{"abstract":"The Transportation Security Administration (TSA) is proposing to impose cyber risk management (CRM) requirements on certain pipeline and rail owner/operators and a more limited requirement, on certain over-the-road bus (OTRB) owner/operators, to report cybersecurity incidents. With the proposed addition of requirements applicable to pipeline facilities and systems, TSA is also proposing that a requirement to have a Physical Security Coordinator and report significant physical security concerns be extended to the same facilities and systems. Finally, TSA is proposing clarifications and reorganization of other regulatory requirements necessitated by these changes.","action":"Notice of proposed rulemaking (NPRM).","agencies":[{"raw_name":"DEPARTMENT OF HOMELAND SECURITY","name":"Homeland Security Department","id":227,"url":"https://www.federalregister.gov/agencies/homeland-security-department","json_url":"https://www.federalregister.gov/api/v1/agencies/227","parent_id":null,"slug":"homeland-security-department"},{"raw_name":"Transportation Security Administration","name":"Transportation Security Administration","id":494,"url":"https://www.federalregister.gov/agencies/transportation-security-administration","json_url":"https://www.federalregister.gov/api/v1/agencies/494","parent_id":227,"slug":"transportation-security-administration"}],"body_html_url":"https://www.federalregister.gov/documents/full_text/html/2024/11/07/2024-24704.html","cfr_references":[{"chapter":null,"citation_url":null,"part":"1500","title":49},{"chapter":null,"citation_url":null,"part":"1503","title":49},{"chapter":null,"citation_url":null,"part":"1520","title":49},{"chapter":null,"citation_url":null,"part":"1570","title":49},{"chapter":null,"citation_url":null,"part":"1580","title":49},{"chapter":null,"citation_url":null,"part":"1582","title":49},{"chapter":null,"citation_url":null,"part":"1584","title":49},{"chapter":null,"citation_url":null,"part":"1586","title":49}],"citation":"89 FR 88488","comment_url":null,"comments_close_on":"2025-02-05","correction_of":null,"corrections":[],"dates":"Submit comments by February 5, 2025.","disposition_notes":null,"docket_ids":["Docket No. TSA-2022-0001"],"dockets":[{"supporting_documents":[{"title":"U.S. DHS/TSA - Enhancing Surface Cyber Risk Management - NPRM - Preliminary Regulatory Impact Analysis and Initial Regulatory Flexibility Analysis","document_id":"TSA-2022-0001-0043"},{"title":"TSA Cybersecurity Lexicon","document_id":"TSA-2022-0001-0042"},{"title":"NIST CSF CPG SD NPRM Crosswalk","document_id":"TSA-2022-0001-0041"}],"agency_name":"TSA","documents":[{"comment_count":10054,"comment_start_date":"2024-11-07","updated_at":"2025-02-15T00:55:58.144-05:00","comment_url":"https://www.regulations.gov/commenton/TSA-2022-0001-0040","allow_late_comments":false,"id":"TSA-2022-0001-0040","comment_end_date":"2025-02-06","regulations_dot_gov_open_for_comment":false}],"supporting_documents_count":3,"id":"TSA-2022-0001","title":"Enhancing Surface Cyber Risk Management"}],"document_number":"2024-24704","effective_on":null,"end_page":88592,"executive_order_notes":null,"executive_order_number":null,"full_text_xml_url":"https://www.federalregister.gov/documents/full_text/xml/2024/11/07/2024-24704.xml","html_url":"https://www.federalregister.gov/documents/2024/11/07/2024-24704/enhancing-surface-cyber-risk-management","images":{},"images_metadata":{},"json_url":"https://www.federalregister.gov/api/v1/documents/2024-24704?publication_date=2024-11-07","mods_url":"https://www.govinfo.gov/metadata/granule/FR-2024-11-07/2024-24704/mods.xml","not_received_for_publication":null,"page_length":105,"page_views":{"count":4864,"last_updated":"2026-10-25 08:15:04 -0400"},"pdf_url":"https://www.govinfo.gov/content/pkg/FR-2024-11-07/pdf/2024-24704.pdf","presidential_document_number":null,"proclamation_number":null,"public_inspection_pdf_url":"https://public-inspection.federalregister.gov/2024-24704.pdf?1730900722","publication_date":"2024-11-07","raw_text_url":"https://www.federalregister.gov/documents/full_text/text/2024/11/07/2024-24704.txt","regulation_id_number_info":{"1652-AA74":{"issue":"202410","html_url":"https://www.federalregister.gov/regulations/1652-AA74/enhancing-surface-cyber-risk-management","title":"Enhancing Surface Cyber Risk Management","xml_url":"http://www.reginfo.gov/public/do/eAgendaViewRule?pubId=202410&RIN=1652-AA74&operation=OPERATION_EXPORT_XML","priority_category":"Section 3(f)(1) Significant"}},"regulation_id_numbers":["1652-AA74"],"regulations_dot_gov_info":{"supporting_documents":[{"title":"U.S. DHS/TSA - Enhancing Surface Cyber Risk Management - NPRM - Preliminary Regulatory Impact Analysis and Initial Regulatory Flexibility Analysis","document_id":"TSA-2022-0001-0043"},{"title":"TSA Cybersecurity Lexicon","document_id":"TSA-2022-0001-0042"},{"title":"NIST CSF CPG SD NPRM Crosswalk","document_id":"TSA-2022-0001-0041"}],"regulatory_plan":{"html_url":"https://www.federalregister.gov/regulations/1652-AA74/enhancing-surface-cyber-risk-management","title":"Enhancing Surface Cyber Risk Management"},"comments_count":10054,"agency_id":"TSA","comments_url":"https://www.regulations.gov/docketBrowser?rpp=50&so=DESC&sb=postedDate&po=0&dct=PS&D=TSA-2022-0001","supporting_documents_count":3,"docket_id":"TSA-2022-0001","document_id":"TSA-2022-0001-0040","regulation_id_number":"1652-AA74","title":"Enhancing Surface Cyber Risk Management","checked_regulationsdotgov_at":"2025-02-16T01:55:03Z"},"regulations_dot_gov_url":null,"significant":false,"signing_date":null,"start_page":88488,"subtype":null,"title":"Enhancing Surface Cyber Risk Management","toc_doc":"Enhancing Surface Cyber Risk Management","toc_subject":null,"topics":["Administrative practice and procedure","Air carriers","Air transportation","Aircraft","Airports","Buses","Crime","Fraud","Hazardous materials transportation","Investigations","Law enforcement","Law enforcement officers","Maritime carriers","Mass transportation","Motor carriers","Natural gas","Penalties","Pipeline safety","Pipelines","Railroad safety","Railroads","Reporting and recordkeeping requirements","Security measures","Vessels"],"type":"Proposed Rule","volume":89}