perspective, these authorities support the USCG’s role as the Maritime Transportation sector
specific agency.
•
Maritime Transportation Security Act of 2002, Public Law 107-85 (46 U.S.C. § 701).
The Act provides authority for USCG to introduce cybersecurity requirements for both
vessels and facilities through Facility Security Plans and Vessel Security Plans.
Executive Orders
•
Executive Order 13800—Strengthening the Cybersecurity of Federal Networks
and Critical Infrastructure (2017). Directs federal agencies to conduct risk reviews and
prepare reports related to the cybersecurity of federal networks, critical infrastructure,
international cooperation and deterrence, and workforce development.
•
Executive Order 13773—Enforcing Federal Law with Respect to Transnational
Criminal Organizations and Preventing International Trafficking (2017). Sets U.S.
policy to strengthen enforcement of federal law in order to thwart transnational criminal
organizations, to include those engaged in activity related to corruption, cyber crime, fraud,
financial crimes, and intellectual property theft. The Secretary of Homeland Security is
directed to work with the Attorney General, Secretary of State, and Director of National
Intelligence, to implement the executive order.
•
Executive Order 13691—Promoting Private Sector Cybersecurity Information Sharing
(2015). Tasks DHS with encouraging the development and formation of Information Sharing
and Analysis Organizations (ISAOs) and entering into an agreement with a nongovernmental
organization to serve as the ISAO Standards Organization to identify a common set of
voluntary standards or guidelines for the creation and functioning of ISAOs under the
executive order.
•
Executive Order 13636—Improving Critical Infrastructure Cybersecurity (2013).
Directs the Department to increase its cybersecurity information sharing efforts with the
private sector, consult on and promote the National Institute of Standards and Technology
Cybersecurity Framework, and identify, develop, and maintain a list of critical infrastructure
entities where a cybersecurity incident could reasonably result in catastrophic effects on the
Nation.
Other Presidential Direction
•
Presidential Policy Directive 41—Cyber Incident Coordination Policy (2016). Sets forth
principles governing the Federal Government’s response to any cyber incident and, for
significant cyber incidents, establishes an architecture for coordinating the broader response
and recovery efforts, through a Cyber Unified Coordination Group with lead federal agencies
responsible for coordinating respective lines of effort. During a significant incident, DHS,
acting through the NCCIC, is the federal lead agency for asset response activities. DHS also
takes information from a given incident and shares it more broadly, so that others will be
protected against the same or similar threats. During a significant incident, the Department
A-5
Select target paragraph3
Connect to a paragraph
Connect to an entity
Disable highlights
Add to table of contents