Advertisement

Federal Highway Administration wants feedback on proposal to use cyber tool

The FHWA plans to adopt CISA’s Cyber Security Evaluation Tool so that its transportation authorities can better identify and respond to cyber incidents.
Commuters sit in traffic on southbound Interstate 5 during the afternoon commute on Feb. 9, 2024 in San Diego. (Photo by Kevin Carter/Getty Images)

The Department of Transportation’s Federal Highway Administration is seeking public comments on its proposal to allow transportation authorities to use a Cybersecurity and Infrastructure Security Agency tool to better address cyber incidents.

The FHWA’s proposal to adopt CISA’s Cyber Security Evaluation Tool — which “authorities can use to assist in identifying, detecting, protecting against, responding to, and recovering from cyber incidents,” per a Federal Register posting — would meet a requirement called out in the bipartisan infrastructure law of 2021.   

The agency said in the posting that it “thinks it is appropriate to leverage CISA’s expertise instead of attempting to create a separate and potentially duplicative tool.” CSET, which is available for public download, provides modules and questionnaires tailored to specific critical infrastructure sectors. The voluntary software tool takes “a systematic approach to assess cybersecurity controls and processes.” 

FHWA’s decision to use CSET was made following coordination with CISA and the Transportation Security Administration, as well as consultation with various stakeholders on the efficacy of the tool. The FHWA noted that many state agencies use CSET, “while others customize alternative cybersecurity solutions to align with their distinct mission requirements.”

Advertisement

The FHWA said it will continue to partner with other federal agencies charged with the development of cybersecurity tools so that it can “ensure highway-related equities are considered and incorporated appropriately.”

The deadline to submit comments on the FHWA’s proposal is April 19, though late submissions “will be considered to the extent practicable.”

Latest Podcasts