Pipeline Security Act

This bill amends the Homeland Security Act of 2002 to formally assign the Transportation Security Administration (TSA) responsibility for securing pipelines against cybersecurity threats, terrorism, and other security threats, and outlines specific duties, personnel planning, oversight, and stakeholder engagement.

Sec. 2, Pipeline transportation and pipeline facilities security responsibilities: The bill adds a new paragraph to TSA's duties, giving it responsibility, in coordination with the Cybersecurity and Infrastructure Security Agency (CISA), for securing pipeline transportation and facilities against cybersecurity threats, terrorism, and other security threats. It also adds a new subsection requiring the TSA Administrator to develop security guidelines, issue security directives or regulations, share information, conduct security assessments, and carry out a risk-ranking and inspection program. TSA and CISA may detail personnel between them.

Personnel strategy: Within 180 days, the TSA Administrator, consulting CISA, must develop a personnel strategy for pipeline security duties, including an assessment of needed cybersecurity expertise and resources, and submit it to Congress.

Oversight: The TSA Administrator must report to Congress at least every two years on pipeline security activities, including guidelines, directives, regulations, assessments, and inspections, and state whether new regulations are needed. The Government Accountability Office must review implementation within two years.

Stakeholder engagement: Within one year, the TSA Administrator must hold at least one industry day to engage pipeline stakeholders on security matters.