Maritime Cybersecurity News   by CYTUR

  The Coast Guard has published a final rule in the Federal Register to update cybersecurity requirements for U.S.-flagged vessels, Outer Continental Shelf (OCS) facilities, and facilities subject to Maritime Transportation Security Act of 2002 (MTSA).
  This final rule addresses current and emerging cybersecurity threats in the Marine Transportation System (MTS) by adding minimum cybersecurity requirements to help detect risks and respond to and recover from cybersecurity incidents.  These requirements include developing and maintaining a Cybersecurity Plan, designating a Cybersecurity Officer (CySO), and taking various measures to maintain cybersecurity within the MTS.  
  DATES:  This final rule is effective July 16, 2025.

  The evolving landscape of cyber-physical security brings unique challenges to IT (information technology) and OT (operational technology) environments that transcend traditional IT risks. The heightened risks from the industrial Internet of Things (IIoT) and automation necessitate robust strategies for protecting interconnected systems. As industries increasingly rely on IIoT, the potential attack surface expands, making it imperative to address vulnerabilities that could disrupt physical operations. 
  Thus, bridging IT and OT security requires a holistic approach with technological and procedural strategies. This means there should be a unified security framework that might handle as well as monitor IT and OT assets. Risk assessment will therefore be a critical element concerning proper cyber-physical security measures. Through risk assessment, organizations can create security measures based on particular risks to ensure optimal security.