TSA Floats New Rules Mandating Cyber Incident Reporting for Pipelines, Railroads

The rules would require pipeline and railroad operators to conduct annual cybersecurity evaluations, identify vulnerabilities, and create plans to detect and respond to cyberattacks. They would also have to report incidents to the CISA.