US Maritime Transportation Security Act (MTSA) and USCG Cybersecurity Requirements S-105.255: Control access to the facility and secure areas, including TWIC verification

The owner or operator must control access at each MARSEC level, including identity verification, TWIC checks and escorting in secure areas, restricted area controls, and monitoring, as set out in the approved FSP.

Maintained by Gerard BlokdykVerified against the published standard 31 May 2026Control text last updated 21 May 2026

Other controls in MTSA security program for facilities (33 CFR 101.305, part 105; parallel duties in parts 104 and 106) – US Maritime Transportation Security Act (MTSA) and USCG Cybersecurity Requirements

S-101.305 Report suspicious activity, breaches of security and transportation security incidents without delay
S-105.200 Organise facility security and designate a qualified Facility Security Officer
S-105.220 Train security personnel, drill every 3 months and exercise at least yearly
S-105.225 Keep security records for at least 2 years and protect electronic records
S-105.230 Implement MARSEC level changes within 12 hours and coordinate with vessels
S-105.305 Conduct the Facility Security Assessment, get the Facility Security Plan approved, and audit it annually

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All US Maritime Transportation Security Act (MTSA) and USCG Cybersecurity Requirements controls