SSI is a transportation-security confidentiality regime.
In plain terms. SSI is a transportation-security confidentiality regime. A contractor handling airport, aviation, rail, pipeline, or TSA-related sensitive security information may have marking, use, disclosure, and safeguarding obligations in addition to ordinary contract cybersecurity clauses.
Who it applies to. It applies to covered persons who receive Sensitive Security Information (SSI), including contractors, subcontractors, grantees, and consultants in transportation-security work.
What it requires. In practice, contractors should protect SSI from unauthorized disclosure; limit access to persons with a need to know; follow TSA/DHS marking, handling, and disclosure limits; and treat SSI as a CUI-adjacent protected information category when a contract involves it.
Why it matters. For GovConCyber, the key is to translate the law into contract-performance terms without overstating the source. The page should tell readers whether the requirement affects eligibility, representations, contract performance, flowdowns, data handling, incident response, or enforcement exposure.
Citation. 49 U.S.C. § 114(r); 49 C.F.R. parts 15 and 1520.