Risk Focus: Cyber - Considering threats in the maritime supply chain

Executive Summary

• The IMO Resolution MSC.428(98) prompts the shipping community to understand cyber vulnerabilities and how they could affect operation
• A number of leading actors including BIMCO and the US Coast Guard have contributed to industry guidelines
• Regional directives and legislation such as the Directive on Security of Network and Information Systems (NIS Directive) and EU General Data Protection Regulation (GDPR) are indicative of the growing importance of cyber security
• Cyber incidents have varied from unsophisticated mandate fraud scams and ransomware viruses to Global Navigation Satellite System (GNSS) and Automatic Identification System (AIS) jamming and spoofing
• Cyber-crime-as-a-service, or the purchase of attack methods on the dark web, has made it easier for those with limited technical capability to conduct sophisticated attacks
• The overwhelming majority of incidents are not targeted attacks
• Inadequate training and a lack of awareness around cyber security both on board ships and on shore elevates the likelihood of incidents caused by human error

CLICK HERE TO DOWNLOAD THE WHITEPAPER