TSA Pipeline Cybersecurity Directives

SD Pipeline-2021-02G Section III.G: Cybersecurity Assessment Plan – TSA Pipeline Cybersecurity Directives

TSA Pipeline Cybersecurity Directives SD02-III.G.2.e: SD02 III.G.2.e Annual report content

The CAP must ensure an annual report of results is submitted to TSA, stating for the previous 12 months which assessment methods were used to determine whether the CIP's policies, procedures and capabilities are effective, and the results of the individual assessments conducted in that period.

Maintained by Gerard BlokdykVerified against the published standard 31 May 2026Control text last updated 21 May 2026

Other controls in SD Pipeline-2021-02G Section III.G: Cybersecurity Assessment Plan – TSA Pipeline Cybersecurity Directives

SD02-III.G.1 SD02 III.G.1 Develop a Cybersecurity Assessment Plan
SD02-III.G.2.a SD02 III.G.2.a Assess the effectiveness of the approved CIP
SD02-III.G.2.b SD02 III.G.2.b Architecture design review at least every two years
SD02-III.G.2.c SD02 III.G.2.c Other assessment capabilities: penetration testing, red and purple teams
SD02-III.G.2.d SD02 III.G.2.d Schedule covering one-third each year and all over three years
SD02-III.G.3 SD02 III.G.3 Submit the CAP annually for approval
SD02-III.G.4 SD02 III.G.4 Submit the CAP annual report

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All TSA Pipeline Cybersecurity Directives controls