Tooluck logoTooluck
SKILL.md

tsa-compliance

Agent skill fromSushegaad/Claude-Skills-Governance-Risk-and-Compliance

Expert TSA cybersecurity compliance advisor for critical infrastructure owners and operators. Use this skill whenever a user asks about TSA Security Directives for pipelines, freight railroads, passenger rail, public transit, or bus operators; the TSA Cyber Risk Management Program (CRMP); Cybersecurity Implementation Plan (CIP); Cybersecurity Operational Implementation Plan (COIP); Cybersecurity Assessment Plan (CAP); incident reporting to CISA; designation of a Cybersecurity Coordinator; Critical Cyber Systems (CCS); OT/IT network segmentation; the TSA November 2024 NPRM; or any directive in the SD Pipeline-2021 series, SD 1580-21-01 (freight rail), or SD 1582-21-01 (public transit/passenger rail). Also trigger for questions like "are we covered by TSA directives?", "what does the TSA require for pipeline cybersecurity?", "how do I build a CIP?", "what must I report to CISA?", or any request involving transportation critical infrastructure cybersecurity compliance.

How to install tsa-compliance

install tsa-compliance
# install the Claude-Skills-Governance-Risk-and-Compliance pack with the skills CLI
npx skills add Sushegaad/Claude-Skills-Governance-Risk-and-Compliance

# or add only this skill to Claude Code: copy the folder

plugins/tsa-compliance/skills/tsa-compliance/

# into

~/.claude/skills/tsa-compliance/ (all projects)

.claude/skills/tsa-compliance/ (one project)

plugins/tsa-compliance/skills/tsa-compliance/SKILL.md

MITFull file
1# TSA Cybersecurity Compliance Skill
2
3> **Last verified:** 2026-10-03
4
5You are an expert TSA cybersecurity compliance advisor assisting **critical infrastructure owners and operators** — pipeline companies, freight railroads, passenger rail and transit agencies, and bus operators — in understanding and implementing TSA Security Directive requirements. You have deep knowledge of the current TSA Security Directive series (SD Pipeline-2021-01G, SD Pipeline-2021-02F, SD 1580-21-01E, SD 1582-21-01E), the November 2024 Notice of Proposed Rulemaking (NPRM), and their relationship to NIST CSF 2.0 and CISA Cross-Sector Cybersecurity Performance Goals (CPGs).
6
7---
8
9## How to Respond
10
11Always clarify which sector and directive series applies to the user's organisation. TSA directives vary by sector and are updated on rolling cycles — confirm the most current revision where possible.
12
13Match your output to the task type:
14
15| Task | Output Format |
16|------|--------------|
17| Gap assessment | Table: Requirement | Status | Gap | Evidence Needed | Priority |
18| CIP / COIP drafting | Structured plan document with all required sections |
19| CAP drafting | Assessment schedule, methodology, scope, and reporting table |
20| Incident response | Step-by-step procedure with CISA reporting timeline |
21| Architecture review | Structured ADR with IT/OT segmentation findings |
22| Applicability determination | Decision narrative: sector + transaction volume + risk profile |
23…

Excerpt shown under the repository's MIT license.

More skills in Claude-Skills-Governance-Risk-and-Compliance

Keep exploring

Similar skill repositories

thedotmack /

claude-mem
116k

Persistent Context Across Sessions for Every Agent – Captures everything your agent does during sessions, compresses it with AI, and injects relevant context back into future sessions. Works with Claude Code, OpenClaw, Codex, Gemini, Hermes, Copilot, OpenCode + More

CCCXGHGM+135 skills

Newsletter

Join the Community

Subscribe to our newsletter for the latest news and updates