Owners and operators of more than 200 Chinese-made container cranes at U.S. ports will now have to adhere to new cyber-risk management requirements. The goal of these requirements is to reduce China’s ability to spy on America’s domestic supply chains.
The U.S. Coast Guard recently announced that owners or operators of Chinese manufactured ship-to-shore (STS) container gantry cranes can access Maritime Security Directive 105-4. This directive outlines the necessary cyber-risk management actions related to these cranes. Due to the sensitive security information contained in the directive, it is not available to the general public. Owners and operators of the cranes are instructed to contact their local captain of the port or district commander to obtain a copy of the directive.
The Coast Guard highlighted the importance of this directive due to the prevalence of Chinese-manufactured STS cranes in the U.S. Their technology allows for remote control, service, and programming, making them vulnerable to exploitation and posing a threat to the national transportation system.
As part of a broader maritime cyberagenda, the Coast Guard’s new requirements come after the White House announced initiatives to address cybersecurity risks at U.S. ports. The increasing automation of terminal operations has introduced vulnerabilities that could have significant impacts on America’s ports and economy if exploited.
An executive order signed by President Joe Biden grants the Coast Guard authority to control vessels suspected of cybersecurity threats, inspect suspicious vessels and facilities, and mandate reporting of cyber incidents. Additional cybersecurity requirements for U.S.-flagged vessels, ports, and container terminal operators have also been proposed by the Coast Guard to enhance cybersecurity measures within the maritime industry.
