The new Maritime Cybersecurity Act, led by Senator Rick Scott and co-sponsored by Senator Andy Kim, is a welcome jolt of common sense. Lawmakers are pushing a nationwide campaign to find Chinese-made or China-operated components inside our ports and other critical infrastructure after investigators found unexplained parts on imported cranes. If we want to keep ships moving and power on in our homes, this bill deserves a hard look — and fast action.
What the Maritime Cybersecurity Act would do
The bill would force the Department of Homeland Security to run yearly vulnerability assessments of U.S. maritime transportation and commerce infrastructure. Port operators would have to disclose whether hardware or software on their systems was made by or operated by a “foreign entity of concern.” Facility owners would certify their systems are safe from cyber threats or apply for a waiver to keep operating. The bill also requires DHS to lay out mitigation plans and brief Congress on progress.
Why this matters: cranes, modems, and pre‑positioned hackers
Congressional investigators found mysterious cellular modems and other odd components inside Chinese-made ship-to-shore cranes — equipment not on any contract paperwork. The dominant supplier, ZPMC, built about 80 percent of U.S. cranes, and the Coast Guard warned that assembly and configuration inside China creates a clear supply-chain risk. Add public cyber advisories about China-linked groups like Volt Typhoon quietly “pre-positioning” access to energy, water, and transport networks, and the threat is no longer theoretical.
Questions worth asking — and quick fixes worth making
The idea of auditing ports and rooting out risky components is smart. But the bill will raise real questions about definitions, costs, and who pays. What counts as a “foreign entity of concern”? How heavy will the compliance burden be on ports and terminals? The answers matter, but they are not an excuse to do nothing. We shouldn’t trade vulnerability for a slightly lower price tag on a crane. Cheap equipment bought overseas is no bargain if it gives Beijing a back door into our economy.
This bipartisan effort should move forward. Congress must follow the bill through committee hearings, force clear definitions, and demand real timelines from DHS and the Coast Guard. If America wants secure ports, secure power, and secure supply chains, this bill is a sensible start — and a reminder that national security can’t be outsourced for the sake of savings. Let’s hope lawmakers keep that lesson in mind before the next surprise modem shows up in a critical system.

