Cybersecurity for MTSA-Regulated Facilities
How to Comply with U.S. Coast Guard Cybersecurity Requirements
Given that maritime facilities operate directly in the middle of the supply chain, a persistent cyber attack could result in significant financial losses—not only to the facility itself but to its upstream and downstream customers. Implementing a solid cybersecurity program is critical to demonstrating proper due diligence.
Cyber risk management varies greatly from facility to facility based on the size and complexity of each facility's cyber systems.
The U.S. Coast Guard makes clear that facilities should conduct effective cybersecurity assessments. A properly performed cybersecurity assessment is a powerful tool to reduce service disruption and threats to employee safety and security that just makes good business sense.
ABS Group has launched a range of cybersecurity services to help waterway facilities throughout the United States implement a cyber risk management program and meet compliance with existing MTSA regulations. Read our primer to learn more.
Understand cyber risk for MTSA compliance.
Access the full article by USCG Captain Dave Nichols (ret.) using the form below, and we will be in touch to discuss cybersecurity for your facility.
Address Cyber Risk in Your Facility Security Plan
As further outlined in the Coast Guard's NVIC 01-20 cybersecurity guidelines, facilities on the Outer Continental Shelf must address cyber risk management in their facility security plans to meet the existing Maritime Transportation Security Act (MTSA) requirements outlined by Congress.
MTSA-regulated facilities must assess, identify and develop a set of risk-based security measures to address cyber risk and demonstrate that their facilities have a cybersecurity plan in place that mitigates the risk of cyber attacks on critical infrastructure.
Cybersecurity Solutions and Services
USCG NVIC 01-20 Readiness Checklist
USCG NVIC 01-20 Guidance Primer
- Mitigation Strategy and Roadmap Template
FSP Annex Template
FSP Annex Integration Procedures
- FSP Annex and Roadmap Template
FSA-Cyber Risk Assessment
FSA-Cyber Vulnerability Assessment Report
8-hour FSO targeted training
- 4-hour FSO/non-FSO training
- 2-hour executive workshop
FSP Annex Integration and Roadmap
FSA-Cyber Vulnerability Assessment Report
- Implementation Strategy and Roadmap
- FSP Annex Development and Deployment
- Integration of Cyber into Facility Emergency Response Plan
- 90-day Drill Templates (integrating cyber into physical)
Cyber Capability Enhancements
Choose from the following capabilities:
- Incident Command Structure (ICS) Integration
- Asset Management
- Security Information and Event Management (SIEM)
- Intrusion Detection/Security Monitoring
Building Cyber Resiliency at Your Facility
First-in-the-Nation Facility Security Officer Training Course
With emphasis on protecting critical information infrastructure within facilities, Facility Security Officers (FSO) have an important role in building cyber resilience and infusing cyber into an existing security program. ABS Group developed the first cybersecurity training course in the U.S. geared towards FSOs to establish a cybersecurity program at regulated facilities. Our training demystifies cyber risk for non-cyber risk professionals, providing an excellent understanding of how cyber can pose a threat to your facility, the tools used by cyber professionals to
assess risk and how cyber vulnerabilities can be addressed in an annex to your port and terminal facility security plan. Learn more about our FSO Cybersecurity training course.
Hear more insights from Brian Shajari, active Coast Guard veteran and cybersecurity advisor.
Risk Matters X.0 Podcast: Cyber Risk Series
Emergency Response and Facility Security Perspectives: "In emergency management, does cybersecurity have a role? Absolutely. The real question is will you realize it soon enough before you have an emergency inside of your emergency." After responding to eight major Gulf Coast hurricanes together as facility security officers, Bryan Markland of Lucite International shares current cyber insights with intelligence professional Brian Shajari. Revisit our first episode in the Cyber Risk Series to hear how the U.S. Coast Guard is responding to cyber threats and keeping the maritime and offshore industries informed.