Deadline calendar
Public dates for the six modes: rule compliance dates, directive expirations, rules taking effect and comment deadlines. Each date links to the official text it comes from.
Check the official textDates are copied from public documents and may change. Whether a date applies to you depends on your designation and the official text. Confirm with the issuing agency or your counsel.
Not shown: due dates on CISA's Known Exploited Vulnerabilities list. Those bind federal agencies, not transportation operators; they appear on each vulnerability's own page.
Add to your calendar
Download a calendar file and open it in Outlook, Google Calendar or Apple Calendar. Each file holds every date below for that mode, past and upcoming. Downloading a file does not subscribe you to updates; download it again later for new dates.
- All modes (.ics)
- Maritime (.ics)
- Pipeline (.ics)
- Freight rail (.ics)
- Passenger rail and transit (.ics)
- Highway and motor carrier (.ics)
- Postal and parcel (.ics)
Maritime
| Date | What | Details |
|---|---|---|
| July 16, 2027 | Officer named | Coast Guard cyber rule: Cybersecurity Officer named in writing The final rule lists naming the Cybersecurity Officer in writing among the steps due within 24 months of the July 16, 2025 effective date. Source: Federal Register, January 17, 2025 (90 FR 6298) · checked November 7, 2026 |
| July 16, 2027 | Plan due | Coast Guard cyber rule: Cybersecurity Plans due to the Coast Guard Cybersecurity Plans must be submitted to the Coast Guard for review and approval no later than this date. Source: 33 CFR 101.655 (eCFR) · checked November 7, 2026 |
| July 16, 2027 | Assessment due | Coast Guard cyber rule: first Cybersecurity Assessment due A Cybersecurity Assessment must be done no later than this date, then every year (sooner after a change of ownership). Source: 33 CFR 101.650(e)(1) (eCFR) · checked November 7, 2026 |
Past dates (11)
| Date | What | Details |
|---|---|---|
| January 12, 2026 | Training due | Coast Guard cyber rule: first cybersecurity training due All personnel must complete the rule's cybersecurity training by this date, then every year. Key personnel also complete extra training by this date. Applies to U.S.-flagged vessels, facilities and Outer Continental Shelf facilities covered by the rule. Source: 33 CFR 101.650(d)(4) (eCFR) · checked November 7, 2026 |
| July 16, 2025 | Rule takes effect | Cybersecurity in the Marine Transportation System Final rule from Coast Guard takes effect. Source: Federal Register |
| March 18, 2025 | Comments close | Coast Guard cyber rule: comments closed on a possible delay for U.S.-flagged vessels The Coast Guard asked for comments on a possible 2- to 5-year delay of the rule's dates for U.S.-flagged vessels. As of November 7, 2026, the rule text on eCFR still shows the dates above. Source: Federal Register, January 17, 2025 (90 FR 6298) · checked November 7, 2026 |
| February 14, 2025 | Comments close | Request for Comment on the National Cyber Incident Response Plan Update Public comment period closes. Notice from Department of Homeland Security (CISA). Source: Federal Register · all modes |
| January 15, 2025 | Comments close | Request for Comment on the National Cyber Incident Response Plan Update Public comment period closes. Notice from Department of Homeland Security (CISA). Source: Federal Register · all modes |
| July 3, 2024 | Comments close | Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA) Reporting Requirements; Extension of Comment Period Public comment period closes. Proposed Rule from Department of Homeland Security (CISA). Source: Federal Register · all modes |
| June 3, 2024 | Comments close | Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA) Reporting Requirements Public comment period closes. Proposed Rule from Department of Homeland Security (CISA). Source: Federal Register · all modes |
| May 22, 2024 | Comments close | Cybersecurity in the Marine Transportation System Public comment period closes. Proposed Rule from Coast Guard. Source: Federal Register |
| April 22, 2024 | Comments close | Cybersecurity in the Marine Transportation System Public comment period closes. Proposed Rule from Coast Guard. Source: Federal Register |
| April 4, 2024 | Comments close | Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA) Reporting Requirements; Correction Public comment period closes. Proposed Rule from Department of Homeland Security (CISA). Source: Federal Register · all modes |
| February 20, 2024 | Comments close | Request for Information on “Shifting the Balance of Cybersecurity Risk: Principles and Approaches for Secure by Design Software” Public comment period closes. Notice from Department of Homeland Security (CISA). Source: Federal Register · all modes |
