Compliance Documentation

OMB control number 1652-00074

Exp. x/xx/2023

INSTRUCTIONS

See SD 1580/82-2022-01, Rail Cybersecurity Mitigation Actions and Testing,

The Cybersecurity Implementation plan is section II.B.

The Annual Audit Plan for the Cybersecurity Assessment Program is section III.F.

Provide Documentation to Establish Compliance (upon TSA request) is section IV.C.

See revisions to the SD 1580-21-0lA series, Enhancing Rail Cybersecurity, and SD 1582-21-0lA series, Enhancing Public Transportation and Passenger Railroad Cybersecurity.

The Designate a Cybersecurity Coordinator is section Action Required A.

The Report Cybersecurity Incidents is section Action Required B.

The Cybersecurity Incident Response Plan is section Action Required C.

The Cybersecurity Vulnerability Assessment form is section Action Required D.

Paperwork Reduction Act Burden Statement:  This is a mandatory collection of information.  TSA estimates that the total average burden per response associated with this collection is approximately 400 hours for the Cybersecurity Implementation Plan response plan; 40 hours for the Annual Audit plan for Cybersecurity Assessment Program; 80 hours for the Compliance Documentation; 1 hour to Designate a Cybersecurity Coordinator; 80 hours for the Cybersecurity Incident Response Plan; and 42 hours for the Cybersecurity Vulnerability Assessment form.  An agency may not conduct or sponsor, and a person is not required to respond to a collection of information unless it displays a valid OMB control number.  The control number assigned to this collection is OMB 1652-0074, which expires on x/xx/2023. Send comments regarding this burden estimate or collection to: TSA-11, Attention: PRA 1652-0074 Cybersecurity Measures for Surface Modes, 6565 Springfield Center Drive, Springfield, VA 20598-6011.