DHS is setting minimum cybersecurity standards for critical companies in the transportation sector, with potentially more requirements on the way.