1652-0074 CyberMeasSurfModes INSTRUCTIONS

OMB control number 1652-0074

Exp. 05/31/2022

INSTRUCTIONS

See Security Directive SD 1580-2021-01, Enhancing Rail Cybersecurity, to address the threat:

The Designate a Cybersecurity Coordinator is section A.

The Report Cybersecurity Incidents are sections B and C.

The Cybersecurity Incident Response Plan is section D.

The Cybersecurity Vulnerability Assessment form is section E.

The statements of completion are A, B&C, D.4 and E.3.

See Security Directive SD 1582-2021-02, Enhancing Public Transportation and Passenger Railroads, to address the threat:

The Designate a Cybersecurity Coordinator is section A.

The Report Cybersecurity Incidents are sections B.

The Cybersecurity Incident Response Plan is section C.

The Cybersecurity Vulnerability Assessment form is section D.

The statements of completion are A, B, C.4. and D.3.

Paperwork Reduction Act Burden Statement:  This is a mandatory collection of information.  TSA estimates that the total average burden per response associated with this collection is approximately 1 hour to designate a cybersecurity coordinator, 80 hours for the contingency response plan, 42 hours for cybersecurity vulnerability assessments. The burden hour for the statement of completion of security directive requirements is included within the burden numbers of each of the information collection.  An agency may not conduct or sponsor, and a person is not required to respond to a collection of information unless it displays a valid OMB control number.  The control number assigned to this collection is OMB 1652-0074, which expires on 05/31/2022. Send comments regarding this burden estimate or collection to: TSA-11, Attention: PRA 1652-0074 Cybersecurity Measures for Surface Modes, 6565 Springfield Center Drive, Springfield, VA 20598-6011.