As the FSO, you should ask your Cybersecurity staff, or the IT staff if your company does not yet have a cyber security department:

– Is our Cybersecurity policy in writing?

– Is the policy up-to-date?

– How often are our computers updated with the latest security patches?

– Are our computers and the network backed-up at least daily?

– Are thumb drives or other devices permitted to be plugged into our computer system?

For more information, checkout the FBI’s Randsomware website:
https://www.fbi.gov/file-repository/ransomware-prevention-and-response-for-cisos.pdf/view
Soon, your Coast Guard Compliance Inspector will be asking more specific Cybersecurity-related questions and Coast Guard guidance will be forthcoming on how and what will be required. The best way to prevent being a cyberattack victim, and be best prepared to respond to the Coast Guard’s questions, is by working closely with your cyber or IT department.