U.S. Coast Guard Clarifies Cybersecurity Requirements for Maritime Operators

The U.S. Coast Guard announced that existing security waivers granted under the Maritime Transportation Security Act (MTSA) do not automatically exempt maritime operators from federal cybersecurity requirements that took effect last year. This clarification emphasizes that U.S.-flagged vessels, facilities, and Outer Continental Shelf facilities must still complete a Cybersecurity Assessment and, if appropriate, submit requests for cybersecurity-related waivers by July 16, 2027, reflecting an evolving threat environment where physical security no longer implies low cyber risk.