TSA not monitoring transportation sector efforts to stop ransomware, watchdog says

A GAO report criticized TSA for failing to implement key cybersecurity recommendations since 2018—particularly around ransomware best practices, OT risk assessments, and measuring the effectiveness of federal support—despite issuing multiple directives after the Colonial Pipeline attack. TSA has proposed rulemaking to codify prior directives for rail and pipeline sectors, but industry groups pushed back on requirements to submit sensitive security information and warned of new risks and operational burdens, while TSA cited resource constraints for more extensive on-site inspections.