# Is Cyber security in Shipping good enough?

**URL:** <https://forum.gcaptain.com/t/is-cyber-security-in-shipping-good-enough/60177>\
**Category:** Professional Mariner Forum\
**Created:** [July 30, 2021, 1:34pm UTC](https://forum.gcaptain.com/t/is-cyber-security-in-shipping-good-enough/60177 "2021-07-30T13:34:43Z")\
**Posts on this page:** 7\
**Page:** 2

<div class="post-metadata">

**Author:** ![rbc](https://avatars.discourse-cdn.com/v4/letter/r/e5b9ba/32.png) [@rbc](https://forum.gcaptain.com/u/rbc)\
**Post date:** [November 25, 2021, 2:17pm UTC](https://forum.gcaptain.com/t/is-cyber-security-in-shipping-good-enough/60177/21 "2021-11-25T14:17:50Z")

</div>

Air gapped systems are still vulnerable to insider threats, whether they are intentional or unintentional.

---

<div class="post-metadata">

**Author:** ![powerabout](https://avatars.discourse-cdn.com/v4/letter/p/43a26b/32.png) [@powerabout](https://forum.gcaptain.com/u/powerabout)\
**Post date:** [November 25, 2021, 2:31pm UTC](https://forum.gcaptain.com/t/is-cyber-security-in-shipping-good-enough/60177/22 "2021-11-25T14:31:02Z")

</div>

yes sure, playing videos on those huge DP screens off CD’s and memory sticks

No class requirements to secure DP systems and last I checked no vendor does.  
I get shrugged shoulders when asking simple questions, its a ship so 10 years behind the office.

Perhaps that changed now that operators are looking at their SMS documentation as post jan 2021 any review must now include it  
MSC.428 (98)  
“ENCOURAGES Administrations to ensure that cyber risks are appropriately  
addressed in safety management systems no later than the first annual verification of the  
company’s Document of Compliance after 1 January 2021”

Shall, must, maybe?

---

<div class="post-metadata">

**Author:** ![rbc](https://avatars.discourse-cdn.com/v4/letter/r/e5b9ba/32.png) [@rbc](https://forum.gcaptain.com/u/rbc)\
**Post date:** [November 25, 2021, 2:49pm UTC](https://forum.gcaptain.com/t/is-cyber-security-in-shipping-good-enough/60177/23 "2021-11-25T14:49:26Z")

</div>

“Encourages”, that’s pretty weak. Maybe after enough operating DP systems get ransomed, that will change. With an unpatched network, it wouldn’t take much. Maybe a gateway bastion system to the network might fall vulnerable, or if the network was accidently attached directly to another network with Internet access.

The system vendors really need to get their act together. Even when patches are released, some are so narrowly targeted, that the bad guys only need to make a small change in their attack to work around the patch. The vendors also need to do a better job of maintaining system availability during the patching process.

In the mean time, protecting air gapped networks will have to rely on solid administrative and technical controls to protect those networks. Once the bad guys get in, they’ll likely have free reign.

---

<div class="post-metadata">

**Author:** ![powerabout](https://avatars.discourse-cdn.com/v4/letter/p/43a26b/32.png) [@powerabout](https://forum.gcaptain.com/u/powerabout)\
**Post date:** [November 25, 2021, 2:57pm UTC](https://forum.gcaptain.com/t/is-cyber-security-in-shipping-good-enough/60177/24 "2021-11-25T14:57:03Z")

</div>

you need to add thruster systems to that now as they have marched down the Ethernet path and put PC based control systems in.

I’ll bet many vessels with airgaps in their design no longer have them…  
There must be some in the internet as well…

---

<div class="post-metadata">

**Author:** ![powerabout](https://avatars.discourse-cdn.com/v4/letter/p/43a26b/32.png) [@powerabout](https://forum.gcaptain.com/u/powerabout)\
**Post date:** [November 25, 2021, 2:57pm UTC](https://forum.gcaptain.com/t/is-cyber-security-in-shipping-good-enough/60177/25 "2021-11-25T14:57:18Z")

</div>

> **[International vessel owner hit by cybersecurity breach | Upstream Online](https://www.upstreamonline.com/finance/international-vessel-owner-hit-by-cybersecurity-breach/2-1-1106103)**
>
> Swire Pacific Offshore’s IT systems were hacked

---

<div class="post-metadata">

**Author:** ![Future\_Maritime](https://sea2.discourse-cdn.com/flex016/user_avatar/forum.gcaptain.com/future_maritime/32/14915_2.png) [@Future\_Maritime](https://forum.gcaptain.com/u/Future_Maritime)\
**Post date:** [January 14, 2022, 3:02pm UTC](https://forum.gcaptain.com/t/is-cyber-security-in-shipping-good-enough/60177/26 "2022-01-14T15:02:56Z")

</div>

I’m jumping on the band wagon here…

If you folks could fill out a survey we’re doing on cyber security in the maritime industry

It won’t take more than a minute or two.

The link is here:  
[https://thetius.typeform.com/cybersecurity](https://thetius.typeform.com/cybersecurity)

Thanks!

---

<div class="post-metadata">

**Author:** ![Kennebec\_Captain](https://sea2.discourse-cdn.com/flex016/user_avatar/forum.gcaptain.com/kennebec_captain/32/13_2.png) [@Kennebec\_Captain](https://forum.gcaptain.com/u/Kennebec_Captain)\
**Post date:** [January 15, 2022, 3:55am UTC](https://forum.gcaptain.com/t/is-cyber-security-in-shipping-good-enough/60177/27 "2022-01-15T03:55:43Z")

</div>



[Previous page](https://forum.gcaptain.com/t/is-cyber-security-in-shipping-good-enough/60177.md?page=1)
