It represents a shift from a long-held system of voluntary guidelines and self-reporting.
(Bloomberg) -- Pipeline operators who fail to report cybersecurity attacks to the Department of Homeland Security could face fines of $7,000 a day or more under regulations being released Thursday in response to the ransomware attack that temporarily paralyzed the nation’s biggest fuel pipeline.
The so-called security directive being issued by Homeland Security will be followed in the near future by an additional set of rules for pipeline operators, according to senior department officials who asked not to be identified.
The new mandates, a shift from a long-held system of voluntary guidelines and self-reporting, is in response to the ransomware attack on Colonial Pipeline Co.