Republicans in the House Homeland Security Committee are requesting information from the Transportation Security Administration on its measures and resiliency following recent cybersecurity incidents.
U.S. Reps. Mark Green, MD (R-TN), Carlos Gimenez (R-FL), Andre Garbarino (R-NY), and Sheri Biggs (R-SC) sent a letter to Adam Stahl, Acting Administrator for the TSA, requesting information about the agency’s cybersecurity measures. The lawmakers said recent cybersecurity events, like the cyberattack on the Seattle-Tacoma International Airport in 2024 and the Colonial Pipeline attack in 2021, as well as the global outage cause by the Cloudstrike update in July 2024, required an urgent need for adaptive cybersecurity measures that fit with the current regulatory cybersecurity framework.
“As TSA refines its cybersecurity posture, it is also essential to assess whether this regulatory framework is effective, sustainable, and appropriately balanced between security imperatives and operational realities,” the letter said. “TSA must ensure that its cybersecurity framework is not only effective but also agile enough to respond to multiple simultaneous cyber incidents that impact different nodes of the transportation sector without compromising operational continuity.”
In the letter, the Congress members requested TSA provide them with information on the agency’s formal incident response framework for large-scale cyberattacks, measures the agency is implementing in the wake of the Volt Typhoon intrusions, how the agency works with the Cybersecurity and Infrastructure Agency (CISA), and how it evaluates regulatory measures. Responses are due from the agency by March 18.