Cybersecurity

U.S. Pipeline Watchdog Rebuffed Call for Cybersecurity Rules

  • Agency hasn’t used power to impose rules to prevent hacks
  • Tiny Pipeline Security Branch has been criticized in the past

    

Photographer: Samuel Corum/Bloomberg
Lock
This article is for subscribers only.

The federal agency charged with protecting the nation’s pipelines hasn’t imposed any mandatory cybersecurity requirements since its creation in wake of the Sept. 11, 2001 terrorist attacks -- despite dire warnings from the intelligence community about vulnerability to hackers.

Instead, the U.S. Transportation Security Administration’s Pipeline Security Branch, which oversees nearly three million miles of pipelines, has relied on voluntary best practices and self-reporting by the industry to secure the operations. Those measures have alarmed pipeline safety advocates and been criticized as inadequate by government regulators and lawmakers.