CONSULTANCY Archives - Page 2 of 5 - SHIP IP LTD

IMO cyber crime.

The International Maritime Organization (IMO) is readying for the advent of automation in the shipping industry, with a major scoping exercise to safeguard against future disasters, including oil spills and collisions.

Speaking at the regional Spillcon event held in Perth, Australia, in May, Patricia Charlebois, deputy director, Implementation Marine Environment Division, stressed the oil spill response community would need to consider new risk scenarios.

Charlebois told SAS that the IMO had a key strategic direction to integrate new and advancing technologies into its regulatory framework.

“Of course, cyber-risk management is very important as more and more systems become automated,” she said. “Whether you’re talking about an oil tanker or a different kind of ship, cyber-risk management should [play] a part .”

The IMO is now looking at how existing regulations might apply to ships with varying degrees of automation through a regulatory scoping exercise on Maritime Autonomous Surface Ships (MASS).

The IMO’s Maritime Safety Committee (MSC) agreed to examine how safe, secure, and environmentally sound operation of MASS could be introduced in IMO regulations in 2017 after a proposal by member states.

The scoping exercise includes a review of safety and maritime security (SOLAS); collision regulations (COLREG); loading and stability (Load Lines); training of seafarers and fishers (STCW, STCW-F) search and rescue (SAR); tonnage measurement (Tonnage Convention), and convention for safe containers (CSC).

IMO guidelines on maritime cyber-risk management set out procedures on how to safeguard shipping from current and emerging threats and vulnerabilities.

The guidelines, which cover digitisation, integration, and automation of processes and systems in shipping, identify bridge systems, propulsion and machinery management, power control, and communication systems among the most vulnerable to cyber attack.

The IMO aims to complete the scoping exercise by 2020. Meanwhile interim guidelines for MASS trials were approved in June.

IMO cyber crime

SOURCE

Three cornerstones for effective Maritime cyber security

Maritime’s fragmented approach to digitalisation carries risk, especially when it comes to cyber security.

Speaking recently at Lloyd’s Register Asia Shipowners’ Forum, Wallem Group chief executive Frank Coles highlighted how operators can fail to update critical processes when embracing new onboard technologies. By overlooking the human elements of cyber security, he said, operators can undermine the potential benefits of acquiring a new technology – introducing risk instead capitalising on the rewards it can offer.

While cyber security risks posed to the shipping sector are real and pressing, they can be quantified and managed, if the right approach is taken.

Safeguarding critical assets in a fragmented digitalisation process and ensuring profitability in the years to come depends on three cornerstones:

Cornerstone 1: threat-intelligence assessment 

Maritime cyber security .

The cyber security landscape is rapidly changing and the insights gained as little as five years ago are of less and less value as threat actors adjust their approaches in response to advances made by security professionals and technical defenders. Regular threat intelligence and assessment activities allow an owner to view their organisation through the eyes of a potential attacker, to perceive their attack surface in detail, and to assess the real-world threats to their business.

Cornerstone 2: Crisis-management cyber attack simulation

With knowledge of the attack surface and adversaries already in hand, owners can take steps to safely, effectively and efficiently ensure they are prepared to respond to a cyber attack by using a simulated cyber attack known as a ‘red team’ exercise. Such exercises allow a company to define and simulate real-world attack scenarios using the same tactics, techniques, and procedures as a genuine threat actor. They also help determine the level of assurance and ability needed to effectively detect and respond to a genuine cyber attack and educate defence teams about effective responses within a controlled and forgiving environment.

Cornerstone 3: Define a cyber security strategy

An effective cyber security strategy completes the foundation of a secure technological and organisational infrastructure. Designing a cyber security strategy is a complex task for most firms as the strategy must be robust and responsive enough to address a dynamic operational environment. Security professionals can work to create a cyber security strategy to create operational efficiencies, maximum return on technology investments, and assured data and asset protection into the future.

Given the cost and reputational risks associated with a cyber attack – estimated at £11.7M (US$15.4M) per company according to a World Economic Forum 2017 study – there is no doubting the importance of taking a strategic approach to cyber security.

Ultimately, a truly cyber resilient shipping organisation is one that gains intelligence on evolving cyber threats to inform decisions and plans, going beyond the minimums needed to achieve compliance.

SOURCE https://www.marinemec.com

Korean Register (KR) has granted its first cyber security type-approval certificate to a new smart shipping integrated communication system.

The cyber security type-approval certificate has been awarded to Hyundai Electrics for its Hyundai Integrated Smart Communication System (Hyundai-ISCS), aimed at providing comprehensive cyber security protection for next-generation vessels.

KR’s cyber security type-approval is based on international standards such as IEC 62443 4-2 and IEC 61162-460. Under the certification, technical, security and audit functions are inspected and assessed for confidentiality, integrity and availability, while backup and recovery functions are also inspected and analysed to assess their response strength in the wake of a cyber incident.

KR executive vice president Hyung-chul Lee said “This is the very first cyber security type-approval certificate to be issued anywhere in the world, but it reflects the speed of development in this sector and rising level of risk to on board systems from cyber attack.”

Hyundai-ISCS was developed jointly by Hyundai Electric and Hyundai Heavy Industries. It provides a range of information on vessels and acts as an interface between more than 20 types of equipment including safety systems and sensors, combining to enhance a vessel’s smart abilities.

The certificate was formally presented to Hyundai by KR in a ceremony at Nor-Shipping 2019 in Oslo, Norway, on 5 June.

It was also announced on 5 June that Hyundai Global Service (HGS) and Inmarsat have signed a business co-operation agreement aimed at facilitating digitalisation for owners and managers of vessels. The agreement will enable co-operation including using Inmarsat’s Fleex Xpress dedicated bandwidth services to support HGS’ digital services for shipowners.

The agreement was announced following trials on three vessels over a three-month period, testing sensor-driven applications measuring voyage and equipment operating data including fuel consumption and vibration monitoring, plus HGS analytics and reporting services.

SOURCE