As cyber incidents increase, the U.S. Coast Guard’s (USCG’s) Maritime Transportation Security Act (MTSA) cyber rule is pushing maritime organizations to treat cybersecurity as an operational discipline, anchored in training, governance and visibility across information technology (IT) and operational technology (OT).
Cyber risk is increasingly intersecting with safety in the maritime domain. As vessels and port operations become more connected, incidents are rising. Cyber Trust & Resilience for Maritime reported that maritime cyber incidents increased by 103% in 2025 compared with 2024.
Cyber incidents can also cause significant operational disruption, affecting productivity, revenue and recovery costs. Depending on the nature of the attack, organizations may face substantial expenses to restore operations. According to the U.S. Coast Guard’s 2024 Cyber Trends and Insights in the Maritime Environment report, 70% of breached organizations reported that the incident caused significant or very significant disruption. The same year, the average cost of a data breach across industries reached approximately $4.88 million.
Regulators have responded by translating long-standing security expectations into concrete cybersecurity requirements intended to reduce risk and limit the operational impact of future attacks.
In January 2025, the USCG published a final rule that updates requirements for U.S.-flagged vessels, Outer Continental Shelf facilities and MTSA-regulated facilities. The rule became effective July 16, 2025, and it establishes baseline expectations that include role-based training:
All personnel: Foundational cybersecurity awareness (e.g., recognizing phishing and social engineering, maintaining account and device security and security reporting guidelines.
Key personnel: Expanded, role-specific training that emphasizes responsibilities during a cyber incident, escalation paths and maintaining awareness of evolving threats and countermeasures.
OT users: Additional specialized training on protecting operational technology and managing cyber-physical risk in safety-critical environments.
Cybersecurity Officer (CySO): Advanced training focused on program governance, oversight and managing and responding to cyber threats.
