The new guidance outlines voluntary methods of minimum compliance as applied to the marine bulk liquid transfer sector. It details a methodology industry participants may adopt as a minimum step towards including "a cybersecurity dimension to the facility and vessel security plans required under 33 CFR 104-106." The USCG's guidance suggests industry participants use a risk-based assessment to develop a profile. The profile must be designed to safeguard against cyber intrusion, not simply propose a responsive plan should an attack occur. For maritime bulk transfer industry participants, the framework profile suggests the Coast Guard will heighten the standard of care to include satisfactory levels of self-assessed cybersecurity.
While not prescriptive, the guidelines are perhaps a further development of an evolving standard of care expected of those who are involved with the transfer of bulk liquid cargoes.
USCG Releases Maritime Bulk Liquid Transfer Cybersecurity Framework Profile
The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.