119-S-318 Investigative Journalist Impact Analysis

Summary

The ANCHOR Act orders the National Science Foundation to submit a one‑year plan to improve the cybersecurity and telecommunications of the U.S. Academic Research Fleet (ARF), which consists of roughly 17 UNOLS‑scheduled, U.S.-flagged oceanographic vessels. The plan must assess needs, costs, implementation timelines, and options for shared services, and be developed with CISA and NIST input while considering the 2021 JASON cybersecurity recommendations for NSF facilities. [1]Library of Congress — Text - S.318 - 119th Congress (2025-2026): ANCHOR Act | C…[2]UNOLS — UNOLS welcome page (ARF overview and vessel count)[3]NSF — JASON Report on Facilities Cybersecurity | NSF

Key metrics and anchors

Reference points used in this analysis.

Sources: [2]UNOLS — UNOLS welcome page (ARF overview and vessel count)[1]Library of Congress — Text - S.318 - 119th Congress (2025-2026): ANCHOR Act | C…[5]U.S. Coast Guard — USCG Final Rule: Cybersecurity in the Marine Transportation…[6]International Maritime Organization — IMO Maritime cyber risk page (MSC-FAL.1/C…[7]NIST CSRC — NIST SP 800-171 Rev. 3 (Final, May 2024)[8]Web search · turn 6 #1

Economic Effects

Likely direct and indirect economic impacts if S.318 is enacted and implemented as specified.

• Capital and operating outlays will rise in the near term for shipboard SatCom/VSAT (or equivalent), shoreside networking, cyber tooling, and training; the statute explicitly requires a cost assessment for hardware, software, HPC, and personnel. [1]Library of Congress — Text - S.318 - 119th Congress (2025-2026): ANCHOR Act | C…
• Centralized or consortial solutions (e.g., shared security operations, licensing) could reduce duplicated spend across operators, but the Act also contemplates trade‑offs in centralizing data/cyber functions at a single facility. [1]Library of Congress — Text - S.318 - 119th Congress (2025-2026): ANCHOR Act | C…
• Compliance alignment costs are likely as operators map systems handling Controlled Unclassified Information (CUI) to NIST SP 800‑171 Rev.3, including assessments and controls for nonfederal systems used on NSF/ONR projects. [7]NIST CSRC — NIST SP 800-171 Rev. 3 (Final, May 2024)
• Labor market pressure: the plan’s emphasis on “cybersecurity personnel and training” collides with a documented workforce gap (~4.8M globally in 2024), implying recruitment difficulty and wage pressure for specialized maritime/OT security roles. [1]Library of Congress — Text - S.318 - 119th Congress (2025-2026): ANCHOR Act | C…[8]Web search · turn 6 #1
• Productivity upside: better bandwidth and real‑time collaboration can increase science throughput (e.g., remote experts guiding mapping/ROV ops), shrinking costly downtime from vendor‑assisted maintenance and enabling shore‑based participation without travel. [9]NOAA Ocean Exploration — Telepresence Technology - NOAA Ocean Exploration
• Regulatory risk mitigation: aligning ARF practices with updated USCG maritime cybersecurity requirements (effective July 16, 2025) and reportable‑incident rules reduces enforcement and disruption risks that can carry steep operational costs. [5]U.S. Coast Guard — USCG Final Rule: Cybersecurity in the Marine Transportation…[10]U.S. Coast Guard — USCG Maritime Cyber resource site (reporting obligations; NV…

Social Effects

Implications for crews, scientists, and participating institutions.

• Crew health access: the Act explicitly cites telemedicine (including mental health). Expanded, reliable connectivity at sea is associated with improved access to care and can support better outcomes in injury management. [1]Library of Congress — Text - S.318 - 119th Congress (2025-2026): ANCHOR Act | C…[11]Web search · turn 5 #1
• Well‑being and retention: industry surveys repeatedly identify connectivity quality as a major determinant of seafarer morale; improving bandwidth and reliability addresses a persistent pain point. [12]Mission to Seafarers — Seafarers’ Happiness Index (landing page)
• Education and outreach: telepresence can broaden K‑12 and public engagement without embarkation, supporting equity in access to ocean science experiences. [1]Library of Congress — Text - S.318 - 119th Congress (2025-2026): ANCHOR Act | C…[9]NOAA Ocean Exploration — Telepresence Technology - NOAA Ocean Exploration
• Institutional capacity: universities and labs operating ARF vessels may need new governance, training pipelines, and incident‑response coordination to meet NIST/CISA‑aligned practices—raising competency but increasing administrative load. [4]CISA — Cross-Sector Cybersecurity Performance Goals | CISA[7]NIST CSRC — NIST SP 800-171 Rev. 3 (Final, May 2024)

Environmental Effects

Direct environmental effects are modest; most impacts are indirect via changes to how science and collaboration are conducted.

• Telepresence can reduce some discretionary travel by shore‑based experts and educators, which multiple studies show yields large GHG reductions relative to fly‑in participation, even after accounting for streaming energy. [9]NOAA Ocean Exploration — Telepresence Technology - NOAA Ocean Exploration[13]JCO Global Oncology (NIH/PMC) — Reducing the Environmental Impact of Health Car…
• Reliable remote participation (e.g., real‑time HD video and data) is already proven on NOAA platforms and can be extended to ARF contexts; this supports more distributed collaboration without additional berths or voyages. [9]NOAA Ocean Exploration — Telepresence Technology - NOAA Ocean Exploration
• Countervailing effects (minor): incremental shipboard power for high‑bandwidth terminals and added equipment lifecycle impacts (manufacture/e‑waste) are likely small relative to vessel propulsion emissions and are not well‑quantified in current literature.

