“Critical systems and data are vulnerable to cyber disruption as they become integrated across cyber networks that connect ship and shoreside entities,” said Captain Alexander N. Soukhanov, USMRC’s Vice President of International Shipping and Maritime Operations. “Our focus is on safe operations at sea and in marine terminals. It’s very important that this is an industry-centric initiative and to accurately translate research discoveries to operational and business risk.”
As part of this initiative to confront and understand risk in the maritime industry, USMRC is working with the U.S. Department of State Overseas Security Advisory Council (OSAC) Maritime Security Working Group (MSWG), of which maritime cyber security is an increasingly high priority among risks addressed by the MSWG.
Earlier this month, USMRC conducted the first cybersecurity exercise of its kind as part of the OSAC MSWG, with the participation of 20 executive-level representatives from the shipping industry, as well as senior representatives from the U.S Department of State, Department of Homeland Security and Maritime Administration. The program included information on the current state of cyber security and safety at sea, shipboard cyber vulnerability simulations, and discussions for the development of best practices and industry guidelines. The objectives were to:
- Familiarize participants with the complex range of organizations, processes and technologies that comprise the international shipping ecosystem.
- Expose participants to potential cyber vulnerabilities within maritime trade by demonstrating operational impacts through simulated cyber events.
- Explore the strategic and operational decision making and coordination required to effectively respond to cyber disruptions in the maritime industry, to include understanding the roles and relationships between the maritime industry and government organizations.
- Examine the opportunities and challenges associated with establishing maritime industry cyber security best practices.
This exercise is part of a larger initiative in promoting Maritime Cyber Assurance within the maritime industry. One of the key tenets for achieving cyber assurance is for the maritime industry to establish the exchange of information and the support of best practices development to mitigate cyber risk. The research USMRC is conducting, and the exercise it co-hosted with the OSAC MSWG, are key first steps toward achieving cyber assurance through this exchange of information that can ultimately mitigate risk to the entire industry.