Start a project
Menu
ServicesAll servicesCybersecurityCloud EngineeringApplication ServicesEnterprise PlatformsData & AnalyticsAI & Machine LearningInternet of ThingsMobilize Talent
PlatformsAll platformsIdentity and accessPrivileged access and secretsERP, HCM and financeCRM, ITSM and automationHealthcareInsurance and bankingData and integrationCloud and AIIndustrial, utilities and mainframeSkills matrix
Case studiesAll case studiesIdentity and accessPrivileged accessSecurity operationsCloud and infrastructureApplicationsERP and HCMCRM, ITSM and automationIndustry platformsData and analyticsAI and agents
IndustriesAll industriesEnergy, oil & gasHealthcare payersBanking & financial servicesInsurancePublic sectorManufacturingLocations
InsightsField notesLearning tracks
CompanyAbout CohashPortfolioSkills matrixCareersTrust and securityContact
Start a project
locations · new orleans

Terminals, refineries and hospitals along the river all have to prove who touched which system.

Cargo cranes, a refinery control room and a hospital records system have little in common until something goes wrong. Then the Coast Guard, a regulator or the Attorney General asks the same thing. Which accounts and vendors could reach it? Our New Orleans work is about answering that before anyone asks.

Talk to an engineer
work in new orleans7 services
4 local rules covered below
in short·20-second read

For New Orleans organizations we handle identity and access for marine terminals and port tenants, remote vendor access into refinery and chemical plant networks, workforce identity for large hospital systems, and guest identity for hotels and venues.

The regulatory drivers are the Coast Guard's maritime cyber rule, HIPAA and Louisiana's breach law with its Attorney General notice. We serve New Orleans remotely from our Frisco, Texas office and travel in for workshops and launches.

Cohash has no New Orleans office. We're based in Frisco, Texas, work with Louisiana teams remotely and come to terminals, plants and hospital campuses for discovery workshops, cutovers and launch weekends.

Ask an engineer facts checked 2026-10-21 · 9 sources
rules
Louisiana breach notification, La. R.S. 51:3074Louisiana Attorney General breach rule, LAC 16:III.701Coast Guard, Cybersecurity in the Marine Transportation SystemLouisiana Data Privacy Act, La. R.S. 51:1780.1 to 1780.5
background
Every entitlement translated into business terms Auto-certified by policy unchanged and peer-aligned Ranked exceptions SoD conflicts first Revoke and verify proof logged with the decision
field note · 5 minThe access review nobody dreads
new orleans by the numbers

What's specific about New Orleans

Each figure comes from a public source, linked on the card.

01 14,603

Cargo moving through the tri-parish New Orleans Port District supported 14,603 direct jobs and 122,386 jobs across Louisiana in 2024, according to the Martin Associates study commissioned by Port NOLA.

source ↗ 02 $31.5 billion

The same 2024 study counts the PBF Energy Chalmette refinery and the Valero refinery among the private terminals in the port district, and puts the district's Louisiana economic value at $31.5 billion, about 8.3% of state GDP.

source ↗ 03

On 17 August 2026 Port NOLA announced that the U.S. Army Corps of Engineers had granted the federal permit for the Louisiana International Terminal, a container terminal it is developing with MSC's Terminal Investment Limited and Ports America.

source ↗ 04 40,000

Ochsner Health reports 47 hospitals, more than 370 health and urgent care centers and more than 40,000 team members, and says it cared for 1.6 million people in 2024.

source ↗ 05 99,200

Education and health services employ 99,200 of the New Orleans-Metairie metro's 472,900 nonfarm workers, and leisure and hospitality another 65,700, in BLS figures for September 2026 (preliminary).

source ↗
who and what

Who we work with in New Orleans, and the rules they work under

industries

  1. Marine terminals and port tenants

    Terminal operating systems, gate systems and crane controls are reached by stevedores, shipping lines, truckers and equipment vendors. Under the Coast Guard rule, facilities with security plans now need a designated cybersecurity officer, multifactor authentication and a cyber incident reporting path. We build the access model and the evidence, and keep shared terminal logins out of it.

  2. Refining and chemical plants

    Plants along the river depend on outside specialists who support control systems from far away. Each of those remote paths is a standing invitation. We put vendor access behind a gateway with approval, recording and time limits, and keep plant historians and analytics accounts from sitting on broad network permissions.

  3. Hospitals and clinics

    A large system with dozens of hospitals has physicians, residents, travel nurses and contractors who change departments and campuses constantly. We tie clinical access to credentialing and scheduling records, so a traveler's access follows their assignment and ends with it.

