malba, Author at SHIP IP LTD

Cpt Tama identifies the transition to the Internet of Things (IoT) approach as a major source of that vulnerability. IoT is an information technology term that describes a system of devices or of self-contained systems that are connected and able to communicate over a single network. This connectivity is achieved largely by the introduction of firmware into vessel and onshore hardware systems. According to the Institute of Electrical and Electronics Engineers, firmware refers specifically to the “combination of a hardware device and computer instructions or computer data that reside as read-only software on the hardware device.”

Source: warriormaven

Leading MPA’s efforts in driving cyber security and resilience in the Maritime Singapore, in which you will play a crucial role in a dynamic cybersecurity team to carry out cybersecurity oversight of the Maritime sector, and develop regulatory initiatives to ensure compliance with sector-wide and enterprise-wide cybersecurity policies, standards and procedures. Your mission will be to strengthen the cybersecurity readiness and resiliency of MPA and the Maritime sector.

You will manage third party consultants, together with relevant MPA departments in conducting periodic compliance audits and risk assessments. You will work with Internal Audit team to conduct, monitor and identify systems due for audit in accordance to IM8 and CCOP requirements.

You will work with critical information infrastructure owners (CIIOs), to safeguard and strengthen cyber resilience of Maritime sector’s CIIs in Singapore. Review risk assessment and audit reports submitted by CIIOs as required by Cybersecurity Code of Practice and review classification of Maritime sector’s CII and CII boundary.

Requirements

To be successful in the role, the candidate should possess the following:

• At least 1 year of experience in IT/ Operational Technology (OT) related role in the areas of governance, audit and compliance work. Fresh graduates are welcome to apply.

• Prior experience with conducting risk assessment and audit for IM8 and CCOP will be preferred.

• Good verbal and written communication skills with stakeholders at all levels.

Candidates who are able to commit for a period of 6 months to 1 year are welcome to apply.

Source: mycareersfuture

Maritime is one of the oldest industries and lifeblood of the global economy, accounting for the carriage of 90% of world trade. Ships and other vessels may seem like unusual targets for cyber-attacks. But with their growing use of industrial control systems (ICS) and satellite communications, hackers have a new playground that’s ripe for attack.

In a 2020 Safety at Sea and BIMCO Maritime Cyber Security survey, despite the majority of respondents (77%) viewing cyber-attacks as a high or medium risk to their organizations, few appear to be prepared for the aftermath of such an attack. 64% of respondents said their organization has a business continuity plan in place to follow in the event of a cyber incident, but only 24% claimed it was tested every three months, and only 15% said that it was tested every six to 12 months. Only 42% of respondents said that their organization protects vessels from operational technology (OT) cyber threats, and some respondents went so far as to describe their company policy to OT cyber risk as “careless.”

Source: missionsecure

The technique for evaluating the risk of cyber-sabotage of industrial processes are well understood by those skilled in the art. Essentially, such risk assessments evaluate a typically large inventory of possible cyber attacks against the cyber-physical system in question, and render a verdict. Communicating the verdict to business decision-makers who are not familiar with cyber-security minutia is more difficult, especially for the low-frequency, high-impact (LFHI) type of attacks for which there is little statistical data.

The experience of such communications suggests that business decision-makers can much more often understand and make useful decisions about specific examples of cyber attacks, than they can understand abstract risk scores resulting from a process of evaluating millions of attacks.

This paper recommends using a standard set of Top 20 ICS attacks as a methodology for communicating cyber-sabotage risk, with the Top 20 set representing ICS attacks of varying levels of cyber and engineering sophistication, and with varying degrees of undesirable physical consequences. We recommend that a standard Top 20 includes both ICS attacks that are reliably defeated by existing cyber defenses, and attacks that are not so defeated.

Source: waterfall-security

The Maritime environment is not immune to the radical ability of modern digital communications and computing to be disruptive. In order to gain the advantages of modern technology those operating in the maritime must also become aware and develop strategies to handle the inevitable security issues that modern computing systems bring with them. This report presents a first step on the road to this understanding by presenting the findings from a joint workshop run by Security Lancaster and the Developments, Concepts and Doctrine Centre with participants from a range of government and commercial stakeholders. Here we present the salient points that we discussed within a framework that underpins a repeatable approach to scenario planning based on assessing key traits and trends in three key elements of the cyber maritime domain: Information, People and Technology. This report identifies how the use of technology is extending the scope for maritime security far beyond traditional littoral boundaries and the key influences shaping the cyber maritime environment.

