Back to Frameworks

TSA Pipeline Cybersecurity Directives

Self-Assess
United States (federal, TSA)
vSD Pipeline-2021-02G (effective 3 May 2026 to 2 May 2027) and SD Pipeline-2021-01G (effective 16 January 2026 to 15 January 2027)
5 domains
49 controls

The TSA Security Directives binding the most critical US hazardous liquid and natural gas pipeline and LNG owner/operators since the Colonial Pipeline attack: the Pipeline-2021-01 series (currently 01G: 24/7 Cybersecurity Coordinators, reporting incidents to CISA within 72 hours, a vulnerability assessment against Section 7 of the Pipeline Security Guidelines) and the performance-based Pipeline-2021-02 series (currently 02G: a TSA-approved Cybersecurity Implementation Plan covering Critical Cyber System identification, IT/OT segmentation, access control, continuous monitoring and patching, a tested incident response plan and an annual assessment plan with a two-yearly architecture review and one-third annual coverage). Read in full from the directives TSA publishes.

Verified

TSA Pipeline Cybersecurity Directives is a compliance framework from United States (federal, TSA) with 5 domains and 49 controls that map to 119 other frameworks. The largest domains are SD Pipeline-2021-02G Section III.A to III.E: Cybersecurity measures – TSA Pipeline Cybersecurity Directives (15 controls), SD Pipeline-2021-02G Sections II and IV to VI: Applicability, implementation plan, records and amendments – TSA Pipeline Cybersecurity Directives (11 controls), SD Pipeline-2021-01G: Coordinator, incident reporting and vulnerability assessment – TSA Pipeline Cybersecurity Directives (9 controls). Every control below carries what it requires and what an assessor expects to see.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Framework summaries on this platform are interpretations grounded in the published source, for educational and compliance planning purposes. They do not reproduce or replace the official standards. Refer to the authoritative source for the definitive text. Framework names and trademarks belong to their respective organisations.

Framework Domains (5)

SD Pipeline-2021-01G: Coordinator, incident reporting and vulnerability assessment – TSA Pipeline Cybersecurity Directives

9 controls
Controls in the SD Pipeline-2021-01G: Coordinator, incident reporting and vulnerability assessment – TSA Pipeline Cybersecurity Directives domain of TSA Pipeline Cybersecurity Directives: 9 controls
CodeTitle
tsa-pipeline-cybersecurity-directives::SD01-II.B.1SD01 II.B.1 Designate primary and alternate Cybersecurity Coordinators
tsa-pipeline-cybersecurity-directives::SD01-II.B.1.dSD01 II.B.1.d and e Report coordinator details to TSA and keep them current
tsa-pipeline-cybersecurity-directives::SD01-II.B.2SD01 II.B.2 Coordinator duties and 24/7 availability
tsa-pipeline-cybersecurity-directives::SD01-II.C.2SD01 II.C.2 Report cybersecurity incidents to CISA
tsa-pipeline-cybersecurity-directives::SD01-II.C.3SD01 II.C.3 and 4 Report within 72 hours through CISA Central
tsa-pipeline-cybersecurity-directives::SD01-II.C.5SD01 II.C.5 Content of the CISA report and supplemental information
tsa-pipeline-cybersecurity-directives::SD01-II.D.1SD01 II.D.1 Cybersecurity Vulnerability Assessment against Section 7 of the Pipeline Security Guidelines
tsa-pipeline-cybersecurity-directives::SD01-II.D.2SD01 II.D.2 and 3 Use TSA Form 1604 and submit the assessment and remediation plan
tsa-pipeline-cybersecurity-directives::SD01-IIISD01 III and V Directive procedures and alternative measures

SD Pipeline-2021-02G Section III.A to III.E: Cybersecurity measures – TSA Pipeline Cybersecurity Directives

