Maritime Cybersecurity Risk Management: A Discussion on Current and Future Regulatory Compliance Approaches
Year: 2025
Type: conference-paper
Abstract: The evolving landscape of cybersecurity in the maritime industry poses significant challenges due to inadequate security controls for vulnerable onboard systems. Recognising these risks, the International Maritime Organization (IMO) has mandated that cyber risk management be integrated into safety management systems in alignment with the ISM Code. Effective cyber risk management requires a holistic approach, addressing diverse threats and their potential impact on both individual systems and overall ship safety and environmental protection. This paper examines the regulatory framework underpinning maritime cybersecurity and highlights its reliance on methodologies adapted from the Information Technology (IT) industry. This shift marks a departure from traditional safety and environmental risk management practices historically employed by the IMO. This paper explores a novel cyber risk management approach proposed by the International Association of Classification Societies (IACS), and a case study is presented to illustrate its applicability. This framework provides a comprehensive strategy that integrates IT and Operational Technology (OT) systems, addressing the complexities of interconnected onboard and external networks. By presenting this approach, the paper contributes to advancing cybersecurity in the maritime sector, offering a promising
Source: Liverpool John Moores University
Authors: Kontovas, C, Chang, C-H
Institution: Liverpool John Moores University
Language: English
Subfield: Information Systems
Field: Computer Science
Domain: Physical Sciences
Open Access status: green
OpenAlex ID: W7202331186