TSA Pipeline Cybersecurity Directives SD02-III.A: SD02 III.A Identify Critical Cyber Systems

The owner/operator must identify its Critical Cyber Systems as defined in Section VII (any IT or OT system or data whose compromise could cause operational disruption, including business services). TSA may disagree and require the methodology and rationale, and after consultation may direct the owner/operator to add Critical Cyber Systems TSA has identified to its CIP.