Federal Register / Vol. 86, No. 123 / Wednesday, June 30, 2021 / Notices 34775 

Beginning date Ending date Underpayments 

(percent) 

Overpayments 

(percent) 

Corporate 

overpayments 

(Eff. 1–1–99) 

(percent) 

010187 ....................................................................................................... 093087 9 8 ..........................

100187 ....................................................................................................... 123187 10 9 ..........................

010188 ....................................................................................................... 033188 11 10 ..........................

040188 ....................................................................................................... 093088 10 9 ..........................

100188 ....................................................................................................... 033189 11 10 ..........................

040189 ....................................................................................................... 093089 12 11 ..........................

100189 ....................................................................................................... 033191 11 10 ..........................

040191 ....................................................................................................... 123191 10 9 ..........................

010192 ....................................................................................................... 033192 9 8 ..........................

040192 ....................................................................................................... 093092 8 7 ..........................

100192 ....................................................................................................... 063094 7 6 ..........................

070194 ....................................................................................................... 093094 8 7 ..........................

100194 ....................................................................................................... 033195 9 8 ..........................

040195 ....................................................................................................... 063095 10 9 ..........................

070195 ....................................................................................................... 033196 9 8 ..........................

040196 ....................................................................................................... 063096 8 7 ..........................

070196 ....................................................................................................... 033198 9 8 ..........................

040198 ....................................................................................................... 123198 8 7 ..........................

010199 ....................................................................................................... 033199 7 7 6 

040199 ....................................................................................................... 033100 8 8 7 

040100 ....................................................................................................... 033101 9 9 8 

040101 ....................................................................................................... 063001 8 8 7 

070101 ....................................................................................................... 123101 7 7 6 

010102 ....................................................................................................... 123102 6 6 5 

010103 ....................................................................................................... 093003 5 5 4 

100103 ....................................................................................................... 033104 4 4 3 

040104 ....................................................................................................... 063004 5 5 4 

070104 ....................................................................................................... 093004 4 4 3 

100104 ....................................................................................................... 033105 5 5 4 

040105 ....................................................................................................... 093005 6 6 5 

100105 ....................................................................................................... 063006 7 7 6 

070106 ....................................................................................................... 123107 8 8 7 

010108 ....................................................................................................... 033108 7 7 6 

040108 ....................................................................................................... 063008 6 6 5 

070108 ....................................................................................................... 093008 5 5 4 

100108 ....................................................................................................... 123108 6 6 5 

010109 ....................................................................................................... 033109 5 5 4 

040109 ....................................................................................................... 123110 4 4 3 

010111 ....................................................................................................... 033111 3 3 2 

040111 ....................................................................................................... 093011 4 4 3 

100111 ....................................................................................................... 033116 3 3 2 

040116 ....................................................................................................... 033118 4 4 3 

040118 ....................................................................................................... 123118 5 5 4 

010119 ....................................................................................................... 063019 6 6 5 

070119 ....................................................................................................... 063020 5 5 4 

070120 ....................................................................................................... 093021 3 3 2 

Dated: June 24, 2021. 

Jeffrey Caine, 

Chief Financial Officer, U.S. Customs and 

Border Protection. 

[FR Doc. 2021–13924 Filed 6–29–21; 8:45 am] 

BILLING CODE 9111–14–P 

DEPARTMENT OF HOMELAND 

SECURITY 

Transportation Security Administration 

Intent To Request Revision From OMB 

of One Current Public Collection of 

Information: Critical Facility 

Information of the Top 100 Most 

Critical Pipelines 

AGENCY: Transportation Security 

Administration, DHS. 

ACTION: 60-Day notice. 

SUMMARY: The Transportation Security 

Administration (TSA) invites public 

comment on one currently approved 

Information Collection Request (ICR), 

Office of Management and Budget 

(OMB) control number 1652–0050, 

abstracted below that we will submit to 

OMB for a revision in compliance with 

the Paperwork Reduction Act (PRA). 

The ICR addresses a statutory 

requirement for TSA to develop and 

implement a plan to inspect critical 

pipeline systems. On May 26, 2021, 

OMB approved TSA’s request for an 

emergency revision of this collection to 

address the ongoing cybersecurity threat 

to pipeline systems and associated 

infrastructure. TSA is now seeking to 

renew and revise the collection as it 

expires on November 30, 2021. The ICR 

describes the nature of the information 

collection and its expected burden, 

which TSA is seeking to continue its 

collection of critical facility security 

information. 

DATES: Send your comments by August 

30, 2021. 

