AN INTEGRATED APPROACH TO ASSESSING AND APPLYING INTERNATIONAL CYBERSECURITY STANDARDS IN THE MARITIME SECTOR

Abstract

The maritime sector is facing a growing number of cyber threats that challenge the operational safety of vessels and ports. This study analyses cyber incident detection operations and standards, examines current challenges in maritime cybersecurity, and based on this analysis, proposes a new approach to the development of a cyber incident response plan. The implementation of international cybersecurity standards ISO/IEC 27001, NIST CSF, IEC 62443, as well as the guidelines of the International Maritime Organization (IMO) [12, 13, 14, 22], has become mandatory in modern maritime cybersecurity practice. However, a detailed analysis of regulatory documents, scientific publications, and the conducted preliminary study indicates that the effectiveness of these standards is limited due to incomplete coverage of the system life cycle, technical challenges related to the integration of information and operational technologies, insufficient consideration of the interaction between onboard systems of different vessel types, and inadequate attention to the impact of the human factor on ensuring sustainable and secure maritime operations. Therefore, the development of a methodological approach to creating an adaptive cyber incident response plan for different vessel types, considering international standards and the specifics of shipboard operational technologies, remains a relevant and urgent task. The aim of this study is to substantiate and develop an integrated approach to assessment and recommendations for the application of international cybersecurity standards under real vessel operating conditions. The proposed approach combines multicriteria analysis of standards, technological, organizational, and human factors, and considers modern cyber threats specific to the maritime industry. To reduce the impact of the human factor and to validate the proposed model, the next step involves implementing the project within the educational system of the relevant specialization and its practical application during cadets’ sea training. Further application is envisaged for operational training of ship crew members onboard vessels. The practical significance of the study lies in the possibility of using the obtained results by shipping companies, port authorities, and for personnel training in accordance with international standard requirements. According to a report by Thetius, CyberOwl, and HFW, in 2024 alone, one in five shipping companies experienced some form of cyberattack [35]. Survey results indicate that 93% of crew members admitted they do not feel capable of solving cybersecurity-related tasks, while 70% believe that proper training and timely exercises would significantly improve their preparedness. These findings are supported by recent CyberOwl studies, which show that out of more than 12,000 cyber incidents recorded on vessels in 2024, 60% involved malware infections. Alarmingly, 77% of these incidents were caused through USB storage devices and other removable media, such as personnel laptops. Timely awareness, specialized training, certification, and the signing of responsibility agreements by personnel represent an effective path toward significantly reducing cyber risks in the maritime sector. The development of cybersecurity standards and strict compliance with their requirements remains one of the key measures for enhancing maritime cybersecurity.