Blog Preview
Maritime Cyber Security Risk Management for Port Facilities under the International Ship and Port Facility Security (ISPS) Code -reg
Key Changes and Requirements
1. Cyber Security Risk Management
Port facilities should manage cyber security risks by incorporating cyber security risk assessment into the Port Facility Security Assessment (PFSA).
- Key Assets: Identify critical cyber assets, vulnerabilities, threat vectors, and potential impacts on port security and operations.
- Mitigation Measures: Incorporate appropriate measures within the Port Facility Security Plan (PFSP) and related security procedures.
2. Cyber Security Awareness and Responsibilities
Port Facilities should ensure that PFSO and other personnel possess adequate cyber security awareness. Designate an officer or function responsible for overseeing cyber security risk management.
- Awareness Programs: Conduct periodic cyber security awareness programmes, familiarization sessions, drills, exercises, and simulations.
3. Cyber Incident Management
Establish suitable procedures for cyber incident reporting, response, containment, and recovery to minimize disruption of critical operations.
- Review and Update: Periodically review and update cyber security measures considering evolving threats, technological developments, and operational requirements.
Compliance with the present framework for cyber security and data protection is strongly advocated.
Want to learn and share your knowledge about the maritime world?
Explore the Blog app on Navvyx - Get maritime insights from across the world in one place.