Pipeline
| Date | What | Details |
|---|---|---|
| January 15, 2027 | Directive expires | TSA Security Directive Pipeline-2021-01G expires Expiration date printed on the directive (effective January 16, 2026). TSA has renewed this series with a new lettered revision in past years; Watch shows a new revision when TSA posts one. Source: SD Pipeline-2021-01G (TSA, PDF) · checked November 7, 2026 |
| May 2, 2027 | Directive expires | TSA Security Directive Pipeline-2021-02G expires Expiration date printed on the directive (effective May 3, 2026). TSA has renewed this series with a new lettered revision in past years; Watch shows a new revision when TSA posts one. Source: SD Pipeline-2021-02G (TSA, PDF) · checked November 7, 2026 |
Past dates (13)
| Date | What | Details |
|---|---|---|
| October 1, 2026 | Comments close | Revision of Agency Information Collection Activity Under OMB Review: Cybersecurity Measures for Surface Modes Public comment period closes. Notice from Transportation Security Administration. Source: Federal Register |
| June 15, 2026 | Comments close | Intent To Request a Revision From OMB of One Current Public Collection of Information: Cybersecurity Measures for Surface Modes Public comment period closes. Notice from Transportation Security Administration. Source: Federal Register |
| February 2, 2026 | Comments close | Revision of Agency Information Collection Activity Under OMB Review: Pipeline Corporate Security Reviews and TSA Security Directive Pipeline-2021-02 Series Public comment period closes. Notice from Transportation Security Administration. Source: Federal Register |
| September 30, 2025 | Comments close | Intent To Request a Revision From OMB of One Current Public Collection of Information: Pipeline Corporate Security Reviews and TSA Security Directive Pipeline-2021-02 series Public comment period closes. Notice from Transportation Security Administration. Source: Federal Register |
| July 2, 2025 | Comments close | Extension of Agency Information Collection Activity Under OMB Review: Pipeline Operator Security Information Public comment period closes. Notice from Transportation Security Administration. Source: Federal Register |
| February 14, 2025 | Comments close | Request for Comment on the National Cyber Incident Response Plan Update Public comment period closes. Notice from Department of Homeland Security (CISA). Source: Federal Register · all modes |
| February 5, 2025 | Comments close | Enhancing Surface Cyber Risk Management Public comment period closes. Proposed Rule from Transportation Security Administration. Source: Federal Register |
| January 15, 2025 | Comments close | Request for Comment on the National Cyber Incident Response Plan Update Public comment period closes. Notice from Department of Homeland Security (CISA). Source: Federal Register · all modes |
| January 14, 2025 | Comments close | Intent To Request Extension From OMB of One Current Public Collection of Information: Pipeline Operator Security Information Public comment period closes. Notice from Transportation Security Administration. Source: Federal Register |
| July 3, 2024 | Comments close | Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA) Reporting Requirements; Extension of Comment Period Public comment period closes. Proposed Rule from Department of Homeland Security (CISA). Source: Federal Register · all modes |
| June 3, 2024 | Comments close | Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA) Reporting Requirements Public comment period closes. Proposed Rule from Department of Homeland Security (CISA). Source: Federal Register · all modes |
| April 4, 2024 | Comments close | Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA) Reporting Requirements; Correction Public comment period closes. Proposed Rule from Department of Homeland Security (CISA). Source: Federal Register · all modes |
| February 20, 2024 | Comments close | Request for Information on “Shifting the Balance of Cybersecurity Risk: Principles and Approaches for Secure by Design Software” Public comment period closes. Notice from Department of Homeland Security (CISA). Source: Federal Register · all modes |
Freight rail
| Date | What | Details |
|---|---|---|
| January 15, 2027 | Directive expires | TSA Security Directive 1580-21-01E (freight rail) expires Expiration date printed on the directive (effective January 16, 2026). TSA has renewed this series with a new lettered revision in past years; Watch shows a new revision when TSA posts one. Source: SD 1580-21-01E (TSA, PDF) · checked November 7, 2026 |
