The topic of cybersecurity is closely allied with many issues that directly relate to the safety, security and wellbeing of shipping companies, vessels and facilities, staff and crewmembers. This topic spans all levels of the organizational chart from the executive level where strategic decisions for security are made, to the janitor who has wide access to facilities. All departments including management, engineering, personnel, training, and logistics must be vigilant in planning, coordinating and implementing cybersecurity policies and procedures for information technology and various types of operational technology so vital for day-to-day operations.
Many books on this subject tend to focus primarily on the general aspects of protecting sensitive data, hardening facilities, and mitigating potential risks from unauthorized access, data breaches, ransom demands, disruptions of information technology and their effects on operations. They might even address the consequences of sabotage, losing sensitive data and the financial bottom line. The reader is left on their own to apply this information to their own industry and situation.
This book focuses specifically on the unique needs and requirements of the maritime shipping industry. The scope of the problem is illustrated by citing examples of cybercrime hazards, events and their effects experienced within the complex and interconnected physical, electronic, and cyber environments prevalent throughout the industry. Lessons learned from these maritime-unique situations are valuable to protect critical vessel functions and technologies from cyberattacks. These needs are translated into the subject of regulatory compliance with International Maritime Organization (IMO) and nation state cybersecurity initiatives, and illustrated using the United States Coast Guard implementation of IMO directives for U.S.-flagged vessels and facilities. However, this book goes even further by discussing issues beyond these requirements. Subjects essential for maintaining cybersecurity include Zero Trust principles in view of pending and expanded roles played by artificial intelligence, maritime digital twin technology, and quantum computing. The result is a comprehensive, practical and actionable treatment of cybersecurity tailored to the needs and requirements of the maritime industry.