15 controls
Controls in the SD Pipeline-2021-02G Section III.A to III.E: Cybersecurity measures – TSA Pipeline Cybersecurity Directives domain of TSA Pipeline Cybersecurity Directives: 15 controls
CodeTitle
tsa-pipeline-cybersecurity-directives::SD02-III.ASD02 III.A Identify Critical Cyber Systems
tsa-pipeline-cybersecurity-directives::SD02-III.B.1SD02 III.B.1 List and describe interdependencies, external connections and zone boundaries
tsa-pipeline-cybersecurity-directives::SD02-III.B.2SD02 III.B.2 Secure and defend zone boundaries
tsa-pipeline-cybersecurity-directives::SD02-III.C.1SD02 III.C.1 Identification and authentication, memorized secret reset schedule
tsa-pipeline-cybersecurity-directives::SD02-III.C.2SD02 III.C.2 Multi-factor authentication or equivalent controls
tsa-pipeline-cybersecurity-directives::SD02-III.C.3SD02 III.C.3 Least privilege and separation of duties
tsa-pipeline-cybersecurity-directives::SD02-III.C.4SD02 III.C.4 Shared accounts limited to operational necessity
tsa-pipeline-cybersecurity-directives::SD02-III.C.5SD02 III.C.5 Domain trust relationship review
tsa-pipeline-cybersecurity-directives::SD02-III.D.1SD02 III.D.1 Preventive and blocking capabilities
tsa-pipeline-cybersecurity-directives::SD02-III.D.2SD02 III.D.2 Audit and response procedures
tsa-pipeline-cybersecurity-directives::SD02-III.D.3SD02 III.D.3 Logging policies
tsa-pipeline-cybersecurity-directives::SD02-III.D.4SD02 III.D.4 Ability to isolate industrial control systems
tsa-pipeline-cybersecurity-directives::SD02-III.E.1SD02 III.E.1 Patch management strategy keeping critical patches current
tsa-pipeline-cybersecurity-directives::SD02-III.E.2SD02 III.E.2 Risk methodology, timelines and KEV prioritization
tsa-pipeline-cybersecurity-directives::SD02-III.E.3SD02 III.E.3 Mitigations where OT cannot be patched

SD Pipeline-2021-02G Section III.F: Cybersecurity Incident Response Plan – TSA Pipeline Cybersecurity Directives

6 controls
Controls in the SD Pipeline-2021-02G Section III.F: Cybersecurity Incident Response Plan – TSA Pipeline Cybersecurity Directives domain of TSA Pipeline Cybersecurity Directives: 6 controls
CodeTitle
tsa-pipeline-cybersecurity-directives::SD02-III.F.1.aSD02 III.F.1.a Prompt containment
tsa-pipeline-cybersecurity-directives::SD02-III.F.1.bSD02 III.F.1.b Segregation of infected networks and devices
tsa-pipeline-cybersecurity-directives::SD02-III.F.1.cSD02 III.F.1.c Security and integrity of backups
tsa-pipeline-cybersecurity-directives::SD02-III.F.1.dSD02 III.F.1.d Capability and governance to isolate IT and OT
tsa-pipeline-cybersecurity-directives::SD02-III.F.1.eSD02 III.F.1.e Annual exercises testing at least two objectives
tsa-pipeline-cybersecurity-directives::SD02-III.F.2SD02 III.F.2 Responsibilities by position and resources

SD Pipeline-2021-02G Section III.G: Cybersecurity Assessment Plan – TSA Pipeline Cybersecurity Directives

8 controls
Controls in the SD Pipeline-2021-02G Section III.G: Cybersecurity Assessment Plan – TSA Pipeline Cybersecurity Directives domain of TSA Pipeline Cybersecurity Directives: 8 controls
CodeTitle
tsa-pipeline-cybersecurity-directives::SD02-III.G.1SD02 III.G.1 Develop a Cybersecurity Assessment Plan
tsa-pipeline-cybersecurity-directives::SD02-III.G.2.aSD02 III.G.2.a Assess the effectiveness of the approved CIP
tsa-pipeline-cybersecurity-directives::SD02-III.G.2.bSD02 III.G.2.b Architecture design review at least every two years
tsa-pipeline-cybersecurity-directives::SD02-III.G.2.cSD02 III.G.2.c Other assessment capabilities: penetration testing, red and purple teams
tsa-pipeline-cybersecurity-directives::SD02-III.G.2.dSD02 III.G.2.d Schedule covering one-third each year and all over three years
tsa-pipeline-cybersecurity-directives::SD02-III.G.2.eSD02 III.G.2.e Annual report content
tsa-pipeline-cybersecurity-directives::SD02-III.G.3SD02 III.G.3 Submit the CAP annually for approval
tsa-pipeline-cybersecurity-directives::SD02-III.G.4SD02 III.G.4 Submit the CAP annual report

