[Congressional Record Volume 172, Number 106 (Wednesday, June 24, 2026)]
[Senate]
[Pages S3419-S3420]
From the Congressional Record Online through the Government Publishing Office [www.gpo.gov]
SA 6261. Mr. SCHATZ submitted an amendment intended to be proposed by
him to the bill S. 4784, to authorize appropriations for fiscal year
2027 for military activities of the Department of Defense, for military
construction, and for defense activities of the Department of Energy,
to prescribe military personnel strengths for such fiscal year, and for
other purposes; which was ordered to lie on the table; as follows:
At the end of subtitle G of title X, add the following:
SEC. 1094. STRENGTHENING COAST GUARD CYBERSECURITY
AUTHORITIES.
(a) Maritime Cybersecurity Authorities.--Chapter 7 of title
14, United States Code, is amended by adding at the end the
following:
``Sec. 723. Maritime cybersecurity authorities
``(a) Maritime Cyber Threat Information-sharing
Authorities.--
``(1) In general.--The Commandant may receive, analyze, and
share maritime cybersecurity threat indicators,
vulnerabilities, and mitigation information with--
``(A) foreign maritime security partners;
``(B) operators of vessels of the United States (as defined
in section 116 of title 46, United States Code);
``(C) port authorities and maritime critical infrastructure
operators; and
``(D) multinational maritime security centers or fusion
centers.
``(2) Information sharing.--Information sharing under this
subsection shall be conducted--
``(A) in a manner that is consistent with the protection of
classified information, privacy requirements, and applicable
law; and
``(B) in coordination with the Cybersecurity and
Infrastructure Security Agency.
``(b) Cyber Investigative Cooperation.--The Commandant, in
consultation with the Secretary of State, may enter into
bilateral or multilateral arrangements with foreign maritime
law enforcement agencies to support investigations of cyber
and cyber-enabled maritime crime, including digital forensics
cooperation, evidence-sharing arrangements, and coordinated
investigative activities, consistent with United States law
and international agreements.
``(c) Cyber Protection of Coast Guard Assets Deployed.--The
Commandant is authorized to deploy cyber protection teams,
cyber-secure communications systems, and defensive cyber
capabilities aboard Coast Guard cutters, aircraft, and
forward operating sites, including through cooperative
arrangements with the Department of Defense.
``(d) Participation in Regional Cybersecurity Frameworks.--
The Commandant may participate in regional cybersecurity and
maritime security initiatives, working groups, and exercises
for the purpose of improving maritime cyber resilience,
enhancing interoperability, and strengthening collective
cyber-maritime security.
``(e) Cybersecurity Engagement.--Notwithstanding section
710, the Commandant, in consultation with the Secretary of
State, may conduct cybersecurity-related engagement,
training, technical assistance, and capacity-building
activities with foreign maritime agencies and port
authorities for the purpose of enhancing maritime
cybersecurity, cyber-incident response, and cyber-risk
mitigation.''.
(b) Cybersecurity of Foreign Ports Critical to United
States Supply Chains.--Section 70108 of title 46, United
States Code, is amended--
[(1) in subsection (a)(2), by inserting ``, including a
cybersecurity risk or other cybersecurity vulnerability''
after ``security risk''; and[SLC Note: The text you put in
the edits does not make sense with current law in the place
where you indicated to put it. So I have reverted to the
previous version of the text,
[[Page S3420]]
because I believe you and my colleague Katie had discussed
this issue previously.]]
(2) by adding at the end the following:
``(h) Cybersecurity Assessments.--The Commandant of the
Coast Guard may--
``(1) conduct cybersecurity-focused assessments of foreign
ports that may pose a significant risk to the security or
resilience of the maritime transportation system of the
United States; and
``(2) may provide technical assistance to such ports to
address identified cyber vulnerabilities.''.
(c) Annual Report on Maritime Cybersecurity Threats and
Coast Guard Capacity.--
(1) In general.--Not later than 1 year after the date of
the enactment of this Act, and annually thereafter, the
Commandant shall submit to the Committee on Commerce,
Science, and Transportation of the Senate and the Committee
on Transportation and Infrastructure of the House of
Representatives a report on Coast Guard cybersecurity
activities.
(2) Elements.--The report required by paragraph (1) shall
include the following:
(A) A detailed description of significant maritime
cybersecurity threats, trends, and incidents, including
threats to ports, shipping companies, maritime logistics
networks, and Coast Guard assets.
(B) A summary of Coast Guard cybersecurity enforcement
actions, investigations, and compliance activities conducted
during the preceding year.
(C) An assessment of Coast Guard workforce capacity,
including hiring, retention, training, and workforce
development needs related to cybersecurity missions.
(D) An evaluation of coordination with foreign maritime law
enforcement agencies, United States allies, and regional
cybersecurity frameworks.
(E) Recommendations for additional authorities, resources,
or international agreements needed to strengthen maritime
cybersecurity.
(3) Form.--Each report required by paragraph (1) shall be
submitted in unclassified form but may include a classified
annex.
______