# Port Crane Security and Inspection Act of 2025

This bill is about the giant cranes that load and unload cargo ships at American ports, and it's designed to keep foreign adversaries from potentially sabotaging or spying on these critical pieces of infrastructure. The concern is that cranes made by or controlled by hostile countries could have hidden vulnerabilities in their computer systems that could be exploited to disrupt port operations or gather intelligence.

Here's what the bill actually does: First, it requires the Department of Homeland Security to inspect any new cranes made by companies from countries the U.S. considers adversaries (like China, Russia, Iran, and North Korea) before they can start operating at high-risk ports. If inspectors find security problems, the crane gets shut down until it's fixed or certified as safe. The government also has to assess all existing foreign-made cranes already in use and take offline any that pose a security threat. Within a year, officials must report to Congress about what security risks they've found.

The bill also includes a ban on new foreign cranes: any crane purchased after this law passes that's made by companies from adversary nations simply cannot operate at U.S. ports. For cranes already in use, there's a five-year deadline to stop running any software made by these foreign companies—essentially forcing ports to replace the computer systems controlling these machines. The goal is to eliminate the possibility that a hostile nation could remotely access or sabotage port operations through compromised crane software. For port workers and shipping companies, this means potential delays as cranes are inspected or replaced, but it's intended to prevent far worse disruptions from foreign interference.

Port Crane Security and Inspection Act of 2025

Gimenez, Carlos A.

Port Crane Security and Inspection Act of 2025 This bill limits the operation of foreign cranes at U.S. ports. In general,&nbsp;foreign cranes are those that&nbsp;have information technology and operational technology components that (1) were manufactured by companies that are subject to the ownership, control, or influence of a country designated as a foreign adversary; and (2) connect to ports' cyber infrastructure.Foreign cranes that are contracted for on or after the date of the bill's enactment may not operate at a U.S. port. Also, beginning five years after this bill is enacted, foreign cranes operating at U.S. ports may not use software or other technology manufactured by a company owned by a country designated as a foreign adversary.Additionally, the Cybersecurity and Infrastructure Security Agency (CISA) must (1) inspect foreign cranes&nbsp;for potential security risks or threats before they are placed into operation, (2) assess the threat posed by security risks or threats of existing or newly constructed foreign cranes, and (3) take any crane that poses a security risk or threat offline until the crane can be certified as no longer being a risk or threat.CISA must also report to Congress about security risks or threats posed by foreign cranes at U.S. ports.