
In response to persistent threats, the Transportation Security Administration (TSA) yesterday issued an emergency amendment to cybersecurity programs for certain TSA-regulated airports and aircraft operators. It requires those entities to develop an approved implementation plan that describes measures they are taking to improve security, protect against disruption of their infrastructure, and proactively assess the efficacy of those measures.
The amendment focuses on actions that include the development of network segmentation policies and controls to ensure systems can continue to operate in case of an information technology breach; the creation of access control limitations to prevent unauthorized access to critical cyber systems; implementation of monitoring and detection procedures to respond to threats and anomalies; and minimization of the risk of exploitation of cyber systems through the use of security patches and updates.