The U.S. Coast Guard, part of the Department of Homeland Security, published Tuesday a notice in the Federal Register, detailing cyber risk management actions for ship-to-shore (STS) cranes made by Chinese companies. The MARSEC Directive 105-5 underscores growing concerns over potential vulnerabilities in critical maritime infrastructure, particularly those involving foreign-manufactured equipment. The directive adds to the requirements set by MARSEC Directive 105-4 and contains security-sensitive information and, therefore, cannot be made available to the general public.
The MARSEC Directive 105-5 addresses the dominance of STS cranes from PRC companies constitute the largest share of the global STS crane market and nearly 80 percent of those at U.S. ports. These cranes, designed for remote control, servicing, and programming, are susceptible to exploitation, posing a threat to the maritime components of the national transportation system.
Available since Nov. 13, MARSEC Directive 105-5 has outlined additional requirements beyond those in MARSEC Directive 105-4 for cyber risk management by owners or operators of these cranes. Consequently, further measures…