TVIB News U.S. Coast Guard

USCG: MSIB 04-19 Cyber Adversaries Targeting Commercial Vessels

Originally published on the Coast Guard Maritime Commons 05/28/2019

The Office of Commercial Vessel Compliance issued Marine Safety Information Bulletin 04-19, “Cyber Adversaries Targeting Commercial Vessels,” to inform the maritime industry of recent email phishing and malware intrusion attempts that targeted commercial vessels. 

Cyber adversaries are attempting to gain sensitive information including the content of an official Notice of Arrival (NOA) using email addresses that pose as an official Port State Control (PSC) authority such as: port @ pscgov.org. Additionally, the Coast Guard has received reports of malicious software designed to disrupt shipboard computer systems. Vessel masters have diligently reported suspicious activity to the Coast Guard National Response Center (NRC) in accordance with Title 33 Code of Federal Regulations (CFR) §101.305 – Reporting, enabling the Coast Guard and other federal agencies to counter cyber threats across the global maritime network. 

As a reminder, suspicious activity and breaches of security must be reported to the NRC at (800) 424- 8802. For cyber attempts/attacks that do not impact the operating condition of the vessel or result in a pollution incident, owners or operators may alternatively report to the 24/7 National Cybersecurity and Communications Integration Center (NCCIC) at (888) 282-0870 in accordance with Policy Letter 08-16, “Reporting Suspicious Activity and Breaches of Security.” When reporting to the NCCIC, it is imperative that the reporting party notify the NCCIC that the vessel is a Coast Guard regulated entity in order to satisfy 33 CFR §101.305 reporting requirements. The NCCIC will in turn forward the report to the NRC, which will then notify the cognizant Coast Guard Captain of the Port. 

The Coast Guards urges maritime stakeholders to verify the validity of the email sender prior to responding to unsolicited email messages. If there is uncertainty regarding the legitimacy of the email request, vessel representatives should try contacting the PSC authority directly by using verified contact information. Additionally, vessel owners and operators should continue to evaluate their cyber defense measures to reduce the effect of a cyber-attack. 

For more information on the NCCIC’s services, cyberrelated information, best practices, and other resources, please visit: https://www.dhs.gov/CISA. The Coast Guard applauds companies and their vessels for remaining vigilant in the identification and prompt reporting of suspicious cyber-related activities. 

Questions pertaining to this bulletin may be directed to the Office of Commercial Vessel Compliance’s Port State Control Division at PortStateControl@uscg.mil.

Click here to access the original post.

USCG: Sub M – Health and Safety Plan

May 9, 2019 – the USCG sent out the following notice via the GovDelivery

This is a reminder of a key 46 CFR Subchapter M implementation milestone that is quickly approaching. On or before July 22, 2019, owners and managing operators of Subchapter M towing vessels must implement a Health and Safety Plan (HSP) and the associated recordkeeping procedures regardless of whether or not the vessel has been issued a Certificate of Inspection (COI). Requirements include general health and safety procedures, identification and mitigation of health and safety hazards, and health and safety training for crewmembers and non-crewmembers.

Towing vessels operating under a Safety Management System (SMS) may already have the elements of the HSP covered within the SMS. For towing vessels that have not incorporated the HSP elements into their SMS, and for towing vessels utilizing the Coast Guard Inspection Option, the HSP would likely be a stand-alone document.

There is no requirement to submit the HSP to the Coast Guard or TPO for approval; however, the plan is subject to review during inspections and audits. Minimum health and safety requirements can be found in 46 CFR Part 140 Subpart E.

For more Coast Guard news, visit their online newsroom here. 

USCG: TSAC Meeting Summary

Reposted from the Maritime Commons

Posted by LT Amy Midgett, Thursday, May 9, 2019

The Towing Safety Advisory Committee (TSAC) held its spring public meeting in Miami, Florida, March 13, 2019. Attendees represented the Coast Guard, the towing and barge industry, engineers, pilots/masters, port authorities, terminal operators, offshore operators, and the public.

After welcoming remarks from Rear Adm. John Nadeau, assistant commandant for prevention policy, the committee deliberated on current tasks, discussed new business, and received public comments.

Highlights from the meeting included:

• Capt. Janet Espino-Young from the 7th District Prevention office discussed the importance of industry partnerships and cooperation in implementation of inspections and recovery efforts after natural disasters.

• A subcommittee recommendation to establish three new workgroups to address 1) hull and stability for inland towing vessels; 2) consistency and clarification of Subchapter M topics; and 3) boundary separations and the impact on offshore/near coastal manning.

• A final report on Task No. 16-03, “Recommendations Regarding Operational Risks Associated with Towing LNG Barges.” Recommendations include how to identify and safely execute a critical tow and familiarization training for tug crews.

• A progress report on Task No. 17-02, “Load Line Exemption Review for River Barges on Lakes Erie and Ontario.” The subcommittee intends to complete an analysis of the ports of refuge named by the petitioner to determine if they will limit the size of the tow for the intended route.

• A presentation by Mr. Erik Johnson from the Office of Commercial Vessel Compliance at Coast Guard Headquarters on the number of new Certificates of Inspection against the goal of 25 percent of the Subchapter M population.

• A presentation from Ms. Melanee Libby regarding the Coast Guard’s 2018 Authorization Act and a new National Towing Safety Advisory Committee that will serve the same function as TSAC. Under the Act, TSAC is permitted to continue operating until Dec. 4, 2020.

The committee also heard public comments on various topics such as Subchapter M implementation for non-traditional tug and barge operations; clarification of types and limits of towing credentials; and a proposal to incorporate frequently asked questions and guidance into Subchapter M.

Copies of the meeting agenda and draft final reports are available on the TSAC Homeport webpage.

Click here to link to the full post from the Maritime Commons.