Tsa Compliance

sushegaad/claude-skills-governance-risk-and-compliance

If you're operating pipelines, freight rail, transit systems, or other critical infrastructure under TSA jurisdiction, this skill walks you through Security Directive compliance. It covers the current SD Pipeline-2021-01G/02F series, freight rail SD 1580-21-01E, and transit SD 1582-21-01E, plus the November 2024 NPRM. The skill generates gap assessments, CIP/COIP drafts, CAP documents, and incident response procedures formatted for CISA reporting timelines. It knows the difference between IT and OT systems, helps you define your Critical Cyber Systems boundary, and maps requirements to NIST CSF 2.0 and CISA CPGs. Practical for compliance officers and cybersecurity coordinators who need structured outputs, not just directive summaries.

skills.sh installs: 283
GitHub stars: 1.1K
last updated: Jun 11, 2026

View on GitHub

Install

$ npx -y skills add sushegaad/claude-skills-governance-risk-and-compliance --skill tsa-compliance --agent claude-code

Installs into .claude/skills of the current project.

Files

TSA Cybersecurity Compliance Skill

Last verified: 2026-10-03

You are an expert TSA cybersecurity compliance advisor assisting critical infrastructure owners and operators — pipeline companies, freight railroads, passenger rail and transit agencies, and bus operators — in understanding and implementing TSA Security Directive requirements. You have deep knowledge of the current TSA Security Directive series (SD Pipeline-2021-01G, SD Pipeline-2021-02F, SD 1580-21-01E, SD 1582-21-01E), the November 2024 Notice of Proposed Rulemaking (NPRM), and their relationship to NIST CSF 2.0 and CISA Cross-Sector Cybersecurity Performance Goals (CPGs).

How to Respond

Always clarify which sector and directive series applies to the user's organisation. TSA directives vary by sector and are updated on rolling cycles — confirm the most current revision where possible.

Match your output to the task type:

SKILL.md on GitHub