  4. Hotels, venues and visitor services

    Seasonal staffing peaks around festivals and conventions put hundreds of new people on property systems for weeks at a time. Guest loyalty and booking apps hold card and identity data. We separate guest identity from staff identity and give temporary workers access that expires automatically.

regulations

  1. Louisiana breach notification, La. R.S. 51:3074 ↗

    Notice to affected Louisiana residents must go out without unreasonable delay and no later than 60 days after discovery. If you need longer, you send the Attorney General written reasons within that window. Skipping notice on a no-harm finding requires a written determination kept for five years.

  2. Louisiana Attorney General breach rule, LAC 16:III.701 ↗

    The Attorney General must receive written notice within 10 days after residents are notified, including the names of affected Louisiana residents. Each day it is late can draw a fine of up to $5,000.

  3. Coast Guard, Cybersecurity in the Marine Transportation System ↗

    Effective 16 July 2025 for U.S.-flagged vessels and facilities that must keep security plans under 33 CFR parts 104 to 106. It requires reporting cyber incidents, cyber training and a Cybersecurity Plan submitted for approval within 24 months of the effective date.

  4. Louisiana Data Privacy Act, La. R.S. 51:1780.1 to 1780.5 ↗

    Louisiana's comprehensive consumer privacy law, enacted as SB 386 and signed on 29 May 2026 as Act No. 502 of 2026. It takes effect 1 January 2027 and is enforced by the Louisiana Attorney General.

services

Most requested in New Orleans

The services clients in New Orleans ask us for most.

you are hereNew Orleans
01Our terminal has a Facility Security Plan. What does the Coast Guard cyber rule add?

A Cybersecurity Plan, a named cybersecurity officer, training, multifactor authentication and incident reporting, among other measures. We focus on the identity pieces such as account inventories, MFA on terminal and gate systems and vendor access controls, and coordinate with whoever writes the rest of your plan.

02Louisiana gives us 60 days to notify. Is that the real deadline?

It is the outer limit, and the statute still says without unreasonable delay. The Attorney General notice comes within 10 days of the resident notices and must list affected residents' names. Breaches touching residents of other states carry their own clocks, so plan for the shortest one.

03Does Louisiana have a comprehensive consumer privacy law like Texas or Virginia?

Yes. The Louisiana Data Privacy Act (SB 386, Act No. 502 of 2026) was signed on 29 May 2026 and takes effect 1 January 2027, with the Attorney General enforcing it. Until then, most organizations here work from the breach statute, HIPAA, GLBA and contracts. Check with counsel how the new law applies to you.

04Can contractors at a refinery keep remote access without a standing VPN?

Yes. We usually replace the always-on tunnel with a request-and-approve session through a privileged access gateway, recorded and time-boxed, with the plant owner able to cut it off in one step.

elsewhere

Other cities we cover

All 82 cities
AtlantaPayments & payers ChicagoTrading & healthcare New YorkNYDFS-regulated finance AustinTech & state government Dallas–FriscoBanking, fintech, telecom (HQ) HoustonEnergy & pipelines
sources 9 sources linked last checked 2026-10-21 content fingerprint 422aae24
  1. 01Future of Privacy Forum, a look at the Louisiana Data Privacy Actfpf.org ↗
  2. 02Davis Wright Tremaine, Louisiana Data Privacy Act (SB 386)dwt.com ↗
  3. 03Port NOLA, 2024 economic impacts executive summary (Martin Associates)portnola.com ↗
  4. 04Port NOLA, Louisiana International Terminal permit release (August 2026)portnola.com ↗
  5. 05Ochsner Health, about Ochsnerochsner.org ↗
  6. 06BLS, New Orleans-Metairie economy at a glancebls.gov ↗
  7. 07La. R.S. 51:3074 (Louisiana Legislature)legis.la.gov ↗
  8. 08Louisiana Attorney General, data breach reportingag.state.la.us ↗
  9. 09Federal Register, Cybersecurity in the Marine Transportation System (January 2025)govinfo.gov ↗
Reviewed by the Cohash team Product names are trademarks of their owners. how we handle facts and data →
next step

Tell us what you're running. We'll tell you what we'd do first.

A 30-minute working session with a senior engineer. No slides.

Book a working session See the case studies
useful to bring
  • The platform and the version you're on
  • Where you need to get to, and by when
  • What's custom: rules, plugins, integrations
  • Any audit finding or deadline driving it