---
kind: "section"
citation: "33 C.F.R. § 101.640"
title: "33"
number: "101.640"
heading: "Records and documentation."
url: "https://uscodex.org/cfr/33/101.640"
---

# §101.640. Records and documentation.


All records, reports, and other documents mentioned in this subpart must be created and maintained in accordance with [33 CFR 104.235](/cfr/33/104.235.md) for U.S.-flagged vessels, 105.225 for facilities, and 106.230 for OCS facilities. At a minimum, the records must be created for the following activities: training, drills, exercises, cybersecurity threats, reportable cyber incidents, and audits of the Cybersecurity Plan.


## Notes

### Source

Source: 90 FR 6447, Jan. 17, 2025, unless otherwise noted.

### Authority

Authority: 46 U.S.C. 70101-70104 and 70124; Executive Order 12656, 3 CFR, 1988 Comp., p. 585; 33 CFR 1.05-1, 6.04-11, 6.14, 6.16, and 6.19; Department of Homeland Security Delegation No. 00170.1, Revision No. 01.4.

### Source

Source: USCG-2003-14792, 68 FR 39278, July 1, 2003, unless otherwise noted.