On January 17, 2025, the US Coast Guard published a final rule titled “Cybersecurity in the Marine Transportation System,” setting a baseline for cybersecurity standards. This rule, which is set to take effect on July 16, 2025, introduces mandatory cybersecurity measures for US-flagged vessels, Outer Continental Shelf facilities, and certain facilities regulated under the Maritime Transportation Security Act of 2002.
This article I co-authored with Andy Lee for MarineLink highlights the implications of the rule on the maritime transportation system. We recommend industry participants begin evaluating their current capabilities and developing comprehensive compliance strategies.
The integration of digital technologies and interconnected systems within the MTS has heightened vulnerability to cyber threats. Recognizing these risks, the USCG’s rule sets a baseline for cybersecurity standards, ensuring entities within the MTS can effectively detect, respond to, and recover from cyber incidents.