If your vessel or facility carries a security plan under MTSA, the Coast Guard’s cyber rule now applies to you. The assessment and plan are due July 16, 2027. We get operators across the country there, and we do it without making you overspend.
The Coast Guard added cybersecurity to the security-plan framework that already covers your boats and docks. It is not optional, and the footprint of your systems does not get you out of it.
Even a boat with almost no computers still has to do the assessment. The rule covers inland towing vessels, barges, OSVs, waterfront facilities, and offshore platforms. The Coast Guard turned down requests to leave small towboats out.
Good news: once the assessment is done, the requirements that are impractical for older equipment can usually be met with compensating controls in your plan, not expensive upgrades. That is where we save you money.
You run the boats. We run the paperwork, the assessment, and the standing officer role the rule requires.
The required foundation. We map your IT and OT footprint and document the findings that drive everything else.
We write and submit the plan the Coast Guard approves, integrated with your existing vessel or facility security plan.
A designated Cybersecurity Officer, reachable 24/7, without putting another salaried role on your books.
When a requirement is impractical on older gear, we file the right relief, and only when it is actually needed.
Annual crew training and the recordkeeping the Coast Guard expects to see, kept current and inspection-ready.
The assessment repeats every year and on any sale. We keep you compliant cycle to cycle so it never lapses.
Most compliance shops sell you the most expensive version of everything. We start from what the rule actually lets you document, and price the job to your real footprint.
For older equipment, the rule lets you document practical controls in your plan instead of forcing costly upgrades. We take that path wherever it is allowed.
The assessment tells us your true footprint. A four-boat operation does not need a refinery’s cybersecurity program, and we will not sell you one.
Formal Coast Guard filings are slow. We reserve them for the few requirements that genuinely call for one, and handle the submission for you.
A short call and a simple footprint form. We learn your vessels, systems, and what you already have in place.
We conduct the Cybersecurity Assessment, identify what is critical, and produce the finding record the rule requires.
We write the plan, document compensating controls, and file any waivers, then submit for Coast Guard approval.
We hold the 24/7 officer role, run your annual assessment and training, and keep records inspection-ready.
Tell us how many vessels or facilities you run and where they operate. We will come back with a clear scope and a flat price, no jargon.