Temporal Analysis

Short‑term versus long‑term consequences, distinguishing what unfolds immediately from what matures over time.

1. Short term (0–2 years): NSF develops and submits the plan within one year; operators begin gap assessments against NIST/CISA guidance; early investments focus on connectivity upgrades and baseline cyber hygiene to meet emerging USCG expectations. [1]Library of Congress — Text - S.318 - 119th Congress (2025-2026): ANCHOR Act | C…[4]CISA — Cross-Sector Cybersecurity Performance Goals | CISA[5]U.S. Coast Guard — USCG Final Rule: Cybersecurity in the Marine Transportation…
2. Medium term (2–5 years): shared services and consortial licensing, if adopted, can standardize tooling and training; telepresence usage scales for maintenance assists and shore‑based science participation; incident reporting and response procedures normalize under USCG/CISA frameworks. [1]Library of Congress — Text - S.318 - 119th Congress (2025-2026): ANCHOR Act | C…[10]U.S. Coast Guard — USCG Maritime Cyber resource site (reporting obligations; NV…
3. Long term (5+ years): more resilient operations and data integrity as controls mature; stable bandwidth enables persistent remote collaboration and outreach; workforce pipelines adapt to maritime/OT cyber needs, gradually easing staffing constraints. [8]Web search · turn 6 #1

Unintended Consequences and Risks

Material risks or secondary effects documented in credible guidance or reasonably inferred from it.

• Expanded attack surface: higher‑bandwidth links and more integrated collaboration can inadvertently bridge IT and OT if segmentation and monitoring are weak—an ICS risk repeatedly flagged by CISA’s cross‑sector goals and OT guidance. [4]CISA — Cross-Sector Cybersecurity Performance Goals | CISA[14]Web search · turn 4 #4
• Compliance creep: handling CUI on nonfederal systems triggers SP 800‑171 controls, assessments, and documentation burdens for universities and labs, with potential friction for open science norms if scoping is unclear. [7]NIST CSRC — NIST SP 800-171 Rev. 3 (Final, May 2024)
• Reporting exposure: broadened incident‑reporting obligations (USCG/CISA/FBI) may increase administrative load and reputational sensitivity around near‑misses; however, they also standardize expectations across the marine domain. [10]U.S. Coast Guard — USCG Maritime Cyber resource site (reporting obligations; NV…

Assessment

Overall stance: neutral. The bill mandates planning rather than prescribing specific technical solutions or funding levels. If the resulting plan hews to JASON’s risk‑based, facility‑tailored approach, aligns with NIST/CISA controls, and leverages measured centralization, benefits (resilience, research continuity, outreach, crew welfare) likely outweigh near‑term costs and staffing challenges; the balance will hinge on execution, workforce capacity, and how shared services are governed. [3]NSF — JASON Report on Facilities Cybersecurity | NSF[7]NIST CSRC — NIST SP 800-171 Rev. 3 (Final, May 2024)[4]CISA — Cross-Sector Cybersecurity Performance Goals | CISA

Sourcing (selected)

Key references underpinning this analysis.

• Statute text and committee actions: Congress.gov S.318 (119th). [1]Library of Congress — Text - S.318 - 119th Congress (2025-2026): ANCHOR Act | C…
• Fleet composition and UNOLS coordination: UNOLS. [2]UNOLS — UNOLS welcome page (ARF overview and vessel count)
• NSF/JASON recommendations for major facilities cybersecurity: NSF. [3]NSF — JASON Report on Facilities Cybersecurity | NSF
• U.S. maritime cybersecurity rules and reporting: USCG final rule and cyber incident reporting guidance; DHS fact sheet. [5]U.S. Coast Guard — USCG Final Rule: Cybersecurity in the Marine Transportation…[10]U.S. Coast Guard — USCG Maritime Cyber resource site (reporting obligations; NV…[15]U.S. Department of Homeland Security — DHS Fact Sheet on 2024 Executive Order e…
• International baseline: IMO cyber risk management in the ISM Code. [6]International Maritime Organization — IMO Maritime cyber risk page (MSC-FAL.1/C…
• NIST standards for CUI and control catalogs: SP 800‑171 Rev.3. [7]NIST CSRC — NIST SP 800-171 Rev. 3 (Final, May 2024)
• Telepresence and shore‑based participation evidence: NOAA Ocean Exploration. [9]NOAA Ocean Exploration — Telepresence Technology - NOAA Ocean Exploration
• Crew welfare and connectivity: Mission to Seafarers (Seafarers’ Happiness Index). [12]Mission to Seafarers — Seafarers’ Happiness Index (landing page)
• Workforce gap context: ISC2 Cybersecurity Workforce Study 2024. [8]Web search · turn 6 #1
• Environmental co‑benefits of reduced travel via virtual participation: peer‑reviewed analyses. [13]JCO Global Oncology (NIH/PMC) — Reducing the Environmental Impact of Health Car…