Tag: maritime security regulations

All about the Cyber Security Plan (CSP), CySO and MTSA Facility – Part 2

33 CFR stands for Title 33 of the Code of Federal Regulations, which governs Navigation and Navigable Waters in the United States. It contains rules and regulations issued primarily by the U.S. Coast Guard and U.S. Army Corps of Engineers (USACE), along with other federal maritime authorities.

As of 2025, Title 33 CFR contains over 200 parts, divided into subchapters based on subject area, see table 2-1.

SubchapterRangeDescription
AParts 1–199U.S. Coast Guard general navigation rules, aids to navigation, bridges, boating safety, marine environmental protection
BParts 200–399U.S. Army Corps of Engineers (USACE) regulations on navigation, locks, dam operations, and permitting
CParts 400–499Saint Lawrence Seaway regulations
EParts 500–599U.S. Coast Guard regulations on Great Lakes Pilotage
F–GVariesRegs covering Outer Continental Shelf activities, deepwater ports, and marine pollution

Table 2-1: High-level breakdown of the major subchapters and example parts

Parts that Apply for MTSA Facilities:

As my focus is for MTSA Regulated Facilities, out of the various parts, only the following SUBCHAPTER applies, see Table 2-2:

Parts in Subchapter H (MTSA-Related)

PartSubject
101General Provisions (security terms, MARSEC levels)
102National Maritime Transportation Security Incident Response
103Area Maritime Security Committees (AMSCs)
104Vessel Security
105Facility Security
106Outer Continental Shelf (OCS) Facility Security

Table 2-2: Parts in Subchapter H

More specifically, the following applies to a MTSA regulated facility:

TopicReferenceApplies ToAuthority
Facility Security Plans33 CFR 105MTSA-regulated terminalsCOTP
Port Authority & Control33 CFR 160Ships & FacilitiesCOTP
Cyber Incident ReportingNVIC 01-20, 33 CFR 101.305OT/IT systemsNRC & COTP
AMSC Participation33 CFR 103Stakeholders in the portFMSC
MTSA Requirements33 CFR 101–106Maritime sector securityDHS & USCG

Table 2-3: Parts (from the Subchapter H) that applies to MTSA Facilities such as a Chemical Plant.

This article however focuses mainly on the 33 CFR Part 101, which falls under the MTSA Requirements. Hence We will explore this topic. If you need more information on other topics in Table 2-3, refer to the post [Understanding U.S. Coast Guard Maritime Security: What Facilities and Stakeholders Need to Know], also you can view all of 33 CFR online via ecfr.gov (Electronic Code of Federal Regulations), updated regularly by the National Archives and Office of the Federal Register.

Now lets get back to the new rule making , check out the Part 3 of the post
[All about the Cyber Security Plan (CSP), CySO and MTSA Facility – Part 3]