ADDRESSES: Comments may be emailed 

to TSAPRA@dhs.gov or delivered to the 

TSA PRA Officer, Information 

Technology (IT), TSA–11, 

Transportation Security Administration, 

6595 Springfield Center Drive, 

Springfield, VA 20598–6011 

FOR FURTHER INFORMATION CONTACT: 

Christina A. Walsh at the above address, 

or by telephone (571) 227–2062. 


jbell on DSKJLSW7X2PROD with NOTICES
34776 Federal Register / Vol. 86, No. 123 / Wednesday, June 30, 2021 / Notices 

1See sec. 1557 of the 9/11 Act, Public Law 110– 

53 (121 Stat. 266, 475; Aug. 3, 2007), as codified 

at 6 U.S.C. 1207. 

2The CFSR differs from a Corporate Security 

Review (CSR) conducted by TSA in another 

information collection that looks at corporate or 

company-wide security management plans and 

practices for pipeline operators. See OMB Control 

No. 1652–0056 at https://www.reginfo.gov for the 

PRA approval of information collection for these 

CSRs. 

SUPPLEMENTARY INFORMATION: 

Comments Invited 

In accordance with the Paperwork 

Reduction Act of 1995 (44 U.S.C. 3501 

et seq.), an agency may not conduct or 

sponsor, and a person is not required to 

respond to, a collection of information 

unless it displays a valid OMB control 

number. The ICR documentation will be 

available at http://www.reginfo.gov 

upon its submission to OMB. Therefore, 

in preparation for OMB review and 

approval of the following information 

collection, TSA is soliciting comments 

to— 

(1) Evaluate whether the proposed 

information requirement is necessary for 

the proper performance of the functions 

of the agency, including whether the 

information will have practical utility; 

(2) Evaluate the accuracy of the 

agency’s estimate of the burden; 

(3) Enhance the quality, utility, and 

clarity of the information to be 

collected; and 

(4) Minimize the burden of the 

collection of information on those who 

are to respond, including using 

appropriate automated, electronic, 

mechanical, or other technological 

collection techniques or other forms of 

information technology. 

Information Collection Requirement 

OMB Control Number 1652–0050; 

Critical Facility Information of the Top 

100 Most Critical Pipelines: The 

Implementing Recommendations of the 

9/11 Commission Act of 2007 (9/11 Act) 

specifically required TSA to develop 

and implement a plan for reviewing the 

pipeline security plans and inspecting 

the critical facilities of the 100 most 

critical pipeline systems.1 Pipeline 

owner/operators determine which 

facilities qualify as critical facilities 

based on guidance and criteria set forth 

in the TSA Pipeline Security Guidelines 

published in December 2010 and 2011, 

with an update published in April 2021. 

To execute the 9/11 Act mandate, TSA 

visits critical pipeline facilities and 

collects site-specific information from 

pipeline owner/operators on facility 

security policies, procedures, and 

physical security measures. 

TSA collects facility security 

information during the site visits using 

a Critical Facility Security Review 

(CFSR) form. The CFSR looks at 

individual pipeline facility security 

measures and procedures.2 This 

collection is voluntary. Information 

collected from the reviews is analyzed 

and used to determine strengths and 

weaknesses at the nation’s critical 

pipeline facilities, areas to target for risk 

reduction strategies, pipeline industry 

implementation of the voluntary 

guidelines, and the potential need for 

regulations in accordance with the 9/11 

Act provision previously cited. 

TSA visits with pipeline owner/ 

operators to follow up on their 

implementation of security 

improvements and recommendations 

made during facility visits. During 

critical facility visits, TSA documents 

and provides recommendations to 

improve the security posture of the 

facility. TSA intends to continue to 

follow up with pipeline owner/ 

operators via email on their status 

toward implementation of the 

recommendations made during the 

critical facility visits. The follow up will 

be conducted at intervals of six, 12, and 

18 months after the facility visit. 

TSA previously initiated the PRA 

approval process by publishing a notice 

on April 8, 2021, 86 FR 18291, 

announcing our intent to conduct this 

collection with a revision. Due to the 

emergency revision of the information 

collection, TSA is reinitiating the 

approval process. 

Revision 

TSA is revising the information 

collection to align the CFSR question set 

with the revised Pipeline Security 

Guidelines, and to capture additional 

criticality criteria. As a result, the 

question set has been edited by 

removing, adding and rewriting several 

questions, to meet the Pipeline Security 

Guidelines and criticality needs. 

Further, TSA is moving the collection 

instrument from a PDF format to an 

Excel Workbook format. 

Emergency Revision 

While the above listed collections are 

voluntary, on May 26, 2021, OMB 

approved TSA’s request for an 

emergency revision of this information 

collection, allowing for the institution of 

mandatory requirements. See ICR 

Reference Number: 202105–1652–002. 

The revision was necessary as a result 

of the recent ransomware attack on one 

of the Nation’s top pipeline supplies 

and other emerging threat information. 

