New Maritime Cybersecurity Era Begins: Coast Guard Rule Takes Effect

The first phase of the US Coast Guard's final rule, Cybersecurity in the Marine Transportation System (90 FR 6298), took effect July 16, 2025, marking a watershed moment for maritime security. As of that date, all reportable cyber incidents must be reported to the National Response Center immediately upon discovery — a significant shift from previous voluntary reporting practices.

Key Implementation Dates

Under the final rule, other important dates include:

• By January 12, 2026, and annually thereafter, all personnel must complete the training specified in 33 CFR 101.650. New personnel hired after the effective date must complete this training within 30 days of gaining system access.