Rep. Laurel Lee Highlights Pipeline Cybersecurity Risks and Information Sharing Needs

Cybersecurity Threats to Pipeline Operations

• ⚠️ Cybersecurity is identified as one of the top risks to pipeline safety, with constant threats detected in real-time.
• 🔒 Pipeline operators are implementing measures like isolating SCADA systems in DMZ zones to prevent breaches from impacting safe operations.
• 📊 A scoreboard tracks incoming threats, with most being stopped due to investments, and any that get through are studied and reported to authorities like the FBI and CISA.

The Need for Voluntary Information Sharing

• ✈️ A voluntary information sharing program, similar to successful models in aviation, is recommended to improve pipeline safety.
• 🤝 This program would allow pipeline operators, safety advocates, and government to discuss incidents and lessons learned in a safe, confidential space.
• 📜 Congress is urged to authorize such a program, which has been developed by a public advisory committee.

Consequences of Not Sharing Information

• 📉 Without a clear framework for sharing risk, breach, or incident information, vulnerabilities can be exacerbated if data falls into the wrong hands.
• 🚫 Currently, government agencies are often excluded from these discussions due to regulations that could force disclosure of sensitive information, hindering industry-wide learning.
• 🛠️ The goal is to create an environment where operators can contribute information without fear of it being misused against them in enforcement actions, thereby enhancing overall pipeline safety.