Hosted by Cliff Neve, MAD Security’s VP of Maritime Cybersecurity, the session tackled a critical question. How do you meet regulatory mandates while defending operational systems, including operational technology (OT), from increasingly aggressive cyber threats? Expert panelists included Scott Dickerson, the CEO of CISO LLC, and Kyle Rozanitis, Principal Solutions Architect with Elastic.
For maritime contractors and facility operators, this rule isn’t just about passing an assessment. It’s about preventing Transportation Security Incidents (TSIs), avoiding costly disruptions, and building a defensible cybersecurity posture grounded in the NIST Cybersecurity Framework.
Published in January 2025 and enforced as of July 16, the Coast Guard’s rule extends MTSA compliance.
It requires:
| A designated Cybersecurity Officer (CySO) | |
| An updated Cybersecurity Plan | |
| Annual assessments of cyber risk | |
| Documented evidence of operational implementation |
The rule is informed by:
| The NIST Cybersecurity Framework (CSF) | |
| Cybersecurity Performance Goals (CPGs) published by CISA |
This isn’t a checklist. It's a risk-driven framework that demands real operational security, not just paperwork.
The Coast Guard emphasizes network segmentation to isolate OT systems such as propulsion, crane controls, and safety platforms from IT systems.
Without proper segmentation, a breach in an email server or workstation can cascade into critical OT environments. This increases the likelihood of a TSI.
Organizations must train all personnel who interact with IT or OT systems.
The training must cover:
| Recognizing cyber threats | |
| Preventing unauthorized access | |
| Reporting incidents | |
| Role-specific risks and procedures |
This includes contractors, part-time staff, and even non-digital roles with physical access to critical systems. Regular drills are also required to validate incident response plans.
Cyber events that compromise confidentiality, integrity, availability, or operations must be reported per the newly published Navigation and Vessel Inspection Circular (NVIC) 02-24 Change 1.
This includes:
| Unauthorized OT access | |
| Major disruptions | |
| TSI-level events |
Normal noise, such as spam or scanning, does not require reporting. However, judgment and preparation are key. Reports should be made to the National Response Center and DHS CISA, as applicable, per the NVIC change.
Elastic showcased how their platform helps unify IT and OT telemetry for real-time detection, visibility, and compliance reporting. MAD Security integrates Elastic into its SOC-as-a-Service, enabling:
| Unified log collection and normalization | |
| Threat detection using machine learning | |
| AI-powered alert correlation and summarization | |
| Assessment-ready reporting mapped to Coast Guard criteria |
Our maritime-specific value includes:
| Specific Maritime SOC capability, including solutions customized for vessels and ports | |
| Ranked Top 250 MSSPs globally for 5 consecutive years | |
| >85% of clients are defense, federal contractors or maritime | |
| U.S.-based 24/7 SOC in Huntsville, AL | |
| Deep expertise in the Coast Guard Final Rule, NIST Cybersecurity Framework, CISA CPG’s, and NIST 800-171 | |
| Seamless Elastic integration for real-time detection and compliance reporting | |
| Full-spectrum services: SOCaaS, GRC, MDR, Pen Testing, vCISO, and more |
The Coast Guard Final Rule is active. Enforcement has begun.
Delaying action increases risk of:
| Failed assessments or Coast Guard inspections | |
| Lost contracts with DOD prime contractors | |
| Business disruption or OT compromise | |
| Fines, remediation costs, and reputational damage |
Starting early provides:
| Time to scope and segment OT assets, saving time and money in the long run | |
| Strategic alignment with defense requirements | |
| Cost control and reduced operational strain | |
| A defensible cybersecurity story for regulators and clients |
Now is the time to strengthen your maritime cybersecurity posture.
MAD Security and Elastic deliver the integrated visibility, operational insight, and expert support maritime operators need to meet the Coast Guard’s cybersecurity rule and defend critical OT environments with confidence.
Schedule a consultation today to start building a resilient, compliant, and defensible maritime cybersecurity program.
Original Publish Date: January 06, 2026
By: MAD Security