Coast Guard Establishes Office of Maritime Cybersecurity Policy

The U.S. Coast Guard has created the Office of Maritime Cybersecurity Policy (CG-MCP) as the central authority for maritime cybersecurity policy covering ports, vessels, and maritime facilities within the Marine Transportation System. The office is tasked with developing domestic policy, contributing to international standards, directing coordinated compliance and enforcement strategies, and collaborating with industry, academia, and government agencies. This initiative responds to increased cyber risks from expanding use of information and operational technology in the maritime sector and follows a 2025 GAO report highlighting deficiencies in the Coast Guard's cybersecurity incident data, personnel competencies, and strategy alignment. The office will also monitor emerging technologies to help manage cyber risks proactively.

This organizational change aims to improve the cybersecurity posture of the U.S. maritime sector by centralizing policy development and enforcement coordination. It addresses previously identified gaps in incident reporting, personnel qualifications, and strategic planning, potentially reducing vulnerabilities in critical maritime infrastructure. While no specific vulnerabilities or exploits are described, the establishment of this office is expected to enhance the resilience of ports, vessels, and maritime facilities against cyber threats.

No direct mitigation actions are required by external parties as this is an organizational and policy development initiative by the U.S. Coast Guard. The office will lead efforts to improve cybersecurity policies and compliance within the maritime sector. Stakeholders should monitor communications from the Coast Guard for future guidance or requirements stemming from this office's activities.