SD Pipeline-2021-02G Sections II and IV to VI: Applicability, implementation plan, records and amendments – TSA Pipeline Cybersecurity Directives

11 controls
Controls in the SD Pipeline-2021-02G Sections II and IV to VI: Applicability, implementation plan, records and amendments – TSA Pipeline Cybersecurity Directives domain of TSA Pipeline Cybersecurity Directives: 11 controls
CodeTitle
tsa-pipeline-cybersecurity-directives::SD02-II.A.3SD02 II.A.3 Managed Security Service Providers: owner/operator keeps sole responsibility
tsa-pipeline-cybersecurity-directives::SD02-II.A.4SD02 II.A.4 Authorized Representatives: joint liability
tsa-pipeline-cybersecurity-directives::SD02-II.A.5SD02 II.A.5 Scope: Critical Cyber Systems and the no-system notification
tsa-pipeline-cybersecurity-directives::SD02-II.B.1SD02 II.B.1 CIP content: defense-in-depth plan for Sections III.A to III.E
tsa-pipeline-cybersecurity-directives::SD02-II.B.2SD02 II.B.2 Implement and maintain the approved CIP and its schedule
tsa-pipeline-cybersecurity-directives::SD02-IV.ASD02 IV.A Use of previous plans, assessments, tests and evaluations
tsa-pipeline-cybersecurity-directives::SD02-IV.BSD02 IV.B Protection of sensitive security information
tsa-pipeline-cybersecurity-directives::SD02-IV.CSD02 IV.C Documentation to establish compliance
tsa-pipeline-cybersecurity-directives::SD02-V.ASD02 V Directive procedures: receipt, dissemination and submissions
tsa-pipeline-cybersecurity-directives::SD02-VI.ASD02 VI.A Amend the CIP on a change of ownership or control
tsa-pipeline-cybersecurity-directives::SD02-VI.BSD02 VI.B to D Amend the CIP for permanent changes within 50 days

Your Compliance Coverage

If you comply with TSA Pipeline Cybersecurity Directives, you already cover:

ISO 27002:2022

23%

17 controls mapped

Compare →

API 1164

4%

3 controls mapped

Compare →

ICAO Annex 17 - Aviation Security (AVSEC)

3%

2 controls mapped

Compare →

+ 116 more: Vietnam PDPD (3%), Vietnam Law on Cybersecurity (No. 116/2025/QH15) (3%)

