Cyber Security Is Crucial For Maritime Shipping

The global economy relies heavily on maritime transport as the majority of international trade is conducted via the sea. A delay in shipping can lead to severe financial loss, especially for firms higher up in the distribution channel and it is this heavy reliance makes the maritime transport industry an appealing target for cyber criminals.

In fact, the maritime industry is now facing an increasing number of new threats and regulatory requirements as it undergoes digital transformation. 

Widespread digitalisation has brought many benefits to shippingCritical vessel systems required for the safety of navigation, power supply and cargo management are increasingly digitised and connected to the Internet to perform a wide range of legitimate functions.

  • Seafarers can call home more easily and frequently. 
  • Port management systems are now much smarter.
  • Digital navigation tools are improving voyage times and reducing emissions. 
  • Vessels are increasingly integrated with onshore operations. 
  • Digital communications are used to conduct business, manage operations, and keep in touch with office managers. 

Shipping’s increased reliance on digital systems has also created new vulnerabilities. Some of these are relatively easy to fix. Paper charts and working knowledge of a sextant have guided mariners for centuries, and can fully overcome any ECDIS failure. Others are both harder to detect and less easily fixed. For example, criminals are using GPS jamming to help them to plunder cargoes. Similarly, the technology needed to spoof, or deceive a vessel as to its actual location, is inexpensive and easy to find online. Should a hacker be able to access a ship’s digital core, it could prevent any internet-enabled activity and ship without the ability to communicate could quickly be deemed ‘off hire’ by a charterer.

Maritime cyber security is concerned with the protection of IT systems, onboard hardware and sensors and data leak from unauthorised access, manipulation and disruption. Unfortunately, effective cyber security measures are not keeping pace with the threats the industry faces. 

Recent Major Incidents

  • Naval Dome, an Israeli a maritime cyber defence company, estimates there had been a 400% growth in attempted attacks on maritime targets between February and June 2020. 
  • A study by the German research institute DLR found interference on GPS frequencies during every phase of a year-long voyage between Europe, the Far East and back.
  • In 2019, the US Guard brought up interference with GPS navigation signals as an “urgent issue” to the UN shipping governing agency, the International Maritime Organisation (IMO).
  • The social restrictions imposed by the Coronavirus have increased the use of connectivity by OEMs, technicians and others to service ships. This is likely to have increased the possible attack surfaces and number of incidents further still.

Shipowners and operators must now ensure that they are regularly working to improve their risk management and adapting their procedures and processes as the complexity and danger from digital attacks evolves.

The first step to take when updating your cyber risk management is to specify who will be responsible for administering and supervising, and identifying which systems are vulnerable to attack. Once that is complete, risk control processes must be regularly tested, and the lessons learned embedded within ongoing resilience and contingency planning.  

If an owner of a vessel cannot show that it has performed appropriate due diligence in managing its cyber risks in line with the new guidelines, the vessel may be found to be unseaworthy.  Should this happen, it’s likely to jeopardise contracts of carriage and could compromise a shipowner’s ability to rely on the international regulations,to protect their legal and commercial interests. Also,many financing agreements require compliance with the IMO's International Safety Management (ISM) Code. The ISM Code provides welcome standardisation and updates to enhance the safety of ships and the seafarers that crew them and it possible that a breach of the ISM Code could put a borrower in default on his loan contracts.

At present there is a limited cyber insurance market for marine risks but because of the growing number of cyber attacks and the very visible consequences to some of shipping’s biggest companies demand for maritime cyber insurance cover is likely to grow.

Changes introduced by the IMO to deal with cyber risk management came into effect at the beginning of 2021 and require new ways of working, the deployment of new skills and investment in training, equipment and processes.

These changes start with the board: without resolute board leadership, compliance with the standards will not be possible. It is shipping companies and their Directors who are ultimately responsible for the safety of the vessels, and will be required to decide how much and on what to invest to mitigate significant risks. 