Source: eprints.lancs.ac.uk

A new report by maritime innovation consultancy Thetius suggests that epidemics and pandemics may become more common and predicts that crew safety, fatigue and harassment issues are unlikely to recede in the short term.

The report also foresees the potential for seafarer abandonment and criminalisation as growing problems that need to be addressed.

The report ‘A fair future for seafarers’ which is sponsored by Inmarsat, indicates that if such scenarios appear bleak, they also highlight connectivity as a necessity. “Seafarers in 2050 will likely have greater interaction and engagement with teams of people ashore,” according to the report. Shipping economics and carbon emission strategies point to shorter port stays. Welfare services will become more digitally focused than physical, face-to-face contact. Lower crew numbers and shorter shore leaves will also mean less reliance on seafarer centres, therefore online charity outreach services will grow in vital importance.

“Drawing on recent experience, fast-changing digital landscapes and testimony from industry authorities, this report offers a clear vision of the critical role connectivity and technology will play in crew welfare in the coming years,” said Ronald Spithout, president, Inmarsat Maritime.

Thetius identifies a number of technologies that are critical for future crew welfare and Inmarsat supports their early adoption.

“The 2020-21 pandemic may come to be seen as a tipping point for telemedicine,” said Spithout. The report highlights how fatigue monitoring and management systems will likely replace manual logging of rest hours. Following the 2020 Crew Welfare Open Innovation Challenge, Inmarsat and Shell Shipping and Trading are sea trialling the software capability provided by Eupnoos and Workrest to enable intelligent fatigue management from the data collected by wearable technology.

In 2050, seafarers will have been born into the digital era, Gardner and Chubb note, but the use of artificial intelligence (AI), 3D printing, and extended reality (XR) technology onboard will still demand higher levels of technical training. Signs of change are also apparent here, with the Isle of Man Registry working with start-up Tapiit to create an app to live stream training, and organisations such as Ocean Technology Group delivering maritime training using VR headsets.

“We are fully aware of the sacrifices our seafarers continue to make to keep the world economy running,” said Spithout. “This new report includes important proposals for the creation of a global seafarer advocacy organisation and an urgent strategic review of local seafarer services. For its part, Inmarsat is doing everything in its power to support our seafarers. We are doing so through enhancing connectivity and the digital services that support safety, continuous professional development and crew welfare as well as continuously working in collaboration with charities, ship owners and managers to provide enhanced welfare services.”

Source: thedigitalship

“The St. Lawrence is central to the success and assets of the Greater Montreal hub. Our sector depends on this vital marine connection with the world. Beyond the direct benefits of Avantage Saint-Laurent to our shipping community, the more than 6,000 businesses operating in logistics and freight transport in the metropolitan area will also benefit from this new vision and the many initiatives that will result from it. Without a doubt, Avantage Saint-Laurent will not only improve existing infrastructures, but also facilitate the implementation of innovative, smart, sustainable and economically viable projects for our supply chain,” said Mathieu Charbonneau, Executive Director of CargoM.

“The resilience and dynamism of our sector, paired with this strategy being implemented by our government, will position marine transportation as a cornerstone in the green economic recovery. Through these three major thrusts, Avantage Saint-Laurent will increase Quebec’s potential in this sector as well as the collective wealth, while taking into account the social and environmental aspects of this important shipping corridor,” said Ms. Madeleine Paquin, President and CEO of Logistec Corporation and Chair of the Board of Directors of CargoM.

CargoM looks forward to actively collaborating in projects stemming from Avantage Saint-Laurent, especially in relation to the workforce, so that every actor in our great logistics community can participate and benefit from it.

Source: newswire

Maturity and innovation have proved a winning combination as the world’s most technologically inventive ship registry has been elevated to the Paris MoU Grey List from June 2021.

Palau International Ship Registry (PISR) has been recognised for its digitally based services and growth in just three short years. This is a remarkable progression for a new registry and is attributed to the commitment to digital services and the recruitment of experienced and knowledgeable staff across the maritime sector. Now the combination of its own unique technology and human resources has seen it record some of the lowest detention figures for its growing fleet in the past 12 months.

Panos Kirnidis, CEO of PISR, is also celebrating the fifth anniversary of the registry’s European office based in Piraeus in Greece and believes the registry’s inclusion in the 2021 Paris MoU Grey List is a testament to the maturity and determination of its global network.

“This is not a surprise to anyone associated with Palau International Ship Registry. We were determined to lift ourselves into the white list and this will be achieved through our innovative and unique technology combined with the recruitment of experts in every aspect of ship registry services.

“Detentions by Port State Control and the increasing environmental regulations have put ship owners and operators under great stress in the past few years. The global pandemic has added to their worries and yet, we have proved that by investing in online services, finding the right people across our global network and offering our unique Deficiency Prevention System (DPS), we can assist them in avoiding these financially damaging detentions.

“It is this combination that is unique to PISR. It is our own in-house developed software systems that have seen our fleet detentions plummet. It is simple to use, highly effective and available from a desktop PC or even a smartphone. This is the reason PISR has been able to reduce detentions and allow us to claim our place in the Grey List. But we are not stopping our drive and we will see even further improvements in our listing into 2022 and beyond.”

After just five years PISR has been recognised as one of the world’s fastest growing and most inventive ship registries according to Panos Kirnidis.

“When I talk to ship owners, they tell me they want reliable and dependable services. They want information in real time enabling them to make the decisions that keep them sailing without penalties. We developed our Deficiency Prevention System (DPS) to do just that, and it has been an outstanding success. This is a process of maturity for any new ship registry, but we began life by examining the mistakes other established registries had made and then avoided them. Our combination of technology and the human element is the basis for our proactive services. “We recently hosted an online event for our Deputy Registrars and Flag State Inspectors and recognised their contributions to our success. Finding the right people is as painstaking as developing the technology but ship owners tell us it is paying dividends. We have been saying we are trailblazers in an established industry. We have been telling the maritime and shipping world that Palau International Ship Registry is here to stay. Well, we have proved that, and we make no apologies for saying the Grey List is a great reward for our faith and determination to be the best at what we do. As a flag of confidence, PISR will continue to innovate, operate and generate, the right combinations of services, fees, knowledge and customer service that we are known for. This year the Grey List and our targets for the coming years include an even larger fleet and the White List is in our sights.”

Source: palaureg

1. Data Processing and Data Processing Purposes

1.1 The Company “CITY UNITY Maritime Training Center” (hereinafter: «the Company») processes, in the context of your employment, personal data collected by you and/or third parties (such as recruiters, job-posting websites and/or your previous employer), in accordance with Regulation (ΕU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter: «GDPR») and Greek legislation. More specifically, the Company processes personal, passport/ID and communication information, banking, social security and tax data, information about your education and previous and current employment, photo, your marital status and family information, travel information, your communications with the Company, information about your next of kin, health data, information about your entry/exit from the Company, e-mails that you send from and receive in your corporate e-mail account, calls you make and receive in your corporate mobile phone and work phone, your corporate mobile phone bill and any other personal data that may be necessary to achieve the below purposes of personal data processing.

1.2 The Company processes your personal data during your employment, while such processing will extend after the completion of such employment, and to the extent required in order for the Company to comply with its legal obligations towards the authorities and/or third parties, to comply to any applicable provisions on the obligatory data retention periods or in order for the Company to support its claims or rights.

1.3 The Company processes your data in order to ensure its proper operation in accordance with its employee-related procedures, to fulfill its staffing needs, to comply with its legal and contractual obligations, to identify its employees and to ensure the safety of its staff and of its premises.

2. Transfer of personal data to third parties

2.1 Your data may be made accessible to the Company’s personnel, as well as to third parties, such as the competent authorities, technical contractors, investigators, accountants, auditors, lawyers and legal counsels, IT companies providing technical or cloud services or i-storage platforms and banks.

2.2 The Company may also transfer some or all your data for the above purposes to persons located in countries that are not members of the European Economic Area (EEA). Where such countries have not been granted with an adequacy decision by the European Commission, any transfer shall take place under the appropriate safeguards in accordance with the GDPR, such as Standard Contractual Clauses approved by the Commission or by the competent national authority.

3. Your rights

In accordance with the GDPR, you have the right to: (a) request access to your data and to information relating to the processing thereof by the Company, (b) request corrections and/or the completion of your data, (c) request the Company to delete your data, (d) request the restriction of the scope of processing, the way that the Company is processing your data, as well as the purposes for which the Company is processing them, (e) receive the personal data you provide to the Company and to transmit them and/or request the Company to transmit them to another data controller, (f) object to the processing of your personal data, (g) file a complaint before the Hellenic Data Protection Authority, and (h) so far as the processing relies upon your consent, to withdraw such consent at any time. To exercise your rights, please contact the Company as illustrated below at 5.

4. Legal basis for the processing of personal data

The Company processes your personal data because the processing is necessary, in order for the Company to:

(a) comply with its legal obligations, including among others obligations in the field of employment or social security law,

(b) fulfill its obligations and/ or satisfy its rights deriving from your employment agreement,

(c) satisfy its legitimate interests, such as its proper operation in accordance with its employee-related procedures, to fulfill its staffing needs, to comply with its legal and contractual obligations, to identify its employees and to ensure the safety of its staff and of its premises and the fitness to work of its employees,

(d) establish, exercise or defend legal claims, and/or

(e) process your personal data pursuant to your consent.

The above processing is required by law or due to a contract executed between you and the Company. Therefore, if you do not provide us with your data, the execution of your employment agreement may not be possible.

Source: maritimecareer

A company we worked with recently on cyber resilience found that our work also improved their ability to recover from general technical failures. We identified areas that they had previously not considered – vulnerabilities that they did not know were vulnerabilities.

We asked them what their process was for recovering from a complete ECDIS failure and how long they expected it would take them to recover.

We listened and found that there were areas that could be improved. We worked with them to give them the ability to rebuild their bridge systems from the ground up if they needed to. Our team worked with the vendors to get them the software they needed and arranged for the crew to be trained to implement the recovery plan. It turned out it was quite simple to put in place but they had never before asked the “what if” question, they had never considered there could be a better way of doing things. They now have in place a far quicker, cheaper and simpler system of recovery than flying a specialist software engineer out to the vessel location or downloading a massive file over a VSAT connection.

That’s a typical situation that we come across. By working on cyber resilience, asking the right questions, my team identified operational improvements.

It’s about looking at the world through a different prism. About identifying problems and coming up with practical solutions that cause the minimum of disruption and ensure that, if any losses our outages do occur, they remain minimal. Forewarned is forearmed as they say.

Simply asking the question “Have we considered the cyber risk for X” brings it into the conversation. You don’t need to know the answer, you just need to make sure that someone else does.

Similarly, we work with some of the world’s leading insurance brokers and that is because we make their risks less risky. That’s good for them because it reduces the level of claims and good for us because we get more business. But the main beneficiary is the end client. They get cheaper insurance cover, less exposure to risk and enhanced operational resilience. It’s a virtuous circle.

Newer Posts

Older Posts

U.S. Navy Preps For Massive “Cyber War” at Sea

MARITIME AND PORT AUTHORITY OF SINGAPORE

A Comprehensive Guide to Maritime Cybersecurity 2021

THE TOP 20 CYBERATTACKS ON INDUSTRIAL CONTROL SYSTEMS WHITEPAPER

The future of maritime cyber security

New report finds connectivity crucial to seafarers’ future welfare needs

CargoM applauds the new maritime vision Avantage Saint-Laurent

Innovation leads to elevation for global ship registry

Information Notice on the Processing of Personal Data

How cyber security can improve your marine operations

News

Navigating Rising Maritime Purchasing Expenses in 2025

Recent Cybersecurity Incidents and Regulatory Developments in the Maritime Industry (March 2025)

Navigating Maritime ESG: Upcoming Regulations and Compliance Strategies

Quick Menu

Company DETAILS

ISO 9001:2015 CERTIFIED