TSA Pipeline Cybersecurity Directives SD02-III.B.1: SD02 III.B.1 List and describe interdependencies, external connections and zone boundaries

The segmentation policies and controls must include a list and description of IT and OT system interdependencies, all external connections to the OT system, and zone boundaries, describing how IT and OT systems are defined and organized into logical zones by criticality, consequence and operational necessity.

Maintained by Gerard BlokdykVerified against the published standard 31 May 2026Control text last updated 21 May 2026

Other controls in SD Pipeline-2021-02G Section III.A to III.E: Cybersecurity measures – TSA Pipeline Cybersecurity Directives

SD02-III.A SD02 III.A Identify Critical Cyber Systems
SD02-III.B.2 SD02 III.B.2 Secure and defend zone boundaries
SD02-III.C.1 SD02 III.C.1 Identification and authentication, memorized secret reset schedule
SD02-III.C.2 SD02 III.C.2 Multi-factor authentication or equivalent controls
SD02-III.C.3 SD02 III.C.3 Least privilege and separation of duties
SD02-III.C.4 SD02 III.C.4 Shared accounts limited to operational necessity
SD02-III.C.5 SD02 III.C.5 Domain trust relationship review
SD02-III.D.1 SD02 III.D.1 Preventive and blocking capabilities

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All TSA Pipeline Cybersecurity Directives controls