NATIONAL MARITIME CYBERSECURITY PLAN Security Code provides an opportunity to incorporate a maritime cybersecurity component into foreign port assessments that would not only protect the United States from maritime cyber threats, but also our partners and Allies. The United States will design a framework for port cybersecurity assessments. Federal cargo requires cybersecurity contracting clauses to safeguard the flow of maritime commerce, MTS users, and our economic prosperity. United States Federal agencies will work with the GSA to develop and implement mandatory contractual cybersecurity language for maritime critical infrastructure owned, leased, or regulated by the United States government to decrease cybersecurity risk to the Nation. Partnership with the Federal government is crucial for port owners, shippers, and operators to increase protection and resiliency of IT and OT systems. DHS approves grants to State and local stakeholders to bolster cybersecurity through the Federal Emergency Management Agency (FEMA) Port Security Grant Program. For example, in Fiscal Year 2020, $100,000,000 was available to State and local port stakeholders to enhance port preparedness. 13 DHS will promote cybersecurity grants and initiatives to protect maritime critical infrastructure. Priority Action 4: The United States will develop procedures to identify, prioritize, mitigate, and investigate cybersecurity risks in critical ship and port systems. The United States will examine critical port OT systems for cyber vulnerabilities. A framework for examining port OT systems does not exist; the maritime sector should glean cyber security best practices from other critical infrastructure sectors that test for cyber vulnerabilities within critical systems. For example, the Department of Energy conducts small-scale vulnerability testing to protect electrical power generation and distribution OT systems. Similarly, maritime OT systems would benefit from vulnerability inspections. Findings from these audits may inform cybersecurity mitigation and remediation for MTS users. Incorporating similar best practices could result in a new framework for maritime cybersecurity specialists to test system vulnerabilities, anonymize applicable information, and share those practices across the maritime sector and international partners. The growing dependence on technology demands a maritime cyber-workforce with the capacity and capability to support investigations into major marine casualties and mishaps. Ship and port system vulnerabilities present adversaries with opportunities to masquerade cyber-attacks as accidents. Barring intelligence or law enforcement cueing, these types of incidents could be classified as a traditional major marine casualty or mishap and not attribute the incident to a criminal, or otherwise, nefarious actor(s). Developing and deploying cyber forensics for all major marine casualties and mishaps, when a maritime cyber effect cannot be ruled out, is paramount. The United States will establish a cyber-forensics process for maritime investigations. The Department of Homeland Security (DHS) and the Department of Defense (DOD) will conduct maritime cybersecurity assessments to enhance the protection of port facilities, vessels, and infrastructure from malicious cyber-attacks. Building on existing international frameworks such as the International Ship and Port Facility 13 https://www.fema.gov/grants/preparedness/portsecurity 5