| May 2, 2027 | Directive expires | TSA Security Directive 1580/82-2022-01E (rail mitigation actions and testing) expires Expiration date printed on the directive (effective May 3, 2026). TSA has renewed this series with a new lettered revision in past years; Watch shows a new revision when TSA posts one. Source: SD 1580/82-2022-01E (TSA, PDF) · checked November 7, 2026 |
Past dates (9)
| Date | What | Details |
|---|---|---|
| October 1, 2026 | Comments close | Revision of Agency Information Collection Activity Under OMB Review: Cybersecurity Measures for Surface Modes Public comment period closes. Notice from Transportation Security Administration. Source: Federal Register |
| June 15, 2026 | Comments close | Intent To Request a Revision From OMB of One Current Public Collection of Information: Cybersecurity Measures for Surface Modes Public comment period closes. Notice from Transportation Security Administration. Source: Federal Register |
| February 14, 2025 | Comments close | Request for Comment on the National Cyber Incident Response Plan Update Public comment period closes. Notice from Department of Homeland Security (CISA). Source: Federal Register · all modes |
| February 5, 2025 | Comments close | Enhancing Surface Cyber Risk Management Public comment period closes. Proposed Rule from Transportation Security Administration. Source: Federal Register |
| January 15, 2025 | Comments close | Request for Comment on the National Cyber Incident Response Plan Update Public comment period closes. Notice from Department of Homeland Security (CISA). Source: Federal Register · all modes |
| July 3, 2024 | Comments close | Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA) Reporting Requirements; Extension of Comment Period Public comment period closes. Proposed Rule from Department of Homeland Security (CISA). Source: Federal Register · all modes |
| June 3, 2024 | Comments close | Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA) Reporting Requirements Public comment period closes. Proposed Rule from Department of Homeland Security (CISA). Source: Federal Register · all modes |
| April 4, 2024 | Comments close | Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA) Reporting Requirements; Correction Public comment period closes. Proposed Rule from Department of Homeland Security (CISA). Source: Federal Register · all modes |
| February 20, 2024 | Comments close | Request for Information on “Shifting the Balance of Cybersecurity Risk: Principles and Approaches for Secure by Design Software” Public comment period closes. Notice from Department of Homeland Security (CISA). Source: Federal Register · all modes |
Passenger rail and transit
| Date | What | Details |
|---|---|---|
| January 15, 2027 | Directive expires | TSA Security Directive 1582-21-01E (public transportation and passenger railroads) expires Expiration date printed on the directive (effective January 16, 2026). TSA has renewed this series with a new lettered revision in past years; Watch shows a new revision when TSA posts one. Source: SD 1582-21-01E (TSA, PDF) · checked November 7, 2026 |
| May 2, 2027 | Directive expires | TSA Security Directive 1580/82-2022-01E (rail mitigation actions and testing) expires Expiration date printed on the directive (effective May 3, 2026). TSA has renewed this series with a new lettered revision in past years; Watch shows a new revision when TSA posts one. Source: SD 1580/82-2022-01E (TSA, PDF) · checked November 7, 2026 |
Past dates (9)
| Date | What | Details |
|---|---|---|
| October 1, 2026 | Comments close | Revision of Agency Information Collection Activity Under OMB Review: Cybersecurity Measures for Surface Modes Public comment period closes. Notice from Transportation Security Administration. Source: Federal Register |
| June 15, 2026 | Comments close | Intent To Request a Revision From OMB of One Current Public Collection of Information: Cybersecurity Measures for Surface Modes Public comment period closes. Notice from Transportation Security Administration. Source: Federal Register |
| February 14, 2025 | Comments close | Request for Comment on the National Cyber Incident Response Plan Update Public comment period closes. Notice from Department of Homeland Security (CISA). Source: Federal Register · all modes |
| February 5, 2025 | Comments close | Enhancing Surface Cyber Risk Management Public comment period closes. Proposed Rule from Transportation Security Administration. Source: Federal Register |
