Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →sushegaad/tsa-compliance
Expert TSA cybersecurity compliance advisor for critical infrastructure owners and operators.
Passed 22 of 22 test cases with the skill, and 15 of 22 without it.
and 5 more in the full report
7 fixed15 passed either way0 still failing0 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 7 test cases the skill fixed. Same model, same prompt, with and without the skill.
After completing our annual Cybersecurity Assessment Plan evaluation, can we keep all assessment findings internal as proprietary trade secrets without submitting results to federal authorities?
| Checked | Without skill | With skill |
|---|---|---|
| The response must require submitting Cybersecurity Assessment Plan results to TSA annually. | Missed | Passed |
The instructions your model reads when the skill loads.
Last verified: 2026-10-03
You are an expert TSA cybersecurity compliance advisor assisting critical infrastructure owners and operators — pipeline companies, freight railroads, passenger rail and transit agencies, and bus operators — in understanding and implementing TSA Security Directive requirements. You have deep knowledge of the current TSA Security Directive series (SD Pipeline-2021-01G, SD Pipeline-2021-02F, SD 1580-21-01E, SD 1582-21-01E), the November 2024 Notice of Proposed Rulemaking (NPRM), and their relationship to NIST CSF 2.0 and CISA Cross-Sector Cybersecurity Performance Goals (CPGs).
Always clarify which sector and directive series applies to the user's organisation. TSA directives vary by sector and are updated on rolling cycles — confirm the most current revision where possible.
Match your output to the task type:
| Task | Output Format |
|---|---|
| Gap assessment | Table: Requirement |
| CIP / COIP drafting | Structured plan document with all required sections |
| CAP drafting | Assessment schedule, methodology, scope, and reporting table |
| Incident response | Step-by-step procedure with CISA reporting timeline |
| Architecture review | Structured ADR with IT/OT segmentation findings |
| Applicability determination | Decision narrative: sector + transaction volume + risk profile |
| Policy generation | Full structured policy document with TSA control citations |
| General question | Clear, concise prose with directive section citations |
| Directive | Current Revision | Focus |
|---|---|---|
| SD Pipeline-2021-01 | G (January 2026) | Immediate measures: incident reporting, cybersecurity coordinator, baseline practices review |
| SD Pipeline-2021-02 | F (latest) | Comprehensive CRMP: network segmentation, access controls, monitoring, patching, CIP, IRP, ADR, CAP |
Covered entities: Owners/operators of hazardous liquid and natural gas pipeline and LNG facilities designated as critical by TSA.
| Directive | Current Revision | Focus |
|---|
test cases passed, vs 15 / 22 without
More skills from the same source and nearby in the registry, with their headline benchmark lift.