Port Crane Security and Inspection Act of 2025
The Port Crane Security and Inspection Act of 2025 would expand federal oversight of foreign-made cranes used at U.S. ports, with a focus on internet-connected devices and cybersecurity risk. For newly constructed foreign cranes identified as high-risk, DHS (through the Cybersecurity and Infrastructure Security Agency) must inspect the crane before it is put into service. The bill also requires a security-risk assessment of existing and new foreign cranes within 180 days of enactment and the temporary removal from service of any crane deemed to pose a risk until it is certified safe. Additionally, it imposes a prohibition: contracts entered into after enactment cannot result in the operation of foreign cranes at U.S. ports, and foreign software on cranes in operation must be phased out within five years. The Act defines what counts as a “foreign crane” and who counts as a “covered foreign country” based on U.S. intelligence indicators of adversaries. Overall, the bill aims to reduce cyber and security risks from foreign-made crane technology at U.S. ports by inspecting high-risk cranes before use, assessing current inventory, and progressively prohibiting new foreign-crane procurement and foreign-software usage.
Key Points
- 1Pre-use inspection of newly constructed foreign cranes that are internet-connected and deemed high-risk at U.S. ports, conducted by DHS via CISA.
- 2Security risks assessment due within 180 days of enactment for existing and new foreign cranes, with offline removal of cranes posing a risk until they are certified as safe.
- 3Congressional briefings required: within 1 year of enactment, DHS will brief House Homeland Security and Senate Homeland Security and Governmental Affairs committees on foreign crane security risks and threats.
- 4Foreign crane prohibition: contracts entered after enactment cannot result in operation of a foreign crane at a U.S. port; cranes in operation cannot have foreign software within five years of enactment.
- 5Definitions:
- 6- Covered foreign country: a country identified as a foreign adversary in the latest annual Threat Assessment or identified by DHS (in coordination with the DNI) as an adversary not listed in that assessment.
- 7- Foreign crane: a crane with IT/OT components connected to U.S. port cyber networks that are manufactured by an entity under ownership/control/influence of a covered foreign country.
- 8- Foreign software: software or technology wholly owned by a company based in a covered foreign country.