In order to address the ongoing 

cybersecurity threat to pipeline systems 

and associated infrastructure, TSA 

issued a Security Directive (SD) 

applicable to owner/operators of a 

hazardous liquid and natural gas 

pipeline or liquefied natural gas facility 

notified by TSA that their pipeline 

system or facility is critical. These 

owner/operators are required to review 

Section 7 of TSA’s Pipeline Security 

Guidelines and assess current activities, 

using the TSA Pipeline Cybersecurity 

Self-Assessment form, to address cyber 

risk, and identify remediation measures 

that will be taken to fill those gaps and 

a timeframe for achieving those 

measures. The form provided is based 

on the instrument used for the CFSRs, 

limited to cybersecurity issues and 

augmented to address the scope of the 

SD. The critical pipeline owner/ 

operators are required to report the 

results of this assessment to TSA within 

30 days of issuance of the SD. In 

cooperation with the Cybersecurity and 

Infrastructure Security Agency, TSA 

will use this information to make a 

global assessment of the cyber risk 

posture of the industry. 

TSA is seeking renewal of this 

information collection for the maximum 

three-year approval period. 

To the extent information provided by 

operators for each information 

collection is Sensitive Security 

Information (SSI), TSA will protect in 

accordance with procedures meeting the 

transmission, handling, and storage 

requirements of SSI set forth in 49 CFR 

parts 15 and 1520. 

TSA estimates the annual hour 

burden for the information collection 

related to the voluntary collection of the 

CFSR form to be 320 hours. TSA will 

conduct a maximum of 80 facility 

reviews each year, with each review 

taking approximately 4 hours (320 = 80 

× 4). 

TSA estimates the annual hour 

burden for the information collection 

related to TSA follow ups on the 

recommendations based on the above 

CFSRs made to facility owner/operators 

to be 480 hours. TSA estimates each 

owner/operator will spend 

approximately 2 hours to submit a 

response to TSA regarding its voluntary 

implementation of security 

recommendations made during each 

critical facility visit. If a maximum of 80 

critical facilities are reviewed each year, 

and TSA follows up with each facility 

owner/operator every 6, 12, and 18 

months following the visit, the total 

annual burden is 480 (80 × 2 x 3) hours. 

For the mandatory collection, TSA 

estimates 100 owner/operators will 

complete and submit the Pipeline 

Cybersecurity Self-Assessment form. It 

will take each owner/operator 

approximately 6 hours to complete and 


jbell on DSKJLSW7X2PROD with NOTICES
Federal Register / Vol. 86, No. 123 / Wednesday, June 30, 2021 / Notices 34777 

submit this form, for a total of 600 hours 

(100 × 6). 

The total estimated burden for the 

entire information collection is 1,400 

hours annually—320 hours for the CFSR 

form, 480 hours for the 

recommendations follow-up procedures, 

and 600 hours for the Pipeline 

Cybersecurity Self-Assessment form. 

Dated: June 24, 2021. 

Christina A. Walsh, 

TSA Paperwork Reduction Act Officer, 

Information Technology. 

[FR Doc. 2021–13884 Filed 6–29–21; 8:45 am] 

BILLING CODE 9110–05–P 

DEPARTMENT OF HOMELAND 

SECURITY 

Transportation Security Administration 

Intent To Request Extension From 

OMB of One Current Public Collection 

of Information: Pipeline Operator 

Security Information 

AGENCY: Transportation Security 

Administration, DHS. 

ACTION: 60-Day notice. 

SUMMARY: The Transportation Security 

Administration (TSA) invites public 

comment on one currently approved 

Information Collection Request (ICR), 

Office of Management and Budget 

(OMB) control number 1652–0055, 

abstracted below that we will submit to 

OMB for an extension in compliance 

with the Paperwork Reduction Act 

(PRA). On May 26, 2021, OMB approved 

TSA’s request for an emergency revision 

of this collection to address the ongoing 

cybersecurity threat to pipeline systems 

and associated infrastructure. TSA is 

now seeking to renew the collection as 

it expires on November 30, 2021. The 

ICR describes the nature of the 

information collection and its expected 

burden. Specifically, the collection 

involves the submission of data 

concerning pipeline security incidents, 

appointment of cybersecurity 

coordinators, and coordinators’ contact 

information. 

DATES: Send your comments by August 

30, 2021. 

ADDRESSES: Comments may be emailed 

to TSAPRA@tsa.dhs.gov or delivered to 

the TSA PRA Officer, Information 

Technology (IT), TSA–11, 

Transportation Security Administration, 

6595 Springfield Center Drive, 

Springfield, VA 20598–6011. 

