Last month Rep Johnson (D,TX) introduced HR 5062, the Pipeline Security Act. The bill would amend the Implementing Recommendations of the 9/11 Commission Act of 2007 by adding a new §1559, Pipeline Security. It would require the Transportation Security Administration (TSA) to take actions to regulate the cybersecurity protection of hazardous material pipelines. No new funding is authorized.
The bill is similar in intent to HR 9469, the Pipeline Security Act, that was introduced by Rep Garcia (D,CA) in September 2024. The House Homeland Security Committee held a business meeting on September 25th, 2024 where the bill was considered. The bill was amended and passed on a voice vote. No report was published nor was a revised version of the bill published. No further action was taken in the House. The earlier bill would have amended 49 USC 114 to specifically add pipeline cybersecurity to the list of responsibilities of the Transportation Security Administration.
Definitions
No new definitions are provided in this bill, there are, however, numerous references to existing statutory definitions where new terms are used in the proposed language. These include various cybersecurity related terms that are defined by reference to 6 USC 650. Those definitions rely on the included control-system-inclusive definition of ‘information system’.
Pipeline Security Responsibilities
Subsection (a) of the new §1559 would require the TSA to maintain responsibility for securing pipeline transportation and pipeline facilities against cybersecurity threats, acts of terrorism, and other security threats. In fulfilling that responsibility TSA would be required to:
Ensure the development and updating, in consultation with relevant Federal, State, local, Tribal, and territorial entities and public and private sector stakeholders, as applicable, of guidelines, consistent with the National Institute of Standards and Technology Framework for Improvement of Critical Infrastructure Cybersecurity.
Promulgate any additional security directives or regulations as the Administrator determines necessary to secure pipeline transportation or pipeline facilities.
Share, as appropriate, with relevant Federal, State, local, Tribal, and territorial entities and public and private sector stakeholders, as applicable, the guidelines, security directives, and regulations and, as appropriate, intelligence and information, regarding cybersecurity threats, acts of terrorism, and other security threats to pipeline transportation and pipeline facilities.
Assess and inspect, as appropriate, the implementation of such guidelines, security directives, and regulations, including the security policies, plans, practices, and training programs maintained by owners and operators of pipeline transportation and pipeline facilities, to provide recommendations or requirements for the improvement of the security of pipeline transportation and pipeline facilities against cybersecurity threats, acts of terrorism, and other security threats.
Identify and rank the relative security risks to pipeline transportation and pipeline facilities.
Inspect pipeline transportation and pipeline facilities, including such transportation or facilities, as the case may be, designated as critical by owners and operators of such transportation or facilities based on such guidelines, security directives, or regulations.
Personnel Strategy
Section 2(c) of the bill would require TSA to develop a strategy for carrying out the Administrator’s responsibilities to secure pipeline transportation and pipeline facilities, pursuant to the new §1559. That strategy would take into consideration the following documents:
The Transportation Security Administration National Strategy for Transportation Security,
The Department of Homeland Security Cybersecurity Strategy,
The Transportation Security Administration Cybersecurity Roadmap,
The Department of Homeland Security Balanced Workforce Strategy,
The Department of Homeland Security Quadrennial Homeland Security Review, and
Other relevant strategies or plans, as appropriate.
The strategy would also include:
An assessment of the cybersecurity expertise determined necessary by TSA to secure pipeline transportation and pipeline facilities,
A plan for expanding such expertise within the Transportation Security Administration, and
An assessment of resources determined necessary by TSA to carry out such strategy.
Moving Forward
On September 3rd, 2025 the House Homeland Security Committee held a business meeting that included the consideration of HR 5062. By a vote of 22 to 0 the Committee, the bill was ordered reported favorably without amendment. That bipartisan support would indicate that the bill could be considered in the House under the suspension of the rules process, where the bill should pass with significant bipartisan support.