CYBERSECURITY IN THE MARITIME INDUSTRY: THREATS, RESPONSES, AND INCIDENT MANAGEMENT

Abstract

This article addresses the issue of cybersecurity in the maritime sector amidst the increasing digitalization of mar- itime infrastructure. Recent research and publications on cybersecurity in the shipping industry indicate an increase in threats due to the digitalization of the maritime industry. It emphasizes the importance of implementing effective cyber incident response plans to ensure business continuity and reduce risks associated with cyber threats. The implementation of international standards, scenario testing, and agile process management all form the foundation for cyber resilience in the maritime sector.The purpose of the study is to develop a model for building an effective action plan and response plan for cyber incidents using modern project management technologies and based on data protection standards. As authors, we see the following main tasks: building an action plan to ensure the cybersecurity of the ship based on governing documents, the experience of leading specialists, and an analysis of achievements in the field of cybersecurity on seagoing vessels; implementing the project into the education system of the relevant direction and testing it during the cadets’ swimming practices; further using it for operational training of crew members on ships. Currently, an agreement has been reached to include the built plan in the program of the educational component “Cybersecurity of ship computer networks and systems” of specific educational institutions, such as the Kherson State Maritime Academy.Existing approaches to incident response were analysed, and the possibilities of adapting project management to increase the effectiveness of such measures were investigated. Another goal of this study is to improve the plan for practical training of future shipowners in ensuring cybersecurity on a seagoing vessel by modernizing and changing the content of the educational component. A structured approach to creating a cyber incident response plan focused on the specifics of threats in shipping is proposed. The study’s practical significance lies in the possibility of using the results obtained by shipping companies and port authorities to train personnel by the requirements of international standards.