FOR FURTHER INFORMATION CONTACT: 

Christina A. Walsh at the above address, 

or by telephone (571) 227–2062. 

SUPPLEMENTARY INFORMATION: 

Comments Invited 

In accordance with the Paperwork 

Reduction Act of 1995 (44 U.S.C. 3501 

et seq.), an agency may not conduct or 

sponsor, and a person is not required to 

respond to, a collection of information 

unless it displays a valid OMB control 

number. The ICR documentation will be 

available at http://www.reginfo.gov 

upon its submission to OMB. Therefore, 

in preparation for OMB review and 

approval of the following information 

collection, TSA is soliciting comments 

to— 

(1) Evaluate whether the proposed 

information requirement is necessary for 

the proper performance of the functions 

of the agency, including whether the 

information will have practical utility; 

(2) Evaluate the accuracy of the 

agency’s estimate of the burden; 

(3) Enhance the quality, utility, and 

clarity of the information to be 

collected; and 

(4) Minimize the burden of the 

collection of information on those who 

are to respond, including using 

appropriate automated, electronic, 

mechanical, or other technological 

collection techniques or other forms of 

information technology. 

Information Collection Requirement 

OMB Control Number 1652–0055; 

Pipeline Operator Security Information. 

In addition to TSA’s broad 

responsibility and authority for 

‘‘security in all modes of transportation 

. . . including security responsibilities 

. . . over modes of transportation [,]’’ 

see 49 U.S.C. 114, TSA is required to 

issue recommendations for pipeline 

security measures and conduct 

inspections to assess implementation of 

the recommendations. See sec. 1557 of 

the Implementing Recommendations of 

the 9/11 Commission Act of 2007, 

Public Law 110–53 (August 3, 2007). 

Consistent with these requirements, 

TSA produced Pipeline Security 

Guidelines in December 2010 and 2011, 

with an update published in April 2021. 

As the lead Federal agency for 

pipeline security and consistent with its 

statutory authorities, TSA needs to be 

notified of all (1) incidents that may 

indicate a deliberate attempt to disrupt 

pipeline operations and (2) activities 

that could be precursors to such an 

attempt. The Pipeline Security 

Guidelines encourage pipeline operators 

to notify the Transportation Security 

Operations Center (TSOC) via phone or 

email as soon as possible if any of the 

following incidents occurs or if there is 

other reason to believe that a terrorist 

incident may be planned or may have 

occurred: 

• Explosions or fires of a suspicious 

nature affecting pipeline systems, 

facilities, or assets. 

• Actual or suspected attacks on 

pipeline systems, facilities, or assets. 

• Bomb threats or weapons of mass 

destruction threats to pipeline systems, 

facilities, or assets. 

• Theft of pipeline company vehicles, 

uniforms, or employee credentials. 

• Suspicious persons or vehicles 

around pipeline systems, facilities, 

assets, or right-of-way. 

• Suspicious photography or possible 

surveillance of pipeline systems, 

facilities, or assets. 

• Suspicious phone calls from people 

asking about the vulnerabilities or 

security practices of a pipeline system, 

facility, or asset operation. 

• Suspicious individuals applying for 

security-sensitive positions in the 

pipeline company. 

• Theft or loss of Sensitive Security 

Information (SSI) (detailed pipeline 

maps, security plans, etc.). 

When voluntarily contacting the 

TSOC, the Guidelines request pipeline 

operators to provide as much of the 

following information as possible: 

• Name and contact information 

(email address, telephone number). 

• The time and location of the 

incident, as specifically as possible. 

• A description of the incident or 

activity involved. 

• Who has been notified and what 

actions have been taken. 

• The names and/or descriptions of 

persons involved or suspicious parties 

and license plates as appropriate. 

On May 26, 2021, OMB approved 

TSA’s request for an emergency revision 

of this information collection. See ICR 

Reference Number: 202105–1652–002. 

The revision was required as a result of 

the recent ransomware attack on one of 

the Nation’s top pipeline supplies and 

other emerging threat information. TSA 

issued a Security Directive (SD) with 

requirements for TSA-specified critical 

pipeline owner/operators of hazardous 

liquid and natural gas pipelines and 

liquefied natural gas facilities. The SD 

included two new information 

collections. TSA now requires all 

owner/operators subject to the SD’s 

requirements to report cybersecurity 

incidents or potential cybersecurity 

incidents on their information and 

operational technology systems to the 

Cybersecurity & Infrastructure Security 

Agency (CISA) within 12 hours of 

discovery using the CISA Reporting 

System. In addition, the SD requires 

critical pipeline owner/operators to 

appoint cybersecurity coordinators and 

to provide contact information for the 

coordinators to TSA. To ensure that 


jbell on DSKJLSW7X2PROD with NOTICES