Cybersecurity Assessment Plan

OMB control number 1652-0056

Exp. 2/28/2026

INSTRUCTIONS

See TSA Security Directive Pipeline-2021-02 Series Requirements: Pipeline Cybersecurity Mitigation Actions, Contingency Planning, and Testing.

The Cybersecurity Implementation Plan is section II.B.

The Cybersecurity Incident Response Plan is section III.F.

The Cybersecurity Assessment Program is section III.G.

The Documents to Establish Compliance is section IV.C.

Paperwork Reduction Act Burden Statement:  This is a mandatory collection of information.  TSA estimates that the total average hour burden per response associated with this collection is approximately 400 hours for the Cybersecurity Implementation Plan, 80 hours for the Cybersecurity Incident Response Plan, 160 hours for the Cybersecurity Assessment Plan and 160 hours to provide Records to Establish Compliance. An agency may not conduct or sponsor, and a person is not required to respond to a collection of information unless it displays a valid OMB control number.  The control number assigned to this collection is OMB 1652-0056, which expires on 2/28/2026. Send comments regarding this burden estimate or collection to: TSA-11, Attention: PRA 1652-0056 Pipeline Corporate Security Reviews and TSA Security Directive Pipeline-2021-02 series, 6565 Springfield Center Drive, Springfield, VA 20598-6011.

.