Evidence of sabotage, subversive activity, or an actual or threatened cyber incident involving or endangering any vessel, harbor, port, or waterfront facility, including any data, information, network, program, system, or other digital infrastructure thereon or therein, shall be reported immediately to the Federal Bureau of Investigation, the Cybersecurity and Infrastructure Security Agency (for any cyber incident), and the Captain of the Port, or to their respective representatives.

The master, owner, agent, or operator of a vessel or waterfront facility shall take all necessary precautions to protect the vessel, waterfront facility, and cargo, including any data, information, network, program, system, or other digital infrastructure thereon or therein, from sabotage.