NATIONAL MARITIME CYBERSECURITY PLAN
INFORMATION AND INTELLIGENCE
SHARING
T
exist across other critical infrastructure sectors.
The United States will promote domestic and
international engagement to facilitate
information sharing and best practices to
build a coalition of maritime cybersecurity
advocates.
he unique relationships that exist
between Federal, state, local, tribal, and
territorial governments, industries and
industry associations, and other
maritime information-sharing organizations
present opportunities to address broader
cybersecurity vulnerabilities in the MTS. Port
owners, operators, and tenants rely on nonstandard cybersecurity and information sharing
solutions. Information sharing across public,
private, and international maritime
stakeholders relies on existing partnerships,
information sharing agreements, customer
needs, and regulatory requirements, all of
which bolster maritime cybersecurity defense
and resilience. Organizations such as
Information Sharing and Analysis Centers
provide a pathway to share information across
the private and public sector coordinating
councils. Transparency, sharing information,
and intelligence, as appropriate, are keys to
strengthening the integrity and resilience of the
MTS.
The Federal government will adapt existing
policies and regulations, or create new policies
and regulations, that foster the greatest
transparency without sacrificing proprietary
information to prevent further malicious cyberattacks. The United States will establish
procedures and policies that govern the
receipt and processing of maritime reports of
industry cybersecurity incidents to build a
coalition of maritime cybersecurity
advocates.
Priority Action 2: Share cybersecurity
intelligence with appropriate nongovernment entities.
The United States will create mechanisms to
share unclassified, and when acceptable,
classified information with maritime industry
stakeholders, increasing access to actionable
information to protect maritime IT and OT
networks. Credible and actionable intelligence
is required to strengthen maritime
cybersecurity. Multiple private sector entities
claim to be the information-sharing
clearinghouse for MTS stakeholders.
Overlapping membership across cybersecurity
information sharing organizations creates
barriers to efficiently inform MTS stakeholders
of maritime cybersecurity best practices or
threats. For example, CISA and private sector
Priority Actions
Priority Action 1: Exchange United States
government information with the maritime
industry.
DHS, through the United States Coast Guard
and the Cybersecurity and Infrastructure
Security Agency (CISA), along with the
Federal Bureau of Investigation (FBI) and the
intelligence community, will collaborate to
develop tear-line reporting and talking points
for domestic and international engagement
across the maritime sector. Similar efforts
7
Select target paragraph3
Connect to a paragraph
Connect to an entity
Disable highlights
Add to table of contents