Kubernetes - Cybersecurity Gets Underway With FAQ Guidance From The Coast Guard

The US Coast Guard's Final Rule regarding Cybersecurity in the Marine Transportation System (MTS) became effective July 16, 2025, with respect to "the owners and operators of US-flagged vessels, facilities, and OCS facilities required to have a security plan under 33 CFR parts 104, 105, and 106." 33 C.F.R. §101.605(a). The Coast Guard's now-active regulatory cybersecurity mission has a through line to the origins of maritime commerce: the etymology of the term "cyber" derives from the ancient Greek word kubernētēs, meaning "helmsman" or "pilot" of a vessel.

As reported by Jones Walker colleagues Andy Lee and Ilsa Luther, the initial enforcement phase focuses on ensuring reportability of all cyber incidents (defined at 33 C.F.R. §101.615). However, domestic vessel and offshore facility owners/operators need to focus now on preparing for the final July 16, 2027, deadline for compliance with the remainder of the Final Rule, including identifying and hiring qualified