U.S. maritime ports handle more than $1.3 trillion in cargo annually. The operations of these ports are supported by information and communication systems, which are susceptible to cyber-related threats. Failures in these systems could degrade or interrupt operations at ports, including the flow of commerce. Federal agencies -- in particular the Department of Homeland Security (DHS) -- and industry stakeholders have specific roles in protecting maritime facilities and ports from physical and cyber threats. GAO's objective was to identify the extent to which DHS and other stakeholders have taken steps to address cybersecurity in the maritime port environment. GAO examined relevant laws and regulations; analyzed federal cybersecurity-related policies and plans; observed operations at three U.S. ports selected based on being a high-risk port and a leader in calls by vessel type, e.g. container; and interviewed federal and non-federal officials.

U.S. maritime ports handle more than $1.3 trillion in cargo annually. The operations of these ports are supported by information and communication systems, which are susceptible to cyber-related threats. Failures in these systems could degrade or interrupt operations at ports, including the flow of commerce. Federal agencies -- in particular the Department of Homeland Security (DHS) -- and industry stakeholders have specific roles in protecting maritime facilities and ports from physical and cyber threats. The objective of this report was to identify the extent to which DHS and other stakeholders have taken steps to address cybersecurity in the maritime port environment. Figures. This is a print on demand report.

The issue of protecting essential infrastructure against the threat of terrorist attack is one which continues to concern governments worldwide. But terrorism is not the only threat this infrastructure may face: environmental hazards, industrial accidents and sabotage are also major concerns. Protecting critical infrastructure is expensive, but many of the solutions apply whatever the cause of the problem, and in these days of scarce resources, multi-sector or multi-threat solutions are preferred. This book presents the proceedings of the NATO Centre of Excellence – Defence against Terrorism (COE-DAT) Advanced Research Workshop entitled Critical Infrastructure Protection, held in Ankara, Turkey, in May 2012. The workshop brought together 44 participants from 13 countries and consisted of five sessions: a general overview of policy, tools and techniques; the realities of implementation; protection of energy infrastructure; protection of communications and information infrastructure; and protection of transport infrastructure. The papers were presented by 16 expert speakers – military and civilian practitioners, business leaders, diplomats, and academics – from 6 countries, and each was followed by a detailed discussion and debate. The workshop concluded with a summary of all the topics reflected in the individual papers presented. This book represents a significant contribution to furthering the science of counterterrorism, and will be of interest to all whose work involves all aspects of Critical Infrastructure Protection and the terrorist threat to infrastructure.

" U.S. maritime ports handle more than $1.3 trillion in cargo annually. The operations of these ports are supported by information and communication systems, which are susceptible to cyber-related threats. Failures in these systems could degrade or interrupt operations at ports, including the flow of commerce. Federal agencies-in particular DHS- and industry stakeholders have specific roles in protecting maritime facilities and ports from physical and cyber threats. GAO's objective was to identify the extent to which DHS and other stakeholders have taken steps to address cybersecurity in the maritime port environment. GAO examined relevant laws and regulations; analyzed federal cybersecurity-related policies and plans; observed operations at three U.S. ports selected based on being a high-risk port and a leader in calls by vessel type, e.g. container; and interviewed federal and nonfederal officials. "

The United States has approximately 360 commercial sea and river ports that handle more than $1.3 trillion in cargo annually. A wide variety of goods, including automobiles, grain, and millions of cargo containers, travel through these ports each day. While no two ports are exactly alike, many share certain characteristics, like their size, general proximity to a metropolitan area, the volume of cargo being processed, and connections to complex transportation networks designed to move cargo and commerce as quickly as possible, that make them vulnerable to physical security threats. Entities within the maritime port environment are also vulnerable to cyber-based threats because maritime stakeholders rely on numerous types of information and communications technologies to manage the movement of cargo throughout ports. Examples of these technologies include the following:

MARITIME CRITICAL INFRASTRUCTURE PROTECTION: DHS Needs to Better Address Port Cybersecurity