Penta Security:       Marine-Digital:      Astaara:     Maritime Executive:       Maritime Executive:    Image: Unsplash

You Might Also Read:

Why Real-Time Data Matters To The Maritime Industry:

 

« Cyber Security Training Goes Gaming
GCHQ Jammed ISIS Drones & Servers »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

IT Governance

IT Governance

IT Governance is a leading global provider of information security solutions. Download our free guide and find out how ISO 27001 can help protect your organisation's information.

Clayden Law

Clayden Law

Clayden Law advise global businesses that buy and sell technology products and services. We are experts in information technology, data privacy and cybersecurity law.

CSI Consulting Services

CSI Consulting Services

Get Advice From The Experts: * Training * Penetration Testing * Data Governance * GDPR Compliance. Connecting you to the best in the business.

Resecurity, Inc.

Resecurity, Inc.

Resecurity is a cybersecurity company that delivers a unified platform for endpoint protection, risk management, and cyber threat intelligence.

LockLizard

LockLizard

Locklizard provides PDF DRM software that protects PDF documents from unauthorized access and misuse. Share and sell documents securely - prevent document leakage, sharing and piracy.

ClearDATA

ClearDATA

The ClearDATA Managed Cloud protects sensitive healthcare data using purpose-built DevOps automation, compliance and security safeguards, and healthcare expertise.

HYPR

HYPR

HYPR Decentralized Authentication minimizes the risk of enterprise data breaches while providing an enhanced user experience for your customers and employees.

London Office for Rapid Cybersecurity Advancement (LORCA)

London Office for Rapid Cybersecurity Advancement (LORCA)

LORCA's mission is to support the most promising cyber security innovators in growing solutions to meet the most pressing industry challenges and build the UK’s international cyber security profile.

VaultOne

VaultOne

VaultOne is a next-generation security solution that addresses security issues from different domains (Password Manager, Secure Access, PAM, Identity Management) as a single, integrated solution.

AppGuard

AppGuard

AppGuard prevents breaches by blocking applications from performing inappropriate processes using our patented dynamic isolation and inheritance technologies.

Blackpoint Cyber

Blackpoint Cyber

Blackpoint’s mission is to provide effective, affordable real-time threat detection and response to organizations of all sizes around the world.

NuCrypt

NuCrypt

NuCrypt is developing technology that is applicable to ultrahigh security data encryption as well as key distribution.

C2SEC

C2SEC

C2Sec provides an innovative analytics platform that assesses and quantifies cyber risks in financial terms based on combining patented big data, AI, and cybersecurity technologies.

Cyber Security Operations Consulting (CyberSecOp)

Cyber Security Operations Consulting (CyberSecOp)

CyberSecOp is an ISO 27001 Certified Organization which provides cyber security operations services and risk management consulting.

BCN Group

BCN Group

BCN Group is an agile IT solutions provider. We are experts in delivering and managing business-critical technology solutions.

National Cyber Coordination & Command Centre (NC4) - Malaysia

National Cyber Coordination & Command Centre (NC4) - Malaysia

NC4 is established as a center for dealing with cyber threats and crisis at the national level in Malaysia.

Trapp Technology

Trapp Technology

Trapp Technology combines the very best cloud, Internet, IT managed services, and IT consulting to provide a true all-in-one IT solution for small to mid-sized businesses.

Clarabot Nano

Clarabot Nano

Nano is the secure file sharing tool to improve content search, data access and collaboration between multiple parties.

Imprivata

Imprivata

Imprivata is the digital identity company for life- and mission-critical industries, redefining how organizations solve complex workflow, security, and compliance challenges.

ScamAdvisor

ScamAdvisor

ScamAdviser helps over 3 million consumers every month to discover if a website is legitimate or a possible scam.

Smartcomply

Smartcomply

Smartcomply is an automated and AI-powered cybersecurity and compliance platform that aids businesses in reducing the time and money spent on cybersecurity and compliance.