TSA Implements New Cybersecurity Reporting Procedures

TSA is issuing a change to their cybersecurity requirements. This change is to clarify and improve requirements for airport operators to report cybersecurity incidents to the federal government. This amendment would require two critical actions:

Airport operators to report cybersecurity incidents to the Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency (CISA).
Airport operators designate a Cybersecurity Coordinator who is required to be available to TSA and CISA 24/7 to coordinate cybersecurity practices and address any incidents that arise.

To avoid duplicate reporting, the information provided to CISA pursuant to this Amendment would be shared with TSA and may also:

Be shared with the National Response Center and other agencies, including the Department of Transportation (DOT) and the Federal Aviation Administration (FAA), as appropriate.