The U.S. Coast Guard ’ s Cyber Strategy issued in 2015 “ established internet as a new functional domain for the U.S. Coast Guard, ” noted Commandant Adm. Karl Schultz, and the fresh expectation “ reaffirms that initiation and that we will bring the lapp ethos, proved doctrine and operational concepts, and over 230 years of experience to bear on our operations in and through internet. ”
“ The events of the last five years, including the exploitation of U.S. Coast Guard networks and information, the attacks on nautical critical infrastructure, and adversarial efforts to undermine our democratic processes – not barely by exploiting networks, but by negatively shaping information – reinforce that internet is a contest domain, ” Schultz wrote at the beginning of the composition. “ Working in close collaboration with the Department of Homeland Security ( DHS ), the Department of Defense ( DOD ), our government partners, alien allies, and the nautical diligence, we will act to protect the marine transportation system system from threats delivered in and through internet and we will hold accountable those who would do our state damage through attacks on our networks, operations, or the Marine Transportation System ( MTS ). ”
The mentality highlights some key challenges in the cyber landscape : Every 39 seconds a hacker attacks. The modal monetary value of a datum gap final year was $ 3.86 million. In the beginning half of 2020, 36 billion records were exposed by data breaches. The median time it took to identify a breach was 207 days. The average lifecycle of a gap was 280 days.
More than 500 major operational technology cyber attacks hit the marine diligence in 2020. twenty-five percentage of the area ’ s gross domestic merchandise flows through the Marine Transportation System .
The Coast Guard will “ apply the lapp prove risk management framework ” used to confront physical threats to “ the prevention and extenuation of cyber risks to the Marine Transportation System… the U.S. Coast Guard ’ randomness risk management approach for all hazards and threats is applicable to those delivered in and through internet. ”
“ Cyberspace is a U.S. Coast Guard operational sphere. modern nautical commerce occurs both on the seas and in internet. We will execute operations, including cyber operations, to protect American commerce and the international rules-based order that has provided wealth and prosperity for the nations of the world, ” the expectation says. “ The U.S. Coast Guard will hold accountable those who use internet to undermine the security system of our nation and the Marine Transportation System. ”
Cyber response actions are grouped in three lines of campaign : defend and operate the enterprise mission platform, protect the Marine Transportation System ; and operate in and through internet .
In the first base line of feat, the institution of CGCYBER and the “ use of intelligence, operational plans, and objectives into the defense and mathematical process of our EMP enables the U.S. Coast Guard to keep tempo with operational requirements. ”
Goals are to :
Read more: How Maritime Law Works
- “Invest, develop, and acquire capabilities to detect, prevent, respond, and be resilient against adversaries who seek to disrupt U.S. Coast Guard operational assets.
- Invest in capabilities – sensors, automation, artificial intelligence, cloud architecture and mobility – to provide a persistently monitored, secure, and resilient environment for U.S. Coast Guard operations.
- Proactively assess and strengthen the cybersecurity of our supply chains, major systems, and information dependent assets to anticipate and remove attack vectors.
- Seek further interoperability with U.S. Cyber Command and the Joint Force, and continue to leverage DOD architecture, intelligence, and information capabilities as a member of the DODIN enterprise.
- Create a capable workforce to detect and defend against adversaries who seek to disrupt U.S. Coast Guard land, sea, air, and space command and control systems.
- Develop and employ cyberspace operational forces trained, ready, postured, and organized to project national and U.S. Coast Guard power in the defense and operation of our networks, systems, and information.
- Develop and implement doctrine and tactics, techniques, and procedures to protect U.S. Coast Guard information and sustain mission outcomes in a contested cyberspace environment.”
