Coast Guard Issues Final Rule On Cybersecurity For U.S. Maritime Sector

The U.S. Coast Guard has published a final rule in the Federal Register to update cybersecurity requirements for:

• U.S.-flagged vessels
• Outer Continental Shelf (OCS) facilities
• Facilities subject to the Maritime Transportation Security Act of 2002 (MTSA)

Key Requirements

• Development and maintenance of a Cybersecurity Plan
• Designation of a Cybersecurity Officer (CySO)
• Implementation of cybersecurity measures to detect, respond to, and recover from incidents

Effective Date

• The rule takes effect July 16, 2025

Potential Delay & Public Comments

• The Coast Guard is considering a 2-to-5-year delay for U.S.-flagged vessels.
• Public comments on this potential delay must be submitted by March 18, 2025, via www.regulations.gov (Docket No. USCG-2022-0802).

Additional Resources

The Coast Guard Maritime Industry Cybersecurity Resource Website will provide:

• A Cyber Regulations Fact Sheet
• Compliance guides for vessels and facilities
• Waiver and Alternative Security Program information

This rule aims to enhance cybersecurity within the Marine Transportation System (MTS) to address growing threats.