The Maritime Cyber Security Insight - powered by ClassNK

This is Episode #3 of the Maritime Cyber Security Insight. “Our role as marine insurers is to understand the change on board of the vessels. So 'What is the change in technique? ' or 'What does the digitalization mean and where are the new risks arising out of that?' - and this is in fact our key competency and should be our key competency. We should put our clients on supports with risk assessment and risk mitigation measures to understand what the new risk is and how we get hold of that. We should also provide our clients with experience which we might already have with some clients and with solutions which work onboard. This is where we see ourselves as a partner of this industry and together we understand what digitalization is about and what is the new exposure as we call it with regard to  'cyber attacks' or 'internal cyber incidents' or 'other cyber incidents' etc., and how can we get hold of that. And at the very end, we will decide about the coverage of these risks, so you shouldn’t underwrite something which we haven’t understood and this is what we currently work on.” said, Lars Lange, Secretary General of International Union of Marine Insurance (IUMI). Collaboration is the key in cybersecurity, we say, but in this complex business ecosystem we work within, are we familiar with the cybersecurity challenges of the stakeholders? Or the initiatives they are undertaking? In this podcast series, we will sit with the leaders of the industry representing various maritime stakeholders and explore these topics.  ***For the link to PMA's platform for cyber incident reporting, check out PMA's Merchant Marine Notice:  https://panamashipregistry.com/marine-notices/voluntary-cyber-incident-reporting-scheme/  ***  International Union of Marine Insurance (IUMI):https://iumi.com/ ***

This is Episode #2 of the Maritime Cyber Security Insight."It is important to understand that you cannot hide from a cyber attack.  We still have people in the maritime world who think you can. As is widely known, former Cisco CEO John Chambers once said, “There are two types of companies: those that have been hacked, and those who don’t yet know they have been hacked”. So everyone is under attack continuously. Most of the impact you can handle but once in a while you cannot so well. I'm convinced through information-sharing we can reduce the number of successful attacks. The other thing is that we can recover faster after a cyber attack and that should not be underestimated.  You can calculate how much it is worth if you can recover one or two days faster.  It may not sound a lot but it can be essential, especially for long-lasting service outages there is always a risk of affecting your business. So quick recovery after an incident is absolutely essential." said, Henning Schleyerbach, COO of Digital Container Shipping Association (DCSA).In the last three episodes (#1 and the two bonus tracks), we have discussed what we can expect from information sharing of cyber security incidents. The more we cooperate the better the cybersecurity posture of the maritime community as a whole is supposed to be. That said, in this complex business ecosystem we work within, are we familiar with the cybersecurity challenges of the stakeholders? Or the initiatives they are undertaking? From this episode onwards, I will sit with the leaders of the industry representing various maritime stakeholders and explore these topics.***For the link to PMA's platform for cyber incident reporting, check out PMA's Merchant Marine Notice: https://panamashipregistry.com/marine-notices/voluntary-cyber-incident-reporting-scheme/***Digital Container Shipping Association (DCSA) and their cybersecurity initiatives:https://dcsa.org/https://dcsa.org/standards/cyber-security/***

Sea Japan 2022, one of Japan's biggest event was held from 20-22 of April . The biannual conference & exhibition came back as an in-person event, welcoming a number of guests from all over the places around the world.  Rafael Cigarruista,   General Director of Merchant Marine, Panama Maritime Authority (PMA), was one of the key speakers there.In this special bonus episode, Naoki Saito, Head of Cyber Security Team, ClassNK sits with Rafael  right after Sea Japan 2022 and discusses a wide range of topics  including decarbonization, digitalization and of course cyber security. Rafael also touches upon PMA's recent launch of Voluntary Cyber Incident Reporting Scheme and calles for cooperation to all Panamanian flagged vessels. ***For link to PMA's platform for cyber incident reporting, check out PMA's Merchant Marine Notice: https://panamashipregistry.com/marine-notices/voluntary-cyber-incident-reporting-scheme/***

This is a “Coffee Break Session”, a special annex episode to Episode#1."Sharing of cyber incident reports, with qualified organizations or platforms, under the assurance of anonymity, will ensure that a professional analytical approach is applied, where trends are studied geographically, and across companies, cultures and equipment.", said Capt. Ruchin Dayal, Founder and CEO of eDot Solutions.  In the last episode, Panama Maritime Authority (PMA) introduced their new Voluntary Cyber Incident Reporting Scheme. In this special Coffee Break Session, we will speak from the perspective of  information providers. Ruchin will share with us a real case scenario and we will discuss how the event should be turned into a report. Ruchin also shares his view as a seafarer on how a structured approach under the international framework should be taken to provide cybersecurity-related education and training with seafarers and finally what he could expect from those initiatives of cyber incident sharing. ***For link to PMA's platform for cyber incident reporting, check out PMA's Merchant Marine Notice: https://panamashipregistry.com/marine-notices/voluntary-cyber-incident-reporting-scheme/ *** Selected reading:  Whitepapers on IT/OT Near Miss by eDot Solutions - https://www.edot-solutions.com/Cybersecurity.html ***

"Providing a platform where you can gain knowledge on what you should be prepared against is for the good of the maritime community. For this, it makes sense for a flag authority to lead a cyber incident reporting platform", said Nyxkhari Ardila, Chief of Maritime Ships Security Department, Panama Maritime Authority (PMA).PMA recently established an online platform for reporting onboard cyber incidents for Panamanian flagged vessels.In this episode of the Maritime Cyber Security Insight, Nyxkhari talks about the grounds of the decision to open the platform, the goals they hope to achieve and much more.***For link to PMA's platform for cyber incident reporting, check out PMA's Merchant Marine Notice:https://panamashipregistry.com/marine-notices/voluntary-cyber-incident-reporting-scheme/***