See all 119 mapped frameworks ↓

Maps to 119 other frameworks

75 total controls
ISO 27002:2022
17 source controls mapped|19 target controls covered
23%
API 1164
3 source controls mapped|9 target controls covered
4%
ICAO Annex 17 - Aviation Security (AVSEC)
2 source controls mapped|2 target controls covered
3%
Vietnam PDPD
2 source controls mapped|2 target controls covered
3%
Vietnam Law on Cybersecurity (No. 116/2025/QH15)
2 source controls mapped|2 target controls covered
3%
Vermont Data Privacy and Online Surveillance Act
2 source controls mapped|2 target controls covered
3%
US Gramm-Leach-Bliley Act (GLBA) - Higher Education Safeguards Rule
2 source controls mapped|3 target controls covered
3%
UK Defence Standard 05-138 - Cyber Security for Defence Suppliers
2 source controls mapped|4 target controls covered
3%
Turkey KVKK
2 source controls mapped|2 target controls covered
3%
NIST SP 800-53 Rev 5
2 source controls mapped|23 target controls covered
3%
ISO/IEC 30111:2019
2 source controls mapped|4 target controls covered
3%
BSI IT-Grundschutz
2 source controls mapped|14 target controls covered
3%
ISO/IEC 27043:2015
2 source controls mapped|8 target controls covered
3%
ISO/SAE 21434
2 source controls mapped|8 target controls covered
3%
AICPA Privacy Management Framework (PMF)
2 source controls mapped|3 target controls covered
3%
FFIEC Cybersecurity Assessment Tool (CAT)
2 source controls mapped|6 target controls covered
3%
ISO/IEC 27011:2024
2 source controls mapped|7 target controls covered
3%
CISA Cross-Sector Cybersecurity Performance Goals (CPG) 2.0
2 source controls mapped|6 target controls covered
3%
NIST SP 800-190
2 source controls mapped|8 target controls covered
3%
FTC GLBA Safeguards Rule (16 CFR Part 314)
2 source controls mapped|3 target controls covered
3%
SIG (Shared Assessments)
2 source controls mapped|2 target controls covered
3%
SLSA
2 source controls mapped|3 target controls covered
3%
NIST Cybersecurity Framework 2.0
2 source controls mapped|11 target controls covered
3%
AWWA Cybersecurity Guidance for the Water Sector (American Water Works Association)
2 source controls mapped|7 target controls covered
3%
Switzerland New Federal Act on Data Protection (nFADP/nDSG, 2023)
2 source controls mapped|6 target controls covered
3%
IEC 62443
2 source controls mapped|8 target controls covered
3%
ASIS SPC.1-2009 - Organizational Resilience Standard
2 source controls mapped|3 target controls covered
3%
NIST SP 1800-32
2 source controls mapped|8 target controls covered
3%
ISO 27799:2025
2 source controls mapped|6 target controls covered
3%
Bahrain PDPL
2 source controls mapped|4 target controls covered
3%
FedRAMP High
2 source controls mapped|3 target controls covered
3%
FedRAMP Moderate
2 source controls mapped|3 target controls covered
3%
SANS Incident Handler's Handbook and PICERL Methodology
2 source controls mapped|6 target controls covered
3%
US Consumer Product Safety Act (CPSC) Manufacturer and Importer Duties
2 source controls mapped|3 target controls covered
3%
UAE Virtual Asset Regulatory Authority (VARA) Regulations
2 source controls mapped|3 target controls covered
3%
Annex 11 to EU GMP - Computerised Systems
2 source controls mapped|4 target controls covered
3%
South Korea ISMS-P
2 source controls mapped|9 target controls covered
3%
Authorised Economic Operator (AEO) Programmes - Global Standards
2 source controls mapped|2 target controls covered
3%
APRA CPS 230 Operational Risk Management
2 source controls mapped|2 target controls covered
3%
ISO/IEC 27019:2024
2 source controls mapped|8 target controls covered
3%
NFPA 1600 - Standard on Continuity, Emergency, and Crisis Management
2 source controls mapped|4 target controls covered
3%
Barbados Data Protection Act 2019
2 source controls mapped|1 target controls covered
3%
AML/CTF Act 2006 (Australia)
2 source controls mapped|2 target controls covered
3%
EASA Part-IS - Information Security in Aviation
2 source controls mapped|5 target controls covered
3%
Texas Data Privacy and Security Act (TDPSA)
2 source controls mapped|2 target controls covered
3%
Taiwan PDPA
2 source controls mapped|1 target controls covered
3%
Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (UAE PDPL)
2 source controls mapped|3 target controls covered
3%
ISO/IEC 27031:2011
2 source controls mapped|4 target controls covered
3%
Singapore Government Instruction Manual on ICT&SS Management (IM8)
2 source controls mapped|6 target controls covered
3%
Saudi Arabia PDPL
2 source controls mapped|4 target controls covered
3%
UNICEF Policy Guidance on AI for Children (2021)
1 source controls mapped|1 target controls covered
1%
UN Guiding Principles on Business and Human Rights (UNGPs)
1 source controls mapped|1 target controls covered
1%
Secure by Design: A Guide for Manufacturers (CISA)
1 source controls mapped|1 target controls covered
1%
Responsible Minerals Initiative (RMI) - Responsible Minerals Assurance Process
1 source controls mapped|4 target controls covered
1%
ISO/IEC 29134:2023
1 source controls mapped|4 target controls covered
1%
Singapore Cybersecurity Act 2018
1 source controls mapped|2 target controls covered
1%
ISO/IEC 29147:2018
1 source controls mapped|3 target controls covered
1%
FBI CJIS Security Policy
1 source controls mapped|1 target controls covered
1%
ISO/IEC 27003:2017
1 source controls mapped|1 target controls covered
1%
ISO/IEC 27557:2022 - Organisational Privacy Risk Management
1 source controls mapped|2 target controls covered
1%
GDPR
1 source controls mapped|1 target controls covered
1%
SQF Code Edition 9 - Safe Quality Food
