Page 21: of Maritime Reporter Magazine (October 2017)

began to consider cyber attacks a poten- includes physical as well as cyber secu- The Way Ahead and approach this challenge with tenac- tial TSI to the port, and 22 of 43 have rity experts, can help bridge this gap in At the very least, the NotPetya attack ity and creative thought. The patriotic since established cyber subcommittees steady-state environments by conduct- shows that the sophistication of cyber spirit and hard work that the industry whose primary role has been to share ing exercises and sharing best practices, threats is growing along with the marine embraced after the attacks of 9-11 have best practices and educate members on and through information sharing during industry’s reliance on cyber technol- vastly improved the physical security cyber security issues. Many committees actual attacks or periods of heightened ogy. Existing government institutions, and resilience of our marine transporta- have included cyber security threats in threat. Individual vessel and facility regulatory regimes, business practices, tion system. exercises and training events. Like the security plans should also address coop- technical protocols, and research efforts That same approach will enable us to individual vessel and facility plans, the eration between the cyber and physical may be adequate to address this threat, develop effective approaches to cyber cyber aspects of Area Maritime Secu- security managers. but only if we integrate these efforts security.

rity Committees are far from mature, but their multi-agency and public-private membership brings strengths that will be useful in cyber, physical security, and mixed attacks in the future. Information sharing is a vital element to cyber securi- ty, and it is here that an AMSC can really

Small giants shine. While a cyber attack on any given entity may occur at the speed of an elec- with great tron, organizations may become aware of looming attacks as they creep across

WÄRTSILÄ STEERABLE performance

THRUSTER SERIES the world, or by monitoring social media

DESIGNED FOR TUGS, and other platforms. Some members of

RIVER-GOING SHIPS an AMSC will also be members of IS-

AND OFFSHORE

AOs and ISACs, others will have inter-

SUPPORT VESSELS nal resources that enable them to identify these threats as early as possible, and to

SUPERIOR determine effective mitigation strategies.

PERFORMANCE

Without any need to expose speci? c vul- nerabilities and impacts, private sector

AMSC members can help one another discern the nature of an attack, con? rm or dispel rumors, and provide general advice on protection and response ac- tions. Government agency members can provide access to reliable sources of in-

HIGH AND MEDIUM formation to the incident, and advise on

SPEED ENGINE

COMPATIBLE techniques that will preserve evidence to support forensic analysis and pros- ecution. The cooperation and informa- tion sharing activities of an AMSC can thereby reduce vulnerabilities to and ac- celerate the recovery from a cyber attack impacting a port community or Marine

Transportation System.

INTEGRATED

HYDRAULIC CLUTCH

HIGHLY INTEGRATED

Cyber-Physical Attacks

ROBUST AND

The NotPetya attack was not accom-

COMPACT DESIGN panied by any maritime physical attacks on people or infrastructure, but what if it had been? With cargo stacking up and communications systems impaired, port areas might have presented target rich environments with reduced response and recovery capabilities. The sinister syn- ergy between cyber and physical threats

WÄRT WÄRTSILÄ CONNECTS THE DOTS becomes more apparent when one con-

The Wärts The Wärtsilä Steerable Thruster (WST) series provides a wide range siders cyber attacks targeting safety criti- of feature of features to enable you get the job done. The thrusters combine a high bolla high bollard pull with 360° azimuthing capability and are for vessels cal IoT devices or physical security sys- that requi that require a high level of manoeuvrability. Eight thruster types tems, such as cameras and sensors.

ranging fr ranging from 700 to 3200 kW and a large number of options per type

The potential for a combined cyber- ensure th ensure that the right WST thruster is available to match individual vessel req vessel requirements. Read more at www.wartsila.com physical attack is a warning to orga- nizations who stove-pipe their cyber and physical security personnel – a not uncommon scenario since cyber secu- rity is often managed at the corporate level, while physical security is man- aged at individual vessels and facilities.

AMSC’s, whose membership usually www.marinelink.com 21

MR #10 (18-25).indd 21 MR #10 (18-25).indd 21 10/4/2017 9:31:48 AM10/4/2017 9:31:48 AM