| January 15, 2025 | Comments close | Request for Comment on the National Cyber Incident Response Plan Update Public comment period closes. Notice from Department of Homeland Security (CISA). Source: Federal Register · all modes |
| July 3, 2024 | Comments close | Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA) Reporting Requirements; Extension of Comment Period Public comment period closes. Proposed Rule from Department of Homeland Security (CISA). Source: Federal Register · all modes |
| June 3, 2024 | Comments close | Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA) Reporting Requirements Public comment period closes. Proposed Rule from Department of Homeland Security (CISA). Source: Federal Register · all modes |
| April 4, 2024 | Comments close | Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA) Reporting Requirements; Correction Public comment period closes. Proposed Rule from Department of Homeland Security (CISA). Source: Federal Register · all modes |
| February 20, 2024 | Comments close | Request for Information on “Shifting the Balance of Cybersecurity Risk: Principles and Approaches for Secure by Design Software” Public comment period closes. Notice from Department of Homeland Security (CISA). Source: Federal Register · all modes |
Highway and motor carrier
No upcoming public dates found for this mode.
Past dates (7)
| Date | What | Details |
|---|---|---|
| February 14, 2025 | Comments close | Request for Comment on the National Cyber Incident Response Plan Update Public comment period closes. Notice from Department of Homeland Security (CISA). Source: Federal Register · all modes |
| February 5, 2025 | Comments close | Enhancing Surface Cyber Risk Management Public comment period closes. Proposed Rule from Transportation Security Administration. Source: Federal Register |
| January 15, 2025 | Comments close | Request for Comment on the National Cyber Incident Response Plan Update Public comment period closes. Notice from Department of Homeland Security (CISA). Source: Federal Register · all modes |
| July 3, 2024 | Comments close | Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA) Reporting Requirements; Extension of Comment Period Public comment period closes. Proposed Rule from Department of Homeland Security (CISA). Source: Federal Register · all modes |
| June 3, 2024 | Comments close | Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA) Reporting Requirements Public comment period closes. Proposed Rule from Department of Homeland Security (CISA). Source: Federal Register · all modes |
| April 4, 2024 | Comments close | Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA) Reporting Requirements; Correction Public comment period closes. Proposed Rule from Department of Homeland Security (CISA). Source: Federal Register · all modes |
| February 20, 2024 | Comments close | Request for Information on “Shifting the Balance of Cybersecurity Risk: Principles and Approaches for Secure by Design Software” Public comment period closes. Notice from Department of Homeland Security (CISA). Source: Federal Register · all modes |
Postal and parcel
No upcoming public dates found for this mode.
Past dates (6)
| Date | What | Details |
|---|---|---|
| February 14, 2025 | Comments close | Request for Comment on the National Cyber Incident Response Plan Update Public comment period closes. Notice from Department of Homeland Security (CISA). Source: Federal Register · all modes |
| January 15, 2025 | Comments close | Request for Comment on the National Cyber Incident Response Plan Update Public comment period closes. Notice from Department of Homeland Security (CISA). Source: Federal Register · all modes |
| July 3, 2024 | Comments close | Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA) Reporting Requirements; Extension of Comment Period Public comment period closes. Proposed Rule from Department of Homeland Security (CISA). Source: Federal Register · all modes |
| June 3, 2024 | Comments close | Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA) Reporting Requirements Public comment period closes. Proposed Rule from Department of Homeland Security (CISA). Source: Federal Register · all modes |
| April 4, 2024 | Comments close | Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA) Reporting Requirements; Correction Public comment period closes. Proposed Rule from Department of Homeland Security (CISA). Source: Federal Register · all modes |
| February 20, 2024 | Comments close | Request for Information on “Shifting the Balance of Cybersecurity Risk: Principles and Approaches for Secure by Design Software” Public comment period closes. Notice from Department of Homeland Security (CISA). Source: Federal Register · all modes |