Page 155 of the DSE Cybersecurity knowledge center, with source-backed guidance and practical next steps.
Source-backed guidance for identity, vulnerability reduction, ransomware readiness, detection, response, and recovery.
Under 33 CFR 105, at MARSEC Level 3, in addition to the requirements in this part, a facility owner or operator may be required to implement additional measures, pursuant to 33 CFR part 6, 160, or 165, as appropriate, which may include but are not limited to use of waterborne security patrol.
Read the playbook
Under 33 CFR 105, the rule requires that communication systems and procedures allow effective and continuous communications between the facility security personnel, vessels interfacing with the facility, the cognizant COTP, and national and local authorities with security responsibilities.
Read the briefing
Under 33 CFR 105, the individuals to whom the facility owner or operator must provide the access described in this section include representatives of seafarers' welfare and labor organizations.
Read the checklist
Under 33 CFR 105, the rule requires that each facility owner or operator ensure procedures are established for requesting a DoS and for handling DoS requests from a vessel.
Read the explainer
Under 33 CFR 105, the rule requires that security systems and equipment be in good working order and inspected, tested, calibrated, and maintained according to manufacturers' recommendations.
Read the guide
Under 33 CFR 105, beginning May 8, 2029, facilities that handle Certain Dangerous Cargo in bulk without transferring it to or from a vessel are in TWIC Risk Group A.
Read the playbook
Under 33 CFR 105, a facility owner or operator must implement access-control measures that deter the unauthorized introduction of dangerous substances and devices, including devices intended to harm people, vessels, facilities, or ports.
Read the briefing
Under 33 CFR 105, newly-hired facility employees may be granted the access provided for in paragraph (a) of this section if: the new hire has applied for a TWIC in accordance with 49 CFR part 1572 by completing the full enrollment process, paying the user fee, and is not currently engaged in a waiver or appeal process.
Read the checklist
Under 33 CFR 105, a facility owner or operator must designate restricted areas to protect the facility. Under 33 CFR 105, restricted areas must be clearly marked to show that access is restricted and unauthorized presence constitutes a security breach.
Read the explainer
Under 33 CFR 105, cargo-handling security measures must be implemented to deter tampering. Under 33 CFR 105, MARSEC Level 1 measures must, unless unsafe, routinely check cargo, cargo transport units, and cargo storage areas before and during handling for evidence of tampering.
Read the guide