The Maritime Cybersecurity Act requires the U.S. Coast Guard to assess cybersecurity risks in software and hardware used at maritime facilities and ports, working with the Cybersecurity and Infrastructure Security Agency. Within one year of enactment and annually thereafter, facility owners and operators must report to the Coast Guard any foreign-made software or hardware they use, along with any cybersecurity incidents or risks they have identified. Facilities must ensure their software and hardware meets National Institute of Standards and Technology security standards, though the Secretary can grant waivers if national security risks are low and outweighed by commercial benefits. The Coast Guard and cybersecurity agency must submit annual reports to Congress about their findings and recommendations for strengthening maritime security. This legislation applies to maritime facilities and ports covered under existing federal transportation security regulations.
Take Action
Your position
Add a comment
to comment on this bill.
Annotate the text
Highlight any passage on the Summary or Full Text tab to attach a note. Annotations appear on the Annotations tab.