1 source controls mapped|2 target controls covered
1%
ISO/IEC 23894:2023
1 source controls mapped|3 target controls covered
1%
ISO 26262:2018 - Functional Safety for Road Vehicles
1 source controls mapped|1 target controls covered
1%
ISO 22000:2018
1 source controls mapped|1 target controls covered
1%
Kuwait National Cybersecurity Framework
1 source controls mapped|1 target controls covered
1%
SEC Climate Disclosure Rule
1 source controls mapped|1 target controls covered
1%
ISO 22313:2020 - Guidance on Business Continuity Management Systems
1 source controls mapped|1 target controls covered
1%
Voluntary Principles on Security and Human Rights (VPs)
1 source controls mapped|1 target controls covered
1%
USMCA Chapter 19 - Digital Trade (United States-Mexico-Canada Agreement)
1 source controls mapped|1 target controls covered
1%
US Maritime Transportation Security Act (MTSA) and USCG Cybersecurity Requirements
1 source controls mapped|3 target controls covered
1%
US EPA Safe Drinking Water Act (SDWA) - Cybersecurity Requirements
1 source controls mapped|1 target controls covered
1%
UK Gambling Commission LCCP and Remote Technical Standards
1 source controls mapped|1 target controls covered
1%
Regional Comprehensive Economic Partnership (RCEP) - E-Commerce Chapter
1 source controls mapped|1 target controls covered
1%
PCI P2PE
1 source controls mapped|5 target controls covered
1%
PCI SSF
1 source controls mapped|5 target controls covered
1%
ASD Strategies to Mitigate Cyber Security Incidents
1 source controls mapped|12 target controls covered
1%
NIST SP 800-124 Revision 2 - Guidelines for Managing the Security of Mobile Devices
1 source controls mapped|4 target controls covered
1%
ISO/IEC 27010:2015
1 source controls mapped|4 target controls covered
1%
PCI PIN Security
1 source controls mapped|5 target controls covered
1%
FFIEC IT Examination Handbook
1 source controls mapped|5 target controls covered
1%
Bank Secrecy Act / Anti-Money Laundering (BSA/AML)
1 source controls mapped|1 target controls covered
1%
ISO 15189:2022 - Medical Laboratories Requirements for Quality and Competence
1 source controls mapped|1 target controls covered
1%
Illinois Biometric Information Privacy Act (BIPA)
1 source controls mapped|2 target controls covered
1%
NRC 10 CFR 73.54 - Nuclear Facility Cybersecurity
1 source controls mapped|4 target controls covered
1%
ISO/IEC 29115:2013 - Entity Authentication Assurance Framework
1 source controls mapped|3 target controls covered
1%
UK Open Banking Standard
1 source controls mapped|4 target controls covered
1%
Armenia Law on Protection of Personal Data (2015)
1 source controls mapped|1 target controls covered
1%
ISO/IEC 27400:2022
1 source controls mapped|2 target controls covered
1%
ISO 19650 - Organisation and Digitisation of Information about Buildings and Civil Engineering Works (BIM)
1 source controls mapped|1 target controls covered
1%
Samoa Telecommunications Act 2005
1 source controls mapped|2 target controls covered
1%
US Automated Commercial Environment (ACE) - CBP Trade Data Requirements
1 source controls mapped|1 target controls covered
1%
ISO/IEC 23837:2023
1 source controls mapped|1 target controls covered
1%
FIDO2 / WebAuthn
1 source controls mapped|1 target controls covered
1%
Florida Digital Bill of Rights (FDBR)
1 source controls mapped|3 target controls covered
1%
ITU-T X.805 - Security Architecture for End-to-End Communications
1 source controls mapped|2 target controls covered
1%
IEC 62351 - Power Systems Communication Security
1 source controls mapped|2 target controls covered
1%
APPI
1 source controls mapped|3 target controls covered
1%
DAMA-DMBOK2 - Data Management Body of Knowledge (2nd Edition)
1 source controls mapped|3 target controls covered
1%
ISO/IEC 20000-1:2018
1 source controls mapped|2 target controls covered
1%
ITIL 4
1 source controls mapped|2 target controls covered
1%
IATA Operational Safety Audit (IOSA) Standards Manual
1 source controls mapped|1 target controls covered
1%
Sigstore - Software Artifact Signing and Verification
1 source controls mapped|1 target controls covered
1%
TISAX - Trusted Information Security Assessment Exchange
1 source controls mapped|2 target controls covered
1%
ISO/IEC 25012:2008 - Data Quality Model
1 source controls mapped|1 target controls covered
1%
ISO/IEC 27006-1:2024
1 source controls mapped|1 target controls covered
1%
Austria Data Protection Act (Datenschutzgesetz, DSG, amended 2018)
1 source controls mapped|1 target controls covered
1%
ISO 28001:2007 Supply Chain Security Management
1 source controls mapped|2 target controls covered
1%
IAIS Insurance Core Principles (ICPs)
1 source controls mapped|1 target controls covered
1%
ISO 22316
1 source controls mapped|2 target controls covered
1%
ISO/TS 22318:2021
1 source controls mapped|2 target controls covered
1%
FedRAMP Rev 5
1 source controls mapped|1 target controls covered
1%
ISO/TS 22317:2021
1 source controls mapped|2 target controls covered
1%
APRA CPS 234
1 source controls mapped|2 target controls covered
1%
ISO 22320:2018
1 source controls mapped|3 target controls covered
1%
COSO Internal Control - Integrated Framework (2013)
1 source controls mapped|1 target controls covered
1%
Canada ITSG-33 - IT Security Risk Management
1 source controls mapped|1 target controls covered
1%
Tanzania Personal Data Protection Act 2022
1 source controls mapped|1 target controls covered
1%
Nevada Gaming Control Board Cybersecurity Requirements
1 source controls mapped|1 target controls covered
1%
Compare TSA Pipeline Cybersecurity Directives with ISO 27002:2022

