{"data":{"id":"us/33-cfr-101.620","jurisdiction":"us","citation":"33 CFR 101.620","heading":"Owner or operator.","body":"(a) Each owner or operator of a U.S.-flagged vessel, facility, or OCS facility is responsible for compliance with the requirements of this subpart.\n(b) For each U.S.-flagged vessel, facility, or OCS facility, the owner or operator must—\n(1) Ensure a Cybersecurity Plan is developed, approved, and maintained;\n(2) Define in Section 1 of the Cybersecurity Plan the cybersecurity organizational structure and identify each person exercising cybersecurity duties and responsibilities within that structure, with the support needed to fulfill those obligations;\n(3) Designate, in writing, by name and by title, a Cybersecurity Officer (CySO) who is accessible to the Coast Guard 24 hours a day, 7 days a week, and identify how the CySO can be contacted at any time;\n(4) Ensure that cybersecurity exercises, audits, and inspections, as well as the Cybersecurity Assessment, are conducted as required by this part and in accordance with the Cybersecurity Plan (see § 101.625(d)(1), (3), (6) and (7));\n(5) Ensure that the U.S.-flagged vessel, facility, or OCS facility operates in compliance with the approved Cybersecurity Plan;\n(6) Ensure the development, approval, and execution of the Cyber Incident Response Plan; and\n(7) For entities that have not reported to the Coast Guard pursuant to, or are not subject to, 33 CFR 6.16-1, ensure all reportable cyber incidents are reported to the National Response Center (NRC).","path":["Title 33—Navigation and Navigable Waters","CHAPTER I—COAST GUARD, DEPARTMENT OF HOMELAND SECURITY","SUBCHAPTER H—MARITIME SECURITY","PART 101—MARITIME SECURITY: GENERAL","Subpart F—Cybersecurity"],"source_url":"https://www.ecfr.gov/api/versioner/v1/full/2026-08-25/title-33.xml","current_through":"2026-08-25","vintage":"","retrieved_at":"2026-08-27T02:25:35Z","sha256":"5ae58093cbc71e28f836c420ef9db7d3023120ebb86a26272c28d6b545ab75f0","source_id":"us-cfr","stale":true,"prev":"us/33-cfr-101.615","next":"us/33-cfr-101.625"},"notice":"GroundRules: Original legal text. Not legal advice."}