Page 14: of Maritime Reporter Magazine (April 2018)

Cyber

CYBER SECURITY

Risk Management

About the Author

Captain Andrew Kinsey, Senior Marine

Risk Consultant, Allianz Global Corpo-

Steps to Take Now Ahead of the rate & Specialty

IMO 2021 Deadline

The IMO January 2021 deadline for is only one of the many risks we face. By was the case with the EL FARO. The and establish appropriate safeguards.” ship owners and managers to incorpo- examining past failures dealing with tra- shipboard operations impacted will in- In this manner, the code (section 7) di- rate cyber risk management into existing ditional risks, we can better understand clude the upcoming Cyber Security safe- rects that the “company should estab-

Safety Management Systems is closer how we have underestimated or normal- guards and procedures. lish procedures, plans and instructions, than many realize, especially given the ized the risks that are present in our en- The NTSB Report has the following including checklists as appropriate, for complex pro? le that the risk presents and vironment. With the recent release of the passages regarding vessel Safety Man- key shipboard operations concerning the the need for a well detailed procedure to NTSB Final Report on the EL FARO’s agement Systems: safety of the personnel, ship, and protec- help protect marine assets and business- sinking, I have spent time reviewing the “Safety Management System. Accord- tion of the environment.” Furthermore, es. The failure to properly address cyber report and looking back at my own ex- ing to the ISM code, it is the responsi- the code requires that the company risks is much greater than the simple fact periences. I am saddened to see many bility of the company—the owner or any “identify potential emergency shipboard that a vessel could be detained by Port similarities in the conditions present for other organization that has assumed re- situations, and establish procedures to

State Authorities if it were found to be both the EL FARO loss and that of the sponsibility for operation of a ship—to respond to them.” not in compliance. It is good that the MARINE ELECTRIC in 1983. Several establish an SMS for its vessels. Accord- Also; risks that a cyber event poses to mari- statements and ? ndings in the NTSB Re- ing to section 1.2.2 of the code, the SMS “Summary. Merely having an SMS is time interest are being brought forth, but port affect numerous shipboard opera- should “assess all identi? ed risks to its not suf? cient to prevent catastrophes. It it is important that we remember that it tions – not just the heavy weather that ships, personnel and the environment is necessary to have dedicated person-

While the vessel Safety Management

System is the best platform for the Cyber

Security program to reside on, we cannot overlook the fact that this is a non-traditional Risk. © aetb/AdobeStock 14 Maritime Reporter & Engineering News • APRIL 2018

MR #4 (10-17).indd 14 MR #4 (10-17).indd 14 4/5/2018 9:02:15 AM4/5/2018 9:02:15 AM