DSE security knowledge hub

Cybersecurity
Knowledge

Page 160 of the DSE Cybersecurity knowledge center, with source-backed guidance and practical next steps.

DSE-authoredOfficial sourcesReviewed guidance
Search the library
Explore this topic

Cybersecurity knowledge center

Source-backed guidance for identity, vulnerability reduction, ransomware readiness, detection, response, and recovery.

Start with the cornerstone guide
DSE post stream

Cybersecurity

1,892 articles
DSE visual briefContinuity & recovery

Coordinate airport incident management with TSA and affected operators

Under 49 CFR 1542, the rule requires that airport operators required to have a security program under section 1542.103(c) but not subject to 14 CFR part 139, develop emergency response procedures to incidents of threats identified in paragraph (a) of this section.

Published Reviewed 3 min readBy DSE Security Editorial Team
Read the guide
DSE visual briefPhysical security

Protect and implement TSA Security Directives within required time and distribution limits

Under 49 CFR 1542, in the event that the airport operator is unable to implement the measures in the Security Directive, the airport operator must submit proposed alternative measures and the basis for submitting the alternative measures to TSA for approval.

Published Reviewed 3 min readBy DSE Security Editorial Team
Read the playbook
DSE visual briefPhysical security

Determine the applicable EPA risk-management program level before relying on prevention controls

Under 40 CFR 68, a Program 3 source must implement the management system required by section 68.15. Under 40 CFR 68, a Program 3 source must implement the prevention program requirements in sections 68.65 through 68.87.

Published Reviewed 3 min readBy DSE Security Editorial Team
Read the briefing
DSE visual briefPhysical security

Assign a qualified person or position to manage each covered risk-management process

Under 40 CFR 68, the rule requires that the owner or operator assign a qualified person or position that has the overall responsibility for the development, implementation, and integration of the risk management program elements.

Published Reviewed 3 min readBy DSE Security Editorial Team
Read the checklist
DSE visual briefPhysical security

Calculate worst-case toxic and flammable releases using the rule's scenario constraints

Under 40 CFR 68, Program 2 and 3 processes must report the flammable worst-case release scenario producing the greatest endpoint distance under section 68.22. Under 40 CFR 68, a Program 1 process must report one worst-case release scenario.

Published Reviewed 3 min readBy DSE Security Editorial Team
Read the guide