Conducting Architecture Reviews in Light of the New TSA Directives

### Executive summary: The article explains TSA's directives for pipeline cybersecurity with emphasis on conducting a Validated Architecture Design Review (VADR), summarizes frequent OT weaknesses (insufficient network segmentation, improper account management, and limited visibility), and provides practical questions and guidance operators can use to inventory assets, design segmentation, manage accounts, and build monitoring to reduce ransomware and other risks.