TSA Publishes Pipeline Security 30-day ICR Revision – 6-2-25
Yesterday, the Transportation Security Administration (TSA) published a 30-day information collection request (ICR) revision notice in the Federal Register (90 FR 23353) for their “Pipeline Operator Security Information” ICR. The 60-day ICR notice was published on November 15th, 2024. Changes have been made in the burden estimate.
The table below shows the revised burden estimate:
Yesterday’s notice did not provide the number of responses, instead reported the number of ‘respondents’ (100), that number comes from the Supporting Document provided to OMB’s Office of Information and Regulatory Affairs (OIRA). The notice also noted that the burden estimate for reporting cybersecurity incidents was different than that reported in the 60-day ICR notice due to changes in the estimated time it takes to complete the incident reports
Burden Estimate Details
The data described below comes from the Supporting Document for the proposed ICR revision and the currently approved ICR. The table below shows the detailed burden estimate for the three information collections included in this ICR:
The change in the number of responses (and subsequently the burden estimate) for reporting security incidents is apparently based upon incident reporting history since the current ICR was approved.
There has been no change in the estimated number of responses for cybersecurity incidents. Since these reports are made directly to CISA, it would appear that CISA has not been providing detailed information about the number of cybersecurity incidents reported. The burden estimate is based upon a revised 20-min burden (time to gather and report the information) per incident report versus the 2-hr estimate from the currently approved ICR. That estimate is provided by CISA (1670-0037) and was changed since the 60-day ICR notice for this action was published.
The change in the number of responses is due the fact that currently approved ICR added the POC information requirement and that burden estimate was based on the expectation that each of the pipeline organizations would have to report that information. This notice assumes that just one pipeline organization each year will be submitting updated information due to changes in the point of contact.
Comments Solicited
TSA is soliciting public comments on this. Comments may be submitted via the RegInfo.gov page for this ICR notice by clicking on the “COMMENT” block at the top of the page. Comments should be submitted by July 2nd, 2025.