NATIONAL MARITIME CYBERSECURITY PLAN Expanded vessel automation emphasizes the need for the integrity of data and availability of digital services. Rapidly increasing numbers of internet-connected devices, known as the IoT, and the rollout of 5G networks will add enhanced connectivity options, which will require strict security, integrity, and confidentiality requirements. 35 Threats from state and non-state adversaries pose a particular threat to supply chains that will require collaboration between private, public, and international stakeholders. Advanced 24/7 cybersecurity technology is critical to monitor and mitigate current and near-term threats rapidly. It is not enough to respond and recover. Cybersecurity technology needs to be able to prevent and remediate intrusions. Private Sector ISAC-like organizations have the ability to share best practices amongst partners and peers, but also glean best practices from the public sector, which may contribute to broader community training and education regimes to inculcate a stronger maritime cybersecurity culture. 36 These “for industry, by industry” information sharing centers serve as trusted, well-established, efficient threat information brokers within most other critical infrastructure sectors. Their partnerships with industry stakeholders and with government resources insure timely threat information sharing, anonymized reporting, and critical industry expertise in discussions and responses to cyber and other threats. While ISAC-like organizations do exist within the maritime sector, they do not currently cooperate with each other and have not attained broad industry or government acceptance. 35 Milo Medin and Gilman Louie, 5G Ecosystem Risks and Opportunities (Washington D.C.: DOD Defense Innovation Board, 03-April 2019). 36 Currently, United States maritime industry stakeholders are unclear on whether they should share cyber threat information within trusted industry enclaves and when they should report maritime cybersecurity incidents to the United States Coast Guard National Response Center, their local USCG Captain of the Port, CISA’s National Cybersecurity and Communications Integration Center (NCCIC), their local FBI field office, and/or the FBI’s 24/7 Cyber Watch (CyWatch). A-9