Maritime Cybersecurity Act

The Maritime Cybersecurity Act requires owners and operators of covered maritime facilities to annually report on the software and hardware they use, specifically focusing on equipment connected to the internet or manufactured by foreign entities of concern. Under this bill, the Secretary of Transportation must conduct assessments of these systems to identify security weaknesses, even if doing so violates existing contracts or requires bypassing consent from facility owners. The legislation mandates that facilities generally cannot use unassessed foreign technology unless the Secretary grants a waiver based on a determination that the commercial benefits outweigh the low national security risks. Additionally, the Act establishes a process for the government to share sensitive cybersecurity findings with relevant federal partners while keeping the specific details confidential from the public.