新网络空间战略展望-202108-美国海岸警卫队-48页_4mb

U.S. Coast Guard Cyber Strategic Outlook Summary

Core Content

The U.S. Coast Guard has recognized cyberspace as a new operational domain, updating its 2015 Cyber Strategy to address the growing threats in this contested environment. The Cyber Strategic Outlook outlines the service's approach to defending its operations, securing the Marine Transportation System (MTS), and leveraging cyberspace to achieve mission success.

Main Objectives

The U.S. Coast Guard is committed to:

• Defending and operating its Enterprise Mission Platform (EMP) in cyberspace.
• Protecting the MTS from cyber threats that could disrupt critical infrastructure and national security.
• Operating in and through cyberspace to support military power projection and national interests.

Key Points

Cyber Threat Landscape

• Cyber attacks are increasingly frequent and sophisticated.
• On average, a hacker attacks every 39 seconds, with 2,244 attacks per day.
• The average cost of a data breach in 2020 was $3.86 million.
• 36 billion records were exposed in the first half of 2020.
• The average time to identify a breach was 207 days, with a 280-day average lifecycle.
• Cyber crime is projected to cost $10.5 trillion annually by 2025.

The Marine Transportation System (MTS)

• The MTS is a globally connected, integrated, and dynamic network that supports $5.4 trillion of economic activity annually, which is 25% of the U.S. GDP.
• It serves 361 ports, 124 shipyards, and over 3,500 maritime facilities.
• 90% of U.S. imports and exports use maritime transport, making it a vital component of the nation's economy and security.
• The MTS is also critical for military logistics and power projection.

Cyber Implications

• The MTS relies on interconnected IT/OT networks, which are vulnerable to cyber threats.
• Malicious actors can exploit these networks to disrupt supply chains, port operations, and national economic activity.
• The increasing use of autonomous systems and cyber-physical technologies raises new risks and attack vectors.

Lines of Effort

Line of Effort 1: Defend and Operate the U.S. Coast Guard Enterprise Mission Platform

• The U.S. Coast Guard will invest in capabilities to detect, prevent, and respond to cyber threats.
• The EMP, a key component of the DOD Information Network (DODIN), includes command, control, communication, and cyber capabilities.
• The service will focus on developing a skilled workforce, deploying advanced technologies, and maintaining a secure and resilient environment.
• The U.S. Coast Guard Cyber Command (CGCYBER) plays a central role in defending the EMP and supporting operational commanders.

Line of Effort 2: Protect the Marine Transportation System

• The MTS is a prime target for cyber attacks due to its critical role in the U.S. economy and national security.
• The Coast Guard will use a risk-based approach to manage and mitigate cyber risks, involving standards, compliance, and assessment.
• Captains of the Port (COTP) will lead cyber risk management in ports, coordinating with industry and government partners.
• Deployable Cyber Protection Teams (CPTs) and Maritime Cyber Readiness Branch (MCRB) will assist in identifying and managing cyber risks.
• Cybersecurity is a shared responsibility between the government and the maritime industry.

Line of Effort 3: Operate In and Through Cyberspace

• The Coast Guard will integrate cyber operations into its traditional missions, using a combination of offensive and defensive cyber effects.
• Cyber forces will support law enforcement and military operations, imposing costs on adversaries and protecting the MTS.
• The service will work with DHS, DOD, and international partners to ensure a unified response to cyber threats.

Key Enablers

• Skilled Workforce: Development and sustainment of a trained cyber workforce.
• Intelligence-Driven Operations: Utilizing intelligence to characterize and respond to cyber threats.
• Domestic and International Partnerships: Collaborating with the maritime industry, government agencies, and foreign allies to enhance cybersecurity and resilience.

Conclusion

The U.S. Coast Guard is prepared to operate in and through cyberspace to protect the nation's critical infrastructure and economic interests. With a risk-based approach, robust frameworks, and strong partnerships, the service is committed to maintaining the security and resilience of the MTS and its own operational platforms. This Cyber Strategic Outlook reinforces the Coast Guard's role as a global leader in maritime and cyber operations, ensuring readiness in an increasingly contested digital environment.