Maritime Cyber Security

Maritime security is an umbrella term informed to classify issues in the maritime domain that are often related to national security, marine environment, economic development, and human security.

The Maritime Safety Committee, at its 98^th session in June 2017, also adopted Resolution MSC.428(98) – Maritime Cyber Risk Management in Safety Management Systems. The resolution encourages administrations to ensure that cyber risks are appropriately addressed in existing safety management systems (as defined in the ISM Code) no later than the first annual verification of the company’s Document of Compliance after 1 January 2021.

This course is developed in accordance with BIMCO, ICS and IACS guidelines, IMO the ISM Code (MSC.428 (98) Maritime Cyber Risk Management in Safety Management Systems) MSC-FAL.1/Circ.3 Guidelines on maritime cyber risk management ISO/IEC 27001 – Information Security Management, 2013.

Along with the development and the use of the maritime domain, old and new threats are emerging, such as piracy, terror, illegal trafficking, cyber, and more.

The maritime security workshop will explore the global geopolitical situation at the seven seas, will map the emerging threats, and will give the participants practical tools and solutions to develop a maritime security strategy. The Participants will acquire new skills for a better understanding of the challenges, risks, and threats at the maritime domain.

All the participants will be issued a certificate for participation by accredited European training centre with detailed information about the topics covered and the acquired competences.

Purpose of the workshop

1. Understand the cyber security threats and risks for vessels, ports, and maritime infrastructure
2. Gain best practices for developing maritime cyber security

Topics

1. Awareness (2 hours):
   1. Introduction to the cyber domain
   2. Cyber security threats at the maritime domain
   3. Common threats & traps
   4. Attack tools and vectors
   5. Good practices towards cyber security

2. Advanced (6 hours):
   1. Short Introduction to cyber
   2. Cyber security threats at the maritime domain
   3. Attack tools, methods, and advanced attack vectors
   4. Cyber domain adversaries: capabilities and motivations
   5. The human factor and the insider threat
   6. Supply chain attack
   7. Mapping maritime domain cyber assets
   8. Risk assessments
   9. Maritime Security Operating Procedures
3. Professional (6 hours):
   1. Advanced gap analysis
   2. Cyber business impact analysis
   3. Building organizational preparedness and resilience
   4. Port security strategy
   5. Vessel security strategy
   6. Rigs and infrastructure security strategy
   7. SOC/SIEM operation
   8. Maritime Cyber Incident Management

Levels of certification