At its recent Maritime Safety Committee meeting, the International Maritime Organization approved interim guidelines on maritime cyber risk management. The recommendations are aimed at enabling stakeholders to take necessary steps to safeguard shipping from current and emerging threats and vulnerabilities related to digitization, integration and automation of processes and systems in shipping.

A new study led by England’s Plymouth University’s Maritime Cyber Threats Research Group established that vessels are under significant threat of cyber attack because many are carrying outdated software and were not designed with cybersecurity in mind.

It said traditionally, attacks on ships have included piracy, boarding and theft, and while these attacks have often been successful and continue, they are well understood. In contrast, the research says cyber attacks are stealthier, and have a range of potential implications including business disruption, financial loss, damage to reputation, damage to goods and environment, incident response cost, and fines and/or legal issues.

The research suggests maritime cyber attacks would most likely target systems responsible for navigation, propulsion, and cargo-related functions, with many incentives for attackers, given that over 90 percent of world trade occurs via the oceans. It adds that operators could easily mitigate against such dangers by updating security systems, improving ship design and providing better training for crews.