H.R. 1165 — Port Crane Security and Inspection Act of 2025

This section provides the short title of the Act as the “Port Crane Security and Inspection Act of 2025.”

This section directs the Secretary of Homeland Security, acting through the Cybersecurity and Infrastructure Security Agency, to inspect newly constructed foreign cranes before they are placed into service at U.S. ports determined to be high risk to port security or maritime transportation security if the cranes connect to the internet. It also requires the Secretary, not later than 180 days after enactment, to assess the threat posed by existing or newly constructed foreign cranes in use at U.S. ports and to take any crane that poses a security risk or threat offline until it is certified as no longer posing such a risk or threat. In addition, it requires a briefing to the House Committee on Homeland Security and the Senate Committee on Homeland Security and Governmental Affairs not later than 1 year after enactment on foreign crane security risks or threats at U.S. ports. As background, the section defines a “covered foreign country” as a country identified as a foreign adversary in the intelligence community’s most recent Annual Threat Assessment or identified by the Secretary of Homeland Security, in coordination with the Director of National Intelligence, as a foreign adversary not included in that assessment. It defines a “foreign crane” as a crane whose information technology and operational technology components connected to cyber infrastructure at a U.S. port were, in whole or in part, manufactured by an entity operating under the ownership, control, or influence of a covered foreign country.

This section prohibits the operation at a port located in the United States of any foreign crane for which a contract was entered into on or after the date of enactment of this Act and requires any foreign crane already operating at a U.S. port to stop using foreign software 5 years after enactment. As background, the section defines a “foreign crane” as a crane whose port-connected software or other technology was manufactured, in whole or in part, by an entity owned by, controlled by, a subsidiary of, or otherwise legally or financially related to a corporation based in a covered foreign country, and defines a “covered foreign country” as a country identified as a foreign adversary in the intelligence community’s most recent Annual Threat Assessment or, if not included there, by the Secretary of Homeland Security in coordination with the Director of National Intelligence. It also defines “foreign software” as software or other technology manufactured, in whole or in part, by a company wholly owned by a covered foreign country.