Top Five Essentials for U.S. Coast Guard Cyber Compliance

Vessel operators must embed cybersecurity into their operational procedures to meet USCG 33 CFR Part 104, writes Nicolas Furgé, President, Cyber, Marlink

As cyber threats continue to grow in both scale and complexity, maritime stakeholders, from shipowners and operators to port facilities are facing new regulatory demands to improve cyber resilience.

The latest cybersecurity rules from the United States Coast Guard (USCG), amending parts 101, 104, 105 and 106 of 33 CFR Sub-chapter F, represent a major shift in how cybersecurity is addressed by U.S.-flagged vessels and U.S. maritime facilities regulated under the Maritime Transportation Security Act (MTSA), including ports and facilities on the Outer Continental Shelf.

These rules, effective from May 22, 2025, with full implementation by 22 May 2027, are not just about technology, they require operational and procedural changes to how maritime cyber risk is managed. Vessel owners and operators will need to go beyond basic IT/OT controls and adopt a structured approach to managing cyber risk within their broader vessel security programs.

Marlink has identified five essential steps to achieving compliance with the USCG regulations that vessel operators need to consider. Each step calls for specific actions needed for compliance and how to prepare for