H.R. 5062 — Pipeline Security Act

This section adds a new section 1559 to Subtitle D of title XV of the Implementing Recommendations of the 9/11 Commission Act of 2007 assigning the Transportation Security Administration (TSA) Administrator responsibility, in consultation with the Cybersecurity and Infrastructure Security Agency (CISA) Director as appropriate, for securing pipeline transportation and pipeline facilities against cybersecurity threats, acts of terrorism, and other security threats. In carrying out this responsibility, TSA must (1) develop and update guidelines, consistent with the National Institute of Standards and Technology (NIST) Framework for Improving Critical Infrastructure Cybersecurity, in consultation with relevant stakeholders; (2) promulgate additional security directives or regulations as necessary; (3) share such guidelines, directives, regulations, and threat intelligence with stakeholders as appropriate; (4) assess and inspect implementation of security policies, plans, practices, and training by pipeline owners and operators and provide recommendations or requirements; (5) identify and rank relative security risks; and (6) inspect pipeline transportation and facilities, including those designated as critical by owners and operators. Not later than one year after enactment, TSA must convene at least one industry day with pipeline stakeholders on security matters. This section further requires TSA to submit biennial reports to the House Committee on Homeland Security and the Senate Committees on Commerce, Science, and Transportation and on Homeland Security and Governmental Affairs detailing activities to secure pipelines. This section directs TSA, not later than 180 days after enactment and in consultation with the CISA Director as appropriate, to develop and submit to Congress a personnel strategy for securing pipelines that assesses necessary cybersecurity expertise and resources, includes a plan to expand such expertise, and considers specified TSA and Department of Homeland Security strategies and plans (e.g., TSA National Strategy for Transportation Security, DHS Cybersecurity Strategy).