TSA Pipeline Cybersecurity Directives
SD Pipeline-2021-02G Section III.A to III.E: Cybersecurity measures – TSA Pipeline Cybersecurity Directives

TSA Pipeline Cybersecurity Directives SD02-III.E.2: SD02 III.E.2 Risk methodology, timelines and KEV prioritization

What does SD02-III.E.2 require?

The strategy must include the risk methodology for categorizing and determining the criticality of patches and updates with an implementation timeline by category and criticality, and must prioritize all security patches and updates on CISA's Known Exploited Vulnerabilities Catalog.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in SD Pipeline-2021-02G Section III.A to III.E: Cybersecurity measures – TSA Pipeline Cybersecurity Directives

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.