The struggle to secure the US maritime supply chain continues, as the Coast Guard faces challenges in staffing, training, authority, and cyber expertise. According to a recent report from the Department of Homeland Security’s Office of Inspector General, the industry is hesitant to seek cybersecurity support, and the Coast Guard is unable to adequately provide it.

Despite offering free cybersecurity assistance through their “Cyber Protection Teams” (CPTs) to organizations in the Maritime Transportation System (MTS) since 2021, only 36% of qualifying organizations have taken advantage of this support. The reluctance of the private sector is concerning, especially considering the security vulnerabilities typically uncovered by CPT assessments.

The report also highlighted shortcomings within the Coast Guard itself. CPT inspections of marine facilities and vessels often do not address the full scope of potential cybersecurity threats, as the Coast Guard lacks the authority and training to enforce compliance with standard cybersecurity practices. Additionally, the service branch is facing a shortage of staff with cyber expertise, further complicating their efforts to enhance cybersecurity in the maritime industry.

Earlier this year, the Biden administration issued an executive order empowering the Coast Guard to play a more significant role in private sector security. The Coast Guard now has the authority to lead response efforts after cyber incidents impact facilities, harbors, ports, or vessels. They are also tasked with establishing minimum cybersecurity requirements for the industry. This move aims to leverage the Coast Guard’s sector expertise and existing relationships within the maritime community to enhance cybersecurity measures.

While the Coast Guard has seen an increase in cyber incident reports and vulnerability assessments, the service branch still faces challenges. Some CPT inspectors lack cybersecurity training and understanding, and there are concerns about their ability to enforce recommendations for remediation. The Coast Guard must address these issues to effectively protect the maritime supply chain from cyber threats.

The importance of securing the maritime supply chain was highlighted by recent events such as the Ever Given incident in the Suez Canal and the disruptions caused by the COVID-19 pandemic. Hackers have recognized the value of the Maritime Transportation System (MTS) and are posing a greater threat than ever before. Cyber incidents, including ransomware attacks and espionage from nation-state adversaries, are on the rise, posing significant risks to global supply chains.

Failure to address vulnerabilities in the MTS could lead to physical danger for crew members, marine life, and disruptions to the global supply chain. It is crucial for the Coast Guard and private sector to work together to strengthen cybersecurity measures and protect the integrity of the maritime supply chain. The potential consequences of a cyber attack on the MTS are severe, and proactive measures must be taken to mitigate these risks and ensure the continued operation of maritime industries.

Source link