Guide · four pages · PDF
Nine months to a Coast Guard Cybersecurity Plan.
A plain guide to 33 CFR Part 101, Subpart F for facilities that operate under a Facility Security Plan. Every requirement is cited to the rule.
| Who the rule covers | Coverage follows your Facility Security Plan, not your shoreline. |
| The timeline | What is in force, what is past due, and what is due July 16, 2027. |
| What has to exist | The Cybersecurity Officer, the Assessment, the Plan, and the response plan. |
| The required measures | All nine areas in § 101.650, in plain words. |
| What continues every year | Assessments, training, drills, exercises, and the independent audit. |
| A plan of work | Eight steps, laid out month by month back from the deadline. |
