
Maritime Security Testing
The world of maritime security is rapidly changing in the face of changing threats and the opportunistic behaviour of criminals. Instead of the risk and expense of attacking a ship at sea directly, criminals are increasingly accessing cargo manifests and targeting specific containers for the high-value items if interested. Making these criminal activities far less risky and more profitably.
This means that cybersecurity on both ship and port is now far more critical than ever before.
Commercial Ship Security Assessments
Luxury and Recreational Ship Security Assessments
Port Security Assessments
The Maritime Safety Committee of the International Maritime Organisation adopted Maritime Cyber Risk Management in Safety Management Systems to encourage shipping and port administrations to ensure that cyber risks are appropriately addressed in existing safety management systems, specifically outlined in their ISM no later than the first annual verification of the company's Document of Compliance after 1 January 2021.
-
Identify threats and risks that may impact shipping operations, cause safety or security failures due to the compromise or information assets.
-
Take necessary steps to safeguard shipping from current and emerging threats, vulnerabilities related to digitisation, integration and automation of processes and systems in shipping.
-
Ensure Cyber Risk awareness across all levels of the operation.
-
Ensure information resilience and availability.
-
Mature information security management frameworks should be implemented and maintained.
Vulnerable systems could include :
-
Bridge systems
-
Cargo handling and management systems
-
Propulsion and machinery management and power control systems
-
Access control systems
-
Passenger servicing and management systems
-
Passenger facing public networks
-
Administrative and crew welfare systems
-
Communication systems.