As the industry moves into a smart-shipping era, the risk of cyber threats is at an all-time high. State-of-the-art ships, increasing interconnectedness and electronic navigation necessitate guidelines and contingency plans to support secure cyber operations. Cyber threats and even physical loss of cargo is on the rise as hackers rapidly learn how to seamlessly navigate holes in cyber security. In this day of digitalisation, the impact of cyber threats cannot be overstated.
Cyber security refers to the technologies and processes that are designed to protect computers, data and networks from access that is unauthorised and to prevent leakage of data into hands of the unknown. Cyber threats are one of the most serious economic and international security challenges facing the maritime industry today. The need for protection and security enforcements to mitigate the threats the maritime industry faces is more important today than ever.
We previously published the “Top 5 Facts About Cyber Attacks”. Now we present the top 5 ways to act on the cyber security of shipping operations. We examine the measures and methods available to the industry to reduce the cyber threats so evident in today’s world.
1. Download Free Cyber Security Guidelines Published Specifically For The Shipping Industry
At the beginning of 2016, BIMCO launched cyber security guidelines that were developed along with ship owners and also associations including Intercargo.
Understanding the threats, including vulnerabilities that cyber criminals may realise, knowing how to assess them and reduce their risks and providing knowledge on how to develop contingency plans, are the key aims of the Guidelines.
However, in line with BIMCO’s notion that regular updates of such resources are vital, the industry should make sure it’s provided with the most up-to-date information regarding new threats to ensure maximum protection is available.
BIMCO’s Guidelines on cyber security can be accessed and downloaded here.
2. Download Classification Society Guidance
Classification Society Lloyd’s Register also issued a cyber security guidance that prescribes a ‘total system’ solution where the design, installation, connectivity and management of all onboard systems and those ashore are taken into account.
Previous approaches to risk management are no longer a valid method of avoidance, but taking into account all angles of threat relating to where and how systems are integrated is the way forwards.
These guidelines can be accessed by clicking here.
ABS has also issued a set of Guidance Notes, which can be downloaded by clicking here, detailing best practices for cyber security and recommending ways for the marine and offshore communities to protect themselves against cyber stacks. The Guidance Notes reveal current risks and threats and how to perform risk assessments and communications management for reducing the likelihood for cyber-attacks to occur and to lessen the vulnerability for the organisation to such attacks.
3. Exercise Cyber Safety Best Practice
Best practice when it comes to cyber security vulnerabilities such as automated systems safety, data management and software assurance is fundamental to ensuring operational security across ships and entire fleets.
A sustainable manageable strategy that focuses on safety and protection is necessary in an age of imminent cyber-attacks. In order to move forward with the growing idea of autonomous ships and onshore control, comprehensive guidance that outlines methodologies for approaching cyber security is key.
Classification Society ABS’ most recent cybersecurity guidelines, released in 2016, address these challenges, setting out a novel approach for managing cyber threats based on an extended set of engineering process that emphasise human and system safety.
In addition, so is installing malware protection and relevant privacy protection policies within the company, security patches and configurations that ensure IT system privacy is maintained and kept secure. Monitoring strategies are vital as are managing user privileges to monitor activity is critical to remaining safe.
4. Keep Cyber-Educated And Aware
The shipping industry is facing many challenges when it comes to cyber security. An essential step that ship owners and operators, and all industry inhabitants alike, must take it to be exposed to competitor experiences with cyber security. To listen to others describe the processes they are putting in place and to learn from the mistakes of others.
Platforms for discussion and experience sharing can benefit all. For example, the Smart Operations global events that are in their 3rd year gather owners and operators with communications experts and technology companies to share experiences on transitioning shipping operations into the digital era. Cybersecurity is always sat firmly on the agenda. This is no different for the upcoming Smart Operations Singapore event, which is being held on May 12, 2016.
To join this free-to-attend event, or to find out more visit: http://www.fathomshippingevents.com/smart-operations-singapore.html
5. Accept Cyber Security As Being A Real Threat
In order to understand the responsibilities that lie with keeping cyber secure, it is first important to accept that there is a real cyber threat. This means that it is vital to integrate cyber security programmes and awareness as part of your everyday activities. Installing the most recent cyber security software and protection programmes is not a reason to become complacent as unauthorised users are always finding new ways to break into networks and gain data. In reality, a protection system is always out of date as hackers work at the speed of light to gain access to protected areas.
Learning from others and ensuring that you become a hard target to hit is one way of reducing the likelihood of attack. Being aware of the cyber-attacks that have happened in similar companies, and more so of the ones that have or have been close to occurring within your company can help to reduce the hit of an attack in an event.
Ship Efficiency Review News
To contact the reporter responsible for this article, please email editor@fathom-mi.com
