The US Coast guard adopts a flexible approach to its oversight of cyber risks for shipping, adopting ISO/ EEC and NIST CSF for cyber risk management.