Recent Transportation Security Administration (TSA) Security Directive Establishes New Cybersecurity Measures for Railroad Carriers

### Executive Summary: The document summarizes TSA Security Directive 1580/82-2022-01 for designated passenger and freight railroad carriers, requiring TSA-approved Cybersecurity Implementation Plans and Cybersecurity Assessment Programs (including Cybersecurity Architecture Design Reviews), OT-specific incident response plans, network segmentation, continuous monitoring and anomaly detection, secure remote access with compensating controls where MFA is infeasible, and risk-based vulnerability management, and it specifies submission and execution deadlines for compliance.