33 CFR §6.19-1

Nothing contained in this part shall be construed as relieving the masters, owners, operators, and agents of vessels or other waterfront facilities from their primary responsibility for the protection and security of such vessels or waterfront facilities, including any data, information, network, program, system, or other digital infrastructure thereon or therein.