TSA Pipeline Cybersecurity Directives

SD Pipeline-2021-02G Section III.A to III.E: Cybersecurity measures – TSA Pipeline Cybersecurity Directives

TSA Pipeline Cybersecurity Directives SD02-III.C.3: SD02 III.C.3 Least privilege and separation of duties

Policies and procedures to manage access rights on the principles of least privilege and separation of duties, describing the compensating controls where these principles are not technically feasible.

Maintained by Gerard BlokdykVerified against the published standard 31 May 2026Control text last updated 21 May 2026

Other controls in SD Pipeline-2021-02G Section III.A to III.E: Cybersecurity measures – TSA Pipeline Cybersecurity Directives

SD02-III.A SD02 III.A Identify Critical Cyber Systems
SD02-III.B.1 SD02 III.B.1 List and describe interdependencies, external connections and zone boundaries
SD02-III.B.2 SD02 III.B.2 Secure and defend zone boundaries
SD02-III.C.1 SD02 III.C.1 Identification and authentication, memorized secret reset schedule
SD02-III.C.2 SD02 III.C.2 Multi-factor authentication or equivalent controls
SD02-III.C.4 SD02 III.C.4 Shared accounts limited to operational necessity
SD02-III.C.5 SD02 III.C.5 Domain trust relationship review
SD02-III.D.1 SD02 III.D.1 Preventive and blocking capabilities

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All TSA Pipeline Cybersecurity Directives controls