assessment need not submit a revised one.