TSA aims for harmonization in proposed surface transportation cyber rule through flexible approach

The Transportation Security Administration will take an outcome-based approach in implementing a massive rulemaking to formalize cyber risk management requirements for pipeline, rail and mass transit entities that considers other regulatory regimes in the different sectors, according to TSA surface policy chief Scott Gorton.

“Whether you want to call it reciprocity or harmonization or performance-based, we are open to putting it in the hands of the operator to tell us how you’re going to protect your systems, and we will...