Coverage is not the same as your position

This page shows what TSA Pipeline Cybersecurity Directives overlaps with in general. Where your organisation actually stands, against the standard you are going for and the certifications you already hold, is a different question. Same graph and the same recorded refutations, scoped to you rather than to a pair.

The Compliance Position Diagnostic, $5,000 fixed, ten business days

What is TSA Pipeline Cybersecurity Directives and who does it apply to?

TSA Pipeline Cybersecurity Directives is a compliance framework from United States (federal, TSA) with 5 domains and 49 controls. The TSA Security Directives binding the most critical US hazardous liquid and natural gas pipeline and LNG owner/operators since the Colonial Pipeline attack: the Pipeline-2021-01 series (currently 01G: 24/7 Cybersecurity Coordinators, reporting incidents to CISA within 72 hours, a vulnerability assessment against Section 7 of the Pipeline Security Guidelines) and the performance-based Pipeline-2021-02 series (currently 02G: a TSA-approved Cybersecurity Implementation Plan covering Critical Cyber System identification, IT/OT segmentation, access control, continuous monitoring and patching, a tested incident response plan and an annual assessment plan with a two-yearly architecture review and one-third annual coverage). Read in full from the directives TSA publishes. It is used by organisations to establish and maintain compliance with industry standards and regulatory requirements.

What does TSA Pipeline Cybersecurity Directives actually require?

TSA Pipeline Cybersecurity Directives has 49 controls organised across 5 domains. The largest domains are SD Pipeline-2021-02G Section III.A to III.E: Cybersecurity measures – TSA Pipeline Cybersecurity Directives (15 controls), SD Pipeline-2021-02G Sections II and IV to VI: Applicability, implementation plan, records and amendments – TSA Pipeline Cybersecurity Directives (11 controls), SD Pipeline-2021-01G: Coordinator, incident reporting and vulnerability assessment – TSA Pipeline Cybersecurity Directives (9 controls). Each control defines specific requirements that organisations must implement to achieve compliance.

If I already comply with another framework, how much of TSA Pipeline Cybersecurity Directives do I already cover?

TSA Pipeline Cybersecurity Directives maps to 119 other compliance frameworks. The top mapping partners are ISO 27002:2022 (23% coverage), API 1164 (4% coverage), ICAO Annex 17 - Aviation Security (AVSEC) (3% coverage). Use our comparison tool to explore control-level mappings between frameworks.

How do I implement TSA Pipeline Cybersecurity Directives?

Start your TSA Pipeline Cybersecurity Directives compliance journey by running a self-assessment on our platform to identify your current compliance posture. Our AI advisory can answer specific questions about TSA Pipeline Cybersecurity Directives requirements, and cross-framework mapping helps you leverage existing controls from other frameworks you may already comply with. Create a free account to access all 49 controls and track your progress.

Start Your Compliance Journey

Create a free account to run self-assessments, get AI advisory, and track your compliance progress across 1,120 frameworks.

Get Started Free →

Free forever, no credit card required