For awareness Medium Awareness
US Coast Guard issues cybersecurity guidance for maritime operators
Industrial Cybermaritime, transport
What happened. The US Coast Guard released NVIC 02-26 to help maritime organisations meet 33 CFR Part 101, Subpart F. It covers naming a Cybersecurity Officer, assessments and plans, due by 16 July 2027, plus penetration testing and IT and OT risk filtering.
Who is affected. Operators of U.S.-flagged vessels, port facilities and Outer Continental Shelf facilities regulated under the Maritime Transportation Security Act.
What to do. Read NVIC 02-26, name a qualified Cybersecurity Officer, and plan the assessment and cybersecurity plan for submission to the Coast Guard by 16 July 2027.
When to act. For awareness: background reading, nothing to schedule
Source: Industrial Cyber (opens industrialcyber.co)
More on Transport