The bill reduces the risk of foreign cyber interference at U.S. ports by restricting, inspecting, and requiring replacement of foreign-controlled crane hardware/software, but it imposes substantial costs, operational disruptions, and regulatory uncertainty that will fall unevenly on smaller ports, operators, and consumers.
Port operators, transportation workers, and businesses face a substantially lower risk of foreign cyber interference because DHS/CISA must inspect, certify, or remove foreign-connected crane hardware and software before use.
Port operators and local governments gain a clear, predictable timeline (up to 5 years) to plan and budget for replacing or remediating foreign software on existing cranes, reducing sudden operational surprises.
U.S. manufacturers and domestic suppliers could see increased demand because the policy encourages procurement of domestically controlled equipment and software for port cranes.
Port operators, manufacturers, taxpayers, and consumers will likely face substantial costs for inspections, certifications, retrofits, or full crane replacements, which could raise fees and require public funds.
Transportation workers, businesses, and communities risk cargo-handling delays and supply-chain disruption during inspections, equipment removals, or replacement work, potentially increasing shipping times and costs.
Smaller and rural ports, and the communities that rely on them, are likely to be disproportionately harmed because they have fewer resources to absorb certification and replacement costs or to weather operational disruptions.
Based on analysis of 3 sections of legislative text.
Requires CISA inspections of internet-connected foreign-made port cranes, orders risky cranes offline until certified, and bans operation/procurement tied to covered foreign countries with phased deadlines.
Introduced February 10, 2025 by Carlos A. Gimenez · Last progress February 10, 2025
Requires the Department of Homeland Security, through CISA, to inspect internet-connected foreign-made port cranes at U.S. ports designated as high risk and to take any crane that poses a security risk offline until certified safe. It also prohibits procurement and operation of certain foreign-linked cranes and phases out use of specified foreign software on cranes, with deadlines and reporting requirements tied to enactment dates.