Where this industry actually lives

The regulation itself, in force and current. If a vendor quotes a requirement to you, this is where you check it.

Every comment, filing and notice on the cyber rule, including the industry objections the Coast Guard answered. Turn on email alerts and any change to the deadline reaches you first.

The Coast Guard's own blog for maritime professionals, and where its current position on plan submissions is announced. Policy moves here before it moves anywhere else.

Safety information bulletins, policy letters and port-specific guidance. Where the Marine Safety Information Bulletins live.

Where a reportable cyber incident is called in, without delay, under §101.650(g)(1). The number is 1-800-424-8802 and it belongs in the wheelhouse, not in a binder.

The list the rule requires you to act on without delay. Not background reading — an operational feed your program has to watch.

Reporting to the National Response Center satisfies the Coast Guard. It does not automatically satisfy every other federal reporting duty you may carry.

The maritime information-sharing and analysis center. Ports, terminals and vessel operators sharing threat information with each other. Membership terms are not published — ask.

The national trade association for tugboats, towboats and barges. Published cybersecurity guidance for members and runs the convention calendar the industry plans around.

The body behind Subchapter M auditors and surveyors. Directly relevant here because §101.630(f) requires an annual audit by someone independent of the measures being audited.

The inland port and terminal association — the facility side of this rule. Publishes cyber alerts to members and runs an annual conference.

Liquid bulk terminals, many of which hold a Facility Security Plan and are therefore squarely inside Subpart F.

Public port authorities. Larger than most operators covered by this rule, but the security committees are where port-wide practice gets set.

New Orleans, early December. The largest commercial marine gathering in the country by a distance, though only a slice of the floor is covered by this rule.

Mobile, March. Single track, one ballroom, and almost entirely the 5 to 50 boat operators this rule lands hardest on. Cybersecurity opened the 2026 programme.

Nashville, May. The inland-only show, produced by The Waterways Journal, and the last major gathering before the deadline.

Weekly, and the inland industry's paper of record since 1887. Also publishes the Inland River Record, which names the present owner of thousands of inland boats.

Monthly, strongest in the Gulf. Free to qualified US commercial marine professionals, and their digital membership costs nothing.

Their weekly Inland Marine News newsletter is the most precisely aimed inland briefing published anywhere, and it is free.

Written for the people who actually run the boats. Most of its readership sits inside vessel operators rather than suppliers.

Shallow-draft coverage with a daily news operation behind it. The newsletter is free.

The most-read maritime news site in the English-speaking world. Broad ocean-going coverage rather than inland, so read it for awareness.

Deep-sea and global in focus. Useful for the wider security picture, less so for a towboat on the Lower Mississippi.

The longest-running open maritime forum. Licensed officers and engineers, talking mostly about credentials, pay and life aboard.

Around thirteen thousand members, skewing toward newer mariners and people working out how to get their credentials. Good for the vernacular, thin on decision-makers.