US Maritime Transportation Security Act (MTSA) and USCG Cybersecurity Requirements S-105.305: Conduct the Facility Security Assessment, get the Facility Security Plan approved, and audit it annually

The owner or operator must have a Facility Security Assessment carried out with the prescribed background information and on-scene survey, develop a Facility Security Plan that addresses its findings and submit it to the Captain of the Port for approval, operate in compliance with it, submit owner-initiated amendments at least 30 days before they take effect (and propose amendments within 60 days of a COTP notice), and have the plan audited annually from one year after approval with a certifying letter attached.