RIN 1625-AA26 [Formerly RIN 2115-AG05]
The Transportation Security Administration (TSA) plans to submit an information collection requirement to the Office of Management and Budget (OMB) for approval in compliance with the Paperwork Reduction Act. The collection will assess the current security practices in the pipeline industry by way of its Pipeline Corporate Security Review (PCSR) program, which encompasses site visits and interviews, and is part of the larger domain awareness, prevention, and protection program supporting TSA's and the Department of Homeland Security's (DHS') missions. TSA is seeking OMB approval for this information collection so that TSA can ascertain minimum security standards and identify coverage gaps, activities that are critical to carrying out its transportation security mission.
The PCSR is an "instructive" review that provides TSA with an understanding of certain surface transportation owners'/operators' security programs, if they have voluntarily adopted such programs. In carrying out PCSRs, subject matter experts from TSA's Pipeline Security Division conduct site visits of pipeline operators throughout the nation that elected to adopt security plans. The TSA representatives analyze the owner's/operator's security plan and determine if the mitigation measures included in the plan are being properly implemented. In addition to examining the security plan document, TSA reviews one or more assets of the owner/operator. TSA conducts this collection of information on security measures to identify security gaps. The discussions also provide TSA with a method to encourage the pipeline owners/operators affected by the PCSRs to be diligent in implementing and maintaining security-related improvements.
During the pipeline site visits, TSA talks with the owner/operator and completes a PCSR form, which asks questions concerning the following topics:
- Management and oversight of the security plan
- Threat assessment
- Criticality
- Vulnerability assessment
- Credentialing
- Training
- Physical security countermeasures
- Information technology security
- Security exercises and drills
- Incident management and communications.
TSA conducts this collection through voluntary face-to-face visits, usually at the headquarters facility of the pipeline owners/operator. Typically, TSA sends one to three employees to conduct a three to four hour interview with representatives from the owner/operator. TSA then visits one or two of the owners/operators assets to further assess the implementation of the owner's/operator's security plan. TSA plans to collect information from pipeline operators of all sizes in the course of conducting these PCSRs.
This program provides TSA with real-time information on current security practices within the pipeline mode of the surface transportation sector. This information allows TSA to adapt programs to the changing security threat, while incorporating an understanding of the improvements owners/operators make in their security measures. Without this information, the ability of TSA to perform its security mission would be severely hindered.