How "Adversarial Nation States" Threaten Port Cyber Security

TESTIMONY OF REAR ADMIRAL WAYNE R. ARGUIN ASSISTANT COMMANDANT FOR PREVENTION POLICY AND REAR ADMIRAL JOHN C. VANN COMMANDER, COAST GUARD CYBER COMMAND ON “PORT CYBERSECURITY: THE INSIDIOUS THREAT TO U.S. MARITIME PORTS” BEFORE THE HOUSE COMMITTEE ON HOMELAND SECURITY TRANSPORTATION & MARITIME SECURITY SUBCOMMITTEE
 
29 FEB 2024
 
Excerpts:

Cyber-attacks can pose a significant threat to the economic prosperity and security of the MTS for which whole-of-government efforts are required. The [Marine Transportation System] MTS’s complex, interconnected network of information, sensors, and infrastructure continually evolves to promote the efficient transport of goods and services around the world. The information technology and operational technology networks vital to increasing the efficiency and transparency of the MTS also create complicated interdependencies, vulnerabilities, and risks.

The size, complexity, and importance of the MTS make it an attractive cyber target. Terrorists, criminals, activists, adversary nation states and state-sponsored actors may view a significant MTS disruption as favorable to their interests. Potential malicious actors and their increasing levels of sophistication present substantial challenges to government agencies and stakeholders focused on protecting the MTS from constantly evolving cyber threats. Cyber vulnerabilities pose a risk to the vast networks and system of the MTS.

Cyber-attacks, such as ransomware attacks, can have devastating impacts on the operations of maritime critical infrastructure. A successful cyber-attack could disrupt global supply chains and impose unrecoverable losses to port operations, electronically stored information, and national economic activity. The increased use of automated systems in shipping, offshore platforms, and port and cargo facilities creates enormous efficiencies, but also introduces additional attack vectors for malicious cyber actors. Growing reliance on cyber-physical systems and technologies requires a comprehensive approach by all MTS stakeholders to manage cyber risks and ensure the safety and security of the MTS.
 
TESTIMONY OF Christa Brzozowski Acting Assistant Secretary for Trade and Economic Security Office of Strategy, Policy, and Plans U.S. Department of Homeland Security
 
Excerpts:
​
…the SCRC [Supply Chain Resilience Center] is evaluating the risks to U.S. ports posed by adversarial nation state threats and the potential overreliance on untrustworthy equipment and vendors that are subject to nation-state control and may pose data exploitation, insider threat, and unvetted virtual and physical access risks. The SCRC is closely collaborating with port authorities and operators, other industry stakeholders, and the interagency to conduct this analysis. With this analysis, the SCRC has worked closely with USCG and CISA to verify that our authorities and capabilities are current to keep pace with this emerging threat.