Emergency TSA Cybersecurity Directive for Airports & Aircraft Operators: How to Prepare

This Dragos advisory summarizes the TSA’s emergency cybersecurity requirements for airports and aircraft operators—network segmentation, least-privilege access controls with MFA where feasible, continuous monitoring/anomaly detection, and a vulnerability/patch-management program—and recommends immediate steps (identify OT “crown jewels,” develop incident response and implementation plans, and establish a cybersecurity assessment program including architecture reviews and testing) to achieve compliance and strengthen OT security.