Maritime Cyber Security Has Missing Parts

Cyberspace and the maritime environment are integrated and, therefore, share vulnerabilities and as the cyber attack, hacking and threat landscape continues to change fast, global maritime cyber security needs far more international collaboration.  

Ships are increasingly using systems that rely on digitisation, digitalisation, integration, and automation, which call for cyber risk management on board. As technology continues to develop, information technology (IT) and operational technology (OT) onboard ships are being networked together, and more frequently connected to the Internet.

The US National Maritime Cyber Security Plan has the same limits as any broad strategic vision. The document focuses on three areas of needed actions:

  • Assessing risks and developing standards of protection.
  • Ensuring information and intelligence sharing between the public and private sectors.
  • Creating a maritime cyber security workforce.

Now, Cyware a Virtual Cyber Fusion Platform provider, has partnered with the US Maritime Transportation System Information Sharing and Analysis Center (MTS-ISAC) to engage with the maritime community’s ability to collect and share threat intelligence in real time. Cyware's purpose aim is to ensure MTS-ISAC’s runs a more efficient end-to-end security automation, cyber security operations with threat hunting and incident response programs. 

The MTS-ISAC aims to improve cyber risk management across the MTS community through collaboration around intelligence, identification, information protection, detection, response and recovery. 

MTS-ISAC has emerged as a trusted point of coordination for some of the most influential private and public sector stakeholders in the global maritime community, representing ports, terminal operators, vessel operators, cruise, classification societies, energy and government industry stakeholders.

Cyware’s Virtual Cyber Fusion Platform delivers next-generation security orchestration, automation and response (SOAR) in tandem with automated threat intelligence, allowing organisations to more easily share threat data and collaborate on threat response. This unique combination results in greater visibility into an organisation’s security operations and allows for secure information sharing between partners. 

Whether the target is ships, humans, or logistics chains, the maritime environment continues to be vastly underappreciated for its cybersecurity risks and, ultimately, represents a major and underserved economic vulnerability.

Cyware allows MTS-ISAC to collect and share security alerts on the changing threat landscape and intelligence around specific attacks in the maritime transportation industry. Cyware’s Situation Awareness Platform and Threat Intelligence Exchange, MTS-ISAC members can also automatically share threat intelligence with each other and this includes indicators of compromise, malware alerts, vulnerability advisories, security incidents, and phishing attacks among its global maritime community, according to the company’s announcement.

 War On The Rocks:         ICS Shipping:        I-HLS:

You Might Also Read: 

Maritime Shipping Is A Prime Target In 2021:

 

 

 

« Results: NATO’s 2021 Cyber War Game
Significant Growth In State-Sponsored Cyber Attacks »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

CYRIN

CYRIN

CYRIN® Cyber Range. Real Tools, Real Attacks, Real Scenarios. See why leading educational institutions and companies in the U.S. have begun to adopt the CYRIN® system.

The PC Support Group

The PC Support Group

A partnership with The PC Support Group delivers improved productivity, reduced costs and protects your business through exceptional IT, telecoms and cybersecurity services.

North Infosec Testing (North IT)

North Infosec Testing (North IT)

North IT (North Infosec Testing) are an award-winning provider of web, software, and application penetration testing.

Jooble

Jooble

Jooble is a job search aggregator operating in 71 countries worldwide. We simplify the job search process by displaying active job ads from major job boards and career sites across the internet.

Cyber Security Supplier Directory

Cyber Security Supplier Directory

Our Supplier Directory lists 6,000+ specialist cyber security service providers in 128 countries worldwide. IS YOUR ORGANISATION LISTED?

Hack Miami

Hack Miami

HackMiami is the premier resource in South Florida for highly skilled hackers that specialize in vulnerability analysis, penetration testing, digital forensics, and all manner of IT security.

Rollbar

Rollbar

Rollbar is a full-stack error monitoring platform for web and mobile applications. We help developers find and fix bugs fast. Built by developers for developers.

Veridify Security

Veridify Security

Veridify Security (formerly SecureRF), develops and licenses quantum-resistant, public-key security tools for the low-resource processors powering the Internet of Things.

herdProtect

herdProtect

herdProtect is a second line of defense malware scanning platform powered by 68 anti-malware engines in the cloud.

Fend

Fend

Fend secures smart infrastructure. We provide a robust, highly secure way to have situational awareness of IoT enabled assets.

Mindsight

Mindsight

Mindsight is a technology consulting firm with expertise from cybersecurity to cloud, disaster recovery to infrastructure, and collaboration to contact center.

Stanley Reid & Company (SRC)

Stanley Reid & Company (SRC)

Stanley Reid & Co is an Executive and Technical Search Firm serving the commercial market and the US Intelligence & Defense community. Our areas of expertise include Cybersecurity.

Alcon Maddox

Alcon Maddox

Alcon Maddox is a niche recruitment and executive search firm specialised in sourcing exceptional Cyber Security sales and commercial leadership talent. Serving clients across the Middle East & Europe

Stratus Technologies

Stratus Technologies

Edge Computing solves the inherent challenges of bandwidth, latency, and security at edge locations to enable IIoT devices and data acquisition.

NARIS

NARIS

NARIS is the leading provider of an integrated Governance, Risk and Compliance platform called NARIS GRC.

Abu Dhabi Gov Digital

Abu Dhabi Gov Digital

Gov Digital (formerly Abu Dhabi Digital Authority - ADDA) enable, support and deliver a digital government that is proactive, personalised, collaborative and secure.

MoogleLabs

MoogleLabs

MoogleLabs leverage AI/ML, Blockchain, DevOps, and Data Science to come up with the best solutions for diverse businesses.

Hackurity.io

Hackurity.io

Hackurity.io is a high energy IT security start-up founded in 2021 out of the frustration that IT Security is highly fragmented and reactive.

Memcyco

Memcyco

Memcyco is a provider of cutting-edge digital trust technologies to empower brands in combating online brand impersonation fraud, and preventing fraud damages to businesses and their clients.

Control D

Control D

Control D is a modern and customizable DNS service that blocks threats, unwanted content and ads - on all devices.

Proton

Proton

Proton provides free encrypted email, calendar, drive, password manager, and VPN services. Building a better Internet.