The second line of effort “ will require prioritization of cyber operations, capabilities, and work force, aboard partnership with other government agencies and the private sector ” to protect nautical transportation that “ is inherently both global and commercial. ”
“ Cyber risk management must involve proactive actions taken by the nautical diligence and be overseen by competent authorities, ” the expectation continues. “ Underpinning these actions are : ( 1 ) acknowledgment that information security and the unimpeded stream of data are full of life to maritime department of transportation ; ( 2 ) haunting monitoring of organizational information as it is generated, manipulated, shared, and stored ; and ( 3 ) awareness of ever-evolving threats to the nautical exile sector. ”
To protect the MTS, the U.S. Coast Guard aims to :
- “Apply the prevention and response framework for industry to manage cyber risks to maritime critical infrastructure in alignment with national and DHS cyber strategies.
- Refine cybersecurity incident reporting requirements and promote information sharing to improve the ability of owners and operators to prepare for, mitigate, and respond to threats to maritime critical infrastructure.
- Characterize threats through adversary intent and capability and promulgate threat advisories to the maritime community to reduce the unpredictability of cyber incidents.
- Implement a risk based regulatory, compliance and assessment regime, incorporating international and industry recognized industry cybersecurity standards, to manage cybersecurity threat risks to maritime critical infrastructure and promote the lawful exchange of goods and services in the global marketplace.
- Impose cost to those who act to undermine the security of this vital resource.
- Develop expertise in cybersecurity of maritime IT/OT within the U.S. Coast Guard workforce in support of prevention and response activities.
- Field deployable Cyber Protection Teams, interoperable with the DOD Joint Force and DHS, to augment COTPs in the execution of time critical or nationally significant prevention and response activities.
- Deploy CGCYBER forces to oversee, advise, and support a coordinated response in the event of a cybersecurity incident.
- Use the COTP (serving as the Federal Maritime Security Coordinator) to coordinate with federal, state, local, territorial, tribal, and industry partnerships to develop and exercise nested maritime cybersecurity incident response plans under the guidance from AMSCs and other relevant authorities.
- Coordinate with DHS, interagency partners, and partner nations to support maritime cybersecurity capacity building, training, and port security risk management.”
The third base line of feat stresses that as the USCG operating environment “ has grown increasingly complex ” deputation achiever “ depends on guarantee, unimpeded entree to data. ”
“ malicious actors apply their circumscribed resources to exploit internet to further their illegitimate and covert activities driven by : relatively depleted cost, ease of entree, obfuscation of beginning, and constrained responses under international law, ” the strategy states. “ While we mitigate threats to U.S. Coast Guard networks and operations, we will besides enhance U.S. Coast Guard missions by conducting operations in and through internet to counter the ability of multinational criminal organizations, hostile nation-states, and unaffiliated criminals to use internet for illicit nautical action. ”
Goals are to :
- “Leverage relationships with the Intelligence Community, DOD, Federal Law Enforcement, and foreign allies to employ intelligence, surveillance, and reconnaissance to illuminate adversaries in cyberspace.
- Equip operational commanders with requisite doctrine and innovative capability to plan, use, and integrate cyberspace and enabling activities into U.S. Coast Guard plans and operations across all missions.
- Field Cyber Mission Teams and Cyber Support Teams, interoperable with the Joint Force and DHS, to conduct full spectrum cyberspace operations.
- Ensure cyber enabling activities and cyberspace operations are embedded into the operational planning cycle at the Area and District levels.
- Extend cyber operations through the electromagnetic spectrum in support of operational commanders.”
Partnerships, news, a skilled work force, and initiation are key in tackling threats in the cyber domain, the expectation stresses .
“ Complex interconnected industries and critical infrastructure, like the MTS, are particularly susceptible to the potentially annihilating effects of a cyber attack, ” it states. “ The U.S. Coast Guard has secured and safeguarded the nautical environment for over 230 years. During that fourth dimension we have faced many complex challenges. These trials have honed our operate on concepts, bolstered our capability, and strengthened our resolve. Working in coordination with foreign allies and partners, we will employ these like concepts and capabilities to secure and protect our nation and nautical critical infrastructure from cyber attacks. ”
