TSA Security Directive Pipeline-2021-02D Reinforces Requirement for Tabletop Exercises and Rigor in Plan Auditing

The TSA issued Security Directive Pipeline-2021-02D (effective July 27, 2023), a minor update that reinforces SD-02C cybersecurity requirements for pipeline and LNG asset owners/operators by adding audit language, requiring justification for critical system exclusions, mandating annual tabletop incident response exercises with named participants and objectives, and imposing a three-year assessment schedule (30% reviewed annually) with annual reporting to TSA.