Risk Intelligence A/s · NGM:RISK
Risk Intelligence A/s — Bimco — Danish Maritime Days 2016 – Maritime Security Conference
22 slides from Risk Intelligence A/s's conference presentation, Oct 25, 2016
Slide 1: Maritime Cyber Security: Threats and Challenges to Shipping
Danish Maritime Days Maritime Security Conference Giles Noakes 25 Oct 2016 Head of Maritime Security Maritime Cyber Security ”Threats and Challenges to Shipping ” [email protected]
Slide 2: BIMCO - The Present - In Numbers
BIMCO - The Present - In Numbers BIMCO is the largest shipowners’ association, a truly global organisation: • 4 locations • 50 staff • 60% of world tonnage • 120 countries • 2,200 members and growing • 10,000 front office enquiries • 15,000 followers on social media • 3,400,000 web searches • $6,000
Slide 3: Our Services - Information and Representation
Our Services - Information and Representation Our website has 3.4 million searches per year covering all key areas: • Regulatory – IMO , UN etc • Standard Contracts and Clauses • Technical and Operational • Security Information and Advisories • Education Market Reports, News, Economic Sound Bites, P
Slide 4: Our Members by Category
Our Members by Category Members • Owners 2% • Brokers 7% • Agents 35% • Clubs 23% • Associate Members 33% Owners Brokers Agents Clubs Associates 11/8/2016 SMM 2016 - Cyber Security 4
Slide 5: Today's presentation
Today’s presentation • The Threats and Risks • The Challenges - What we know and what can we do to protect our ships? • Next Steps 11/8/2016 SMM 2016 - Cyber Security 5
Slide 6: The Reality: Unknown scale of the threat
The Reality……………….. Unknown scale of the threat. Reluctance of ship owners, operators…almost anyone, to admit to an incident Brand protection issue Incident occur which no one has realized / identified No central reporting system 11/8/2016 SMM 2016 - Cyber Security 6
Slide 7: Attacking a ship will not stop world trade
Attacking a ship will not stop world trade • A ship is an independent unit and a cyber attack may compromise safety of that ship, the marine environment and to some extent, the business continuity of the owner • To a large extent the crew will use the same contingency plans as for any other emergenc
Slide 8: Risks on board ships
Risks on board ships Lack of software Lack of access and system control for computers monitoring and networks Outdated software Insiders introducing Unprotected or malware by badly designed storage devices hardware and Remote attacks etc. networks by criminals 11/8/2016 SMM 2016 - Cyber Security 8
Slide 9: IHS/BIMCO study. "Known Knowns"
IHS/BIMCO study. “ Known Knowns” 11/8/2016 SMM 2016 - Cyber Security 9
Slide 10: IHS/BIMCO Study
IHS/BIMCO Study 11/8/2016 SMM 2016 - Cyber Security 10
Slide 11: IHS/BIMCO Study "A revealing mix"
IHS/BIMCO Study “ A revealing mix” 11/8/2016 SMM 2016 - Cyber Security 11
Slide 12: SMM 2016 - Cyber Security
11/8/2016 SMM 2016 - Cyber Security 12
Slide 13: The