US Coast Guard Cybersecurity Rules Take Effect July 16

The US Coast Guard's comprehensive cybersecurity regulations became effective July 16, 2025, establishing minimum requirements for all US-flagged vessels, Outer Continental Shelf facilities, and MTSA-regulated facilities. The rules mandate development of Cybersecurity Plans, designation of Cybersecurity Officers, and implementation of cyber risk management measures. Compliance timeline: Owners and operators must submit Cybersecurity Plans by July 16, 2027, with phased implementation based on vessel and facility types. The regulations address the maritime industry's increasing digital interconnectivity and vulnerability to cyber threats. Key requirements: Organizations must conduct cybersecurity assessments identifying IT and OT system risks, implement technical controls including firewalls and network monitoring, prepare incident response plans, and maintain documentation for Coast Guard review. Industry context: The rules follow IMO's 2017 guidelines integrating cyber risk into Safety Management Systems, with US implementation providing specific baseline protections enforceable through inspections and plan approvals.
[Federal Register]

This story is part of the Maritime AI Digest of 10 August 2025.