maritime cyber security - emlo.org · cyber threats industry wide issues • cyber affects all...
TRANSCRIPT
ab
WWW.MISHCON.COM © MISHCON DE REYA LLP 2017
CYBER THREATS
Cyber Risks in the Maritime World
ab
ab
WWW.MISHCON.COM © MISHCON DE REYA LLP 2017
CYBER THREATS
Industry Wide Issues• Cyber affects all elements of the maritime industry from the ship to the shore. • Those targeting the industry range from highly sophisticated nation states, to more
amateur criminals – all are highly effective.
ab
ab
WWW.MISHCON.COM © MISHCON DE REYA LLP 2017
ab
Increased Digitisation
An increasing amount of the industry is digitising – from navigation and propulsion on the vessel, to data analysis in the company office and many aspects of port operations.
ab
WWW.MISHCON.COM © MISHCON DE REYA LLP 2017
SHORE - CYBER FRAUDPorts Security• The ability to access digital ports data has been used to bypass customs procedures, and to
facilitate physical crime. • Port facilities are susceptible to a wide range of cyber risks, which affect all businesses.
ab
ab
WWW.MISHCON.COM © MISHCON DE REYA LLP 2017
SHIP –THE INTERNET AT SEA
Internet at Sea• The prevalence of crew quarters WiFi, connectivity far from home and multiple devices
increase the reach of cyber risks, into areas which traditionally were dealt with in the home or office.
• Many security controls will not work in a marine environment, or are viewed as secondary to physical controls.
ab
ab
WWW.MISHCON.COM © MISHCON DE REYA LLP 2017
SHIP –THE DIGITAL VESSEL
Electronic Navigation• The implementation of ECDIS and further digital vessel systems increases cyber risks and
potential liabilities for crew, owners and insurers. • A digital ship is vulnerable to digital issues, and often security is not a primary concern.
ab
WWW.MISHCON.COM © MISHCON DE REYA LLP 2017
Cyber Liability• Cyber issues cause more than reputational loss – when providing infrastructure or services
there is a growing expectation that they are secure.• Cyber Insurance goes some way to managing these liabilities but may not cover all of the
risk.
ab
ab
WWW.MISHCON.COM © MISHCON DE REYA LLP 2017
Technical Solutions• ISPS and SOLAS don’t address cyber, but may be a route to address the safety concerns it
causes. • Doing the basics pays off exponentially.
ab
ab
WWW.MISHCON.COM © MISHCON DE REYA LLP 2017
Compliance Solutions• The General Data Protection Regulation (GDPR) will bring many organisations into its scope.
It requires both privacy and security controls. • Treat cyber security as a safety issue – the right systems to manage these risks already exist.
ab
ab
WWW.MISHCON.COM © MISHCON DE REYA LLP 2017
SHORE – PORT AND CARGO
Joe Hancock
[email protected] / +44 020 3321 6406@joehancock
ab