All Hands-on Deck: The USCG Just Made Cybersecurity Non-Negotiable
Summary: The U.S. Coast Guard will increase Port State Control inspections focused on signs of poor cybersecurity practices, especially those affecting International Safety Management Code compliance on foreign-flagged vessels, with outcomes that could include deficiencies requiring correction, vessel detention, denial of entry, or Captain of the Port action to regulate vessel movement. The MTSA framework requires U.S.-flagged vessels, facilities, and Outer Continental Shelf facilities to designate an internally filled Cybersecurity Officer responsible for the Cybersecurity Assessment, the Cybersecurity Plan, the Cybersecurity Incident Response Plan, and personnel training, with qualifications that include handling Sensitive Security Information and recognizing behavioral patterns of persons likely to threaten security.
Bottom line: A failed inspection can now mean a detained vessel or denied entry, so cybersecurity deficiencies carry direct commercial and operational consequences at U.S. ports. The Cybersecurity Officer role also blends physical and digital duties that most enterprise security teams have never been asked to staff.
Read the original at Dragos Blog ↗
- Topics
- OT / ICS & Critical Infrastructure
- Related
- Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026How to Assess OT Incident Response Preparedness Cyber Risks · Nov 10, 2026Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem Cyber Risks · Nov 10, 2026