US issues new cybersecurity directive for critical pipelines

The cybersecurity directive, the second issued by the Biden administration since May, comes on the heels of a massive hack on Colonial Pipeline that upended millions of Americans’ fuel supply.

The United States Department of Homeland Security (DHS) announced Tuesday that it will require owners and operators of critical pipelines that transport hazardous liquids and natural gas to implement “urgently needed protections against cyber intrusions.” The security directive requires owners and operators of Transportation Security Administration (TSA)-designated critical pipelines to adopt measures to protect against ransomware attacks and other threats to information technology and operational technology systems. It also requires those pipeline owners and operations to develop and implement a cybersecurity contingency plan and review existing cybersecurity architecture.