16 May 2023

SecurityScorecard announced that the Transportation Security Administration (TSA) has awarded a contract for SecurityScorecard subscriptions to enable pipeline and rail owners/operators, who elect to use the subscription to more accurately monitor and assess the cyber health of their transportation systems.

Subscription service

SecurityScorecard’s subscription service allows owners/operators to voluntarily assess their cybersecurity posture with cybersecurity vulnerability monitoring, ratings, and threat intelligence.

These automated capabilities enable owners/operators to monitor their public-facing internet applications and services. 

New and innovative capabilities

As cyber threats against critical infrastructure continue to escalate, fulfilling TSA's security mission requires new and innovative capabilities to stay ahead of our adversaries,” said Sonya Proctor, Assistant Administrator of the Surface Operations Office of the TSA.

TSA’s partners who elect to use the subscription will receive SecurityScorecard’s security ratings

Sonya Proctor adds, “This capability offers another resource that allows us to strengthen our security partnerships and represents a major step forward in our overall strategy to secure our nation's critical infrastructure.”

While the use of the subscription service is not directed nor required by any TSA cybersecurity security directives, TSA’s private sector partners who elect to use the subscription will receive access to SecurityScorecard’s comprehensive security ratings and automated assessments.

Patented, easy-to-understand scorecards

Owner/Operators will receive findings in patented, easy-to-understand, “A to F” graded scorecards with collaborative mechanisms to remediate observed cybersecurity risks. This allows for more effective compliance reporting, improved communication, and informed decision-making.

SecurityScorecard will also provide TSA with high-level reports containing data on the cybersecurity vulnerabilities affecting the rail and pipeline sectors. The contract was awarded to Alvarez LLC, a service-disabled, veteran-owned small business, and Carahsoft Technology Corp. This company was the prime contractor and distributor of Scorecard software.