The bill strengthens federal attention, oversight, and definitional clarity around maritime cybersecurity—reducing supply‑chain and security risks—but exposes ports, operators, and taxpayers to new compliance costs and may leave vulnerabilities until the Coast Guard is adequately funded and GAO recommendations are acted on.
Businesses and workers tied to ports (and ultimately U.S. consumers) face lower risk of large-scale supply‑chain disruptions because the bill directs attention to maritime cybersecurity threats and readiness.
State, local, and federal partners gain clearer roles and accountability because the bill designates DHS and DOT as co‑SRMAs and statutorily identifies the SRMA, improving coordination on maritime cybersecurity oversight.
Taxpayers, policymakers, and industry benefit from a GAO review that will identify Coast Guard funding, staffing, training, and enforcement gaps—creating a factual basis for targeted funding or legislative fixes.
Transportation workers, taxpayers, and businesses remain exposed because the Coast Guard is identified as underfunded and understaffed, meaning maritime cybersecurity gaps may persist until resources are increased.
Ports, terminals, and shipping firms will likely face new compliance and mandatory incident‑reporting costs as the Coast Guard’s regulatory authority and reporting requirements expand.
Addressing GAO‑identified Coast Guard capability shortfalls will likely require additional federal spending or reallocation of existing port program funds, which could increase taxpayer costs or delay other port projects.
Based on analysis of 4 sections of legislative text.
Introduced February 20, 2026 by Addison P. McDowell · Last progress February 20, 2026
Directs the Government Accountability Office (GAO) to complete a review within 270 days assessing whether the U.S. Coast Guard has sufficient funding, staffing, guidance, and capabilities to carry out its Sector Risk Management Agency (SRMA) responsibilities for maritime cybersecurity. The GAO must evaluate Coast Guard resources for cybersecurity personnel, training, enforcement, and industry guidance, then send findings and recommendations to specified congressional committees. The law also records congressional findings about the economic importance of the marine transportation system (MTS), rising cyber threats, designation of DHS and DOT (with delegated agencies including the Coast Guard and TSA) as co-SRMAs, and concerns that the Coast Guard is underfunded and understaffed to meet SRMA duties. It defines the MTS and SRMA for the purposes of the review.