Securing The Sea Lanes
With 20 years of US Naval experience in shipboard technologies and secure operations, we utilize the expertise to ensure compliance with IT and OT requirements for vessels. We recognize the importance of the International Maritime Organization (IMO) resolution MSC.428(98) regarding maritime cyber risk management in safety management systems, as well as how to effectively apply the NIST Framework.
Securing Operational Technology (OT)
Understanding Operational Technology in Maritime Transportation Systems
Securing Maritime Operations
Identify
Discover where threats and vulnerabilities exist for shipboard assets, data, and applications used to execute operations.
Protect
Develop security measures to secure shipboard systems, critical services, and users from attacks or adverse conditions.
Detect
Implement detection capabilities to identify exploits or system deficiencies that affect shipboard operations.
Respond
Develop action-oriented steps to respond to threat conditions or incidents that impede shipboard system availability.
Recover
Design restoration or incident procedures to continue shipboard operations after adverse system conditions occur.
Bridging IT and OT Despite Cyber Risks
IT (Information Technology) has a more advanced cybersecurity approach with established procedures and training through an Information Security Management System (ISMS). While breaches can cause reputational and financial damage, they don’t typically threaten ship operations. In contrast, OT (Operational Technology) is less mature in cybersecurity, and attacks on onboard OT systems can severely jeopardize safety and manipulate navigation. As a classification society, we collaborate with the industry to ensure that owners, shipyards, and suppliers can build and operate cyber-secure ships and offshore units.
We Are Positioned to Secure Vessels
- Infrastructure Protection: Provide solutions to secure digital and physical systems that reduce blind spots.
- Security Assessment: Assess systems and applications for compliance based on CSF and IMO requirements.
- Security Policy Enforcement: Ensures oversight controls are followed, monitored, and adapted.
- Threat Detection Continuously assess endpoints, networks, and user behavior to detect anomalies.
- Incident Response: Help counter incidents, recover from attacks, and reduce downtime.
Sustaining Operational Resilience for Maritime Vessels
Design Safe Systems
- Practice Safety by Design
- Conider Human-Centric Factors
- Think Risk Based Design
Secure The Vessel
- Network Segmentation
- Assess and Test Security
- Detect Risk Factors
Achieve Resilience
- Develop adaptable processes
- Establish Redundant Operations
- Sustain Readiness
References
The U.S. Coast Guard
International Maritime Organization
The IMO has within its mandate to make trade and travel by sea as safe and secure as possible. To manage and mitigate any threats with the potential to compromise maritime security the Organization develops suitable regulations and guidance through the Maritime Safety Committee (MSC) and with input from the Organization’s Facilitation Committee (FAL) and Legal Committee (LEG). For background information on IMO’s involvement with Maritime Security click here.
