TSA Pipeline Cybersecurity Directives SD02-IV.C: SD02 IV.C Documentation to establish compliance

The owner/operator must make the records necessary to establish compliance available to TSA for inspection or copying on request. TSA may ask for hardware and software asset inventories including SCADA; firewall rules; network diagrams, switch and router configurations, architecture diagrams, publicly routable IP addresses and VLANs; the policies, procedures and other documents behind the CIP, CIRP, CAP and assessment or audit results; and snapshot data of activity on and between IT and OT systems, such as log files, packet captures of up to 24 hours as TSA directs, east-west OT traffic within scope and north-south traffic between IT and OT and their perimeter boundaries; and any other records needed.