
Eric Geller @ericgeller
Under this approach, TSA could still require specific practices, such as hiring a CISO, but in other areas, such as network segmentation or patching, pipeline companies would get to propose specific ways of meeting the requirements. — PolitiTweet.org