TSA Pipeline Cybersecurity Directives

SD Pipeline-2021-02G Section III.A to III.E: Cybersecurity measures – TSA Pipeline Cybersecurity Directives

TSA Pipeline Cybersecurity Directives SD02-III.B.2: SD02 III.B.2 Secure and defend zone boundaries

The owner/operator must identify and describe measures securing and defending zone boundaries, including controls that prevent unauthorized communications between zones and that prohibit OT system services from traversing the IT system unless the OT content is encrypted in transit.

Maintained by Gerard BlokdykVerified against the published standard 31 May 2026Control text last updated 21 May 2026

Other controls in SD Pipeline-2021-02G Section III.A to III.E: Cybersecurity measures – TSA Pipeline Cybersecurity Directives

SD02-III.A SD02 III.A Identify Critical Cyber Systems
SD02-III.B.1 SD02 III.B.1 List and describe interdependencies, external connections and zone boundaries
SD02-III.C.1 SD02 III.C.1 Identification and authentication, memorized secret reset schedule
SD02-III.C.2 SD02 III.C.2 Multi-factor authentication or equivalent controls
SD02-III.C.3 SD02 III.C.3 Least privilege and separation of duties
SD02-III.C.4 SD02 III.C.4 Shared accounts limited to operational necessity
SD02-III.C.5 SD02 III.C.5 Domain trust relationship review
SD02-III.D.1 SD02 III.D.1 Preventive and blocking capabilities

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All TSA Pipeline Cybersecurity Directives controls