The U.S. Coast Guard released additional policy and implementation guidance to assist regulated maritime entities in complying with cybersecurity regulations. The action establishes baseline cybersecurity requirements for U.S.-flagged vessels, facilities, and Outer Continental Shelf (OCS) facilities to enhance the security and resilience of the marine transportation system. The accompanying guidance is intended to help industry stakeholders and Coast Guard personnel consistently implement and comply with the new requirements as they move toward full regulatory compliance.
The updated policy addresses inspection procedures, oversight expectations, and implementation practices associated with the Towing Safety Management System (TSMS) option and the Coast Guard inspection regime. The agency said the additional guidance is designed to promote consistency in enforcement and compliance activities while supporting the long-term safety, security, and reliability of towing vessel operations across the U.S. maritime transportation system.
It provides guidance for determining the scope of the Cybersecurity Assessment (CSA) required. The policy emphasizes that a cybersecurity assessment is the foundational first step in a continuous maturity process, designed to help organizations align risk management strategies with current threats. Because the outcomes and findings of the CSA form the foundation of the CSP, the initial assessment is highly consequential and should be conducted to identify vulnerabilities, threats, operational dependencies, and interdependencies that could result in an operational disruption or transportation security incident.
Read the rest of the story at Industrial Cyber.
