Bill would mandate yearly cybersecurity checks at US ports

What does this do?

The Maritime Cybersecurity Act would require the Coast Guard, with the Cybersecurity and Infrastructure Security Agency, to annually inspect regulated port and maritime facilities for cybersecurity weaknesses, including foreign-linked equipment like cranes. These checks could happen even without owner permission or despite contract restrictions. Operators would also have to report risky equipment, disclose cyber incidents, and certify compliance with federal standards, or face usage restrictions unless granted a waiver.

Who does it affect?

This affects operators of regulated port and maritime facilities, equipment manufacturers, and federal maritime security agencies. It could indirectly affect the shipping and supply chain industry and consumers through changes in port costs or speed.

Why does it matter?

Facilities may need to replace or upgrade certain foreign-made equipment to maintain compliance, which could raise costs or create new compliance burdens. Disruptions to port equipment use could ripple into broader shipping and supply chain operations.

Where does it stand?