Coast Guard Issues Cybersecurity Rule for Maritime Transport Safety

News brief: The U.S. Coast Guard has implemented the final rule 'Cybersecurity in the Marine Transportation System', requiring US‑flagged vessels, OCS facilities, and MTSA‑regulated facilities to develop cybersecurity plans, designate cybersecurity officers, and follow seven mandated account security controls (including automatic lockouts, password management, MFA, least privilege, and credential revocation). The rule takes effect immediately for reporting cyber incidents to the National Response Center, mandates annual personnel training starting Jan 12, 2026, and requires designation of cybersecurity officers, assessments, and plan submission by July 16, 2027, while increasing Port State Control scrutiny for poor cybersecurity practices.