{"id":18754,"date":"2022-07-01T13:37:22","date_gmt":"2022-07-01T13:37:22","guid":{"rendered":"http:\/\/shipip.com\/?p=18754"},"modified":"2022-07-01T13:37:22","modified_gmt":"2022-07-01T13:37:22","slug":"cyber-resilience-is-core-for-ship-security","status":"publish","type":"post","link":"https:\/\/developmenttask.com\/ShipIpLtd\/cyber-resilience-is-core-for-ship-security\/","title":{"rendered":"Cyber resilience is core for ship security"},"content":{"rendered":"
\n
\n

Shipowners, operators and managers need greater cyber resilience as they introduce higher levels of digitalisation across their fleets<\/p>\n

Ships and ports are increasingly becoming victims of cyber attacks as networks and vessel IT is further linked to online and cloud-based services.<\/p>\n

Delegates at Riviera Maritime Media\u2019s Maritime Cyber Risk Management Forum, held 28 June in association with Norton Rose Fulbright, heard they need to integrate cyber security into their digitalisation programmes.<\/p>\n

International Seaways vice president and chief information and security officer Amit Basu said cyber resilience should be embedded in newbuild projects and retrofitted into existing ship systems. \u201cDigitalisation is growing at an extremely swift rate, which is causing a significant increase of the cyber-attack surface on the ships,\u201d he said.<\/p>\n

On the other side, cyber criminals are innovating and are more sophisticated in their approach to the maritime industry with targeted attacks more common.<\/p>\n

\u201cCyber security alone is not enough anymore, it is time to aim for cyber resilience,\u201d said Mr Basu. \u201cCyber resilience is an organisation\u2019s ability to withstand and quickly recover from cyber events disrupting usual business.\u201d<\/p>\n

He recommends owners manage cyber security with a multi-layered approach encompassing people, processes and technology.<\/p>\n

\u201cAlign IT and business for a united front against the cyber threats,\u201d said Mr Basu.<\/p>\n

Cyber resiliency objectives need to be aligned with digital transformation business goals and these initiatives must embed cyber-security measures in the project specifications from the initiation stage.<\/p>\n

\u201cIntegrate cyber security into digital transformation programmes,\u201d said Mr Basu. \u201cOur entire industry must build together a cyber resilient ecosystem.\u201d<\/p>\n

W\u00e4rtsil\u00e4 Voyage head of cyber security technology Paivi Brunou said evolving technologies driving shipping forward increase the risk of cyber attacks.<\/p>\n

\u201cWith the advent of highly digitalised shipping, remote operations andautonomous navigation, cyber security is becoming critical to the emerging technological improvements in maritime environments,\u201d she said.<\/p>\n

Shipowners should therefore implement context-relevant and effective cyber controls and capabilities to reduce attack surfaces in their systems. Vessel operators need to identify the residual risks and \u201cwork together to implement best way to minimise those through layered security activities,\u201d said Ms Brunou.<\/p>\n

She suggested working with third parties on security, collaborating with partners and sharing information on cyber security related near-misses and incidents via a trusted channel.<\/p>\n

\u201cThe industry needs to take action to increase cyber security and resiliency by leveraging public and private partnerships and collaboration,\u201d she said.<\/p>\n

\u201cMaritime cyber security needs to be ready not only for what is happening today, but what will be a reality during the next decade.\u201d<\/p>\n

Inmarsat director Laurie Eve said achieving cyber resilience requires many elements of security and threat intelligence as well as training, secure network connections and incident response plans.<\/p>\n

\u201cTraining needs to refreshed, updated and continuous, with a no-blame culture to encourage issue reporting,\u201d said Mr Eve.<\/p>\n

He said shipowners should consider employing a security operations centre to provide intelligence and monitor onboard networks to maintain a situational awareness of threats.<\/p>\n

An incident response plan can be used when security is overcome by a cyber threat.<\/p>\n

\u201cAssume there will be a breach at some point and be ready to limit the damage,\u201d Mr Eve said. \u201cInvest in an incident management policy, provide training and do rehearsals and use existing guidance.\u201d<\/p>\n

Inmarsat has a Fleet Secure portfolio of products and services for securing end points, communications and email, and increasing crew awareness and unified threat management.<\/p>\n<\/div>\n<\/div>\n

\n
\n
\n