Top Cyber Resources

• CISA Cybersecurity Performance Goals (CPG) - CISA's Cybersecurity Performance Goals are a prioritized subset of information technology (IT) and operational technology (OT) cybersecurity practices that critical infrastructure owners and operators can implement to meaningfully reduce the likelihood and impact of known risks and adversary techniques.
• NIST Cybersecurity Framework (CSF) 2.0 - National Institute for Standards and Technology’s (NIST) updated guidance document to reduce cybersecurity risk.
• CVC-WI-027(3) Vessel Cyber Risk Management Work Instruction - This work instruction provides guidance to Coast Guard Marine Inspectors and Port State Control Officers for assessing cyber hygiene onboard applicable vessels, as well as compliance options if deficiencies are noted. Guidance is also provided for ship owners/managers on reporting requirements if a cybersecurity events, incidents, or casualties.
• Facility Inspector - Cyber Job Aid Rev. 2 - This job aid provides information meant to assist facility inspectors in applying the cyber guidance and regulations when conducting facility inspections and review cyber components of a Facility Security Assessment (FSA) and Facility Security Plan (FSP).
• Maritime Cybersecurity Assessment and Annex Guide (MCAAG) - This document provides a recommended, yet voluntary, process for identifying and describing cybersecurity vulnerabilities in the context of a Facility Security Assessment. It provides a format for creating a cyber annex addition to the Facility Security Plan, which can be used by the Facility Security Officer in close collaboration with the facility’s cybersecurity, information technology and/or operational technology staff.
• 2023 Cyber Trends and Insights in the Marine Environment (CTIME) - This report aims to provide Coast Guard units and their port partners with relevant information to identify and address cyber risks. The Coast Guard recognizes the criticality of the marine environment and its inclusion in the wide range of other critical infrastructure sectors that operate within the marine environment.
• Joint Cybersecurity Advisory - People's Republic of China State-Sponsored Cyber Actor Living off the Land to Evade Detection.
• Joint Cybersecurity Advisory - Identifying and Mitigating Living off the Land Techniques.
• CISA Joint Cybersecurity Advisory Feed - Monitor this feed to stay up to date on other Joint Cybersecurity Advisories, ICS Advisories and Alerts.

Cyber Regulation Guidance

• NVIC 02-24 - REPORTING BREACHES OF SECURITY, SUSPICIOUS ACTIVITY, TRANSPORTATION SECURITY INCIDENTS, AND CYBER INCIDENTS
• Executive Order - Executive Order on Amending Regulations Relating to the Safeguarding of Vessels, Harbors, Ports, and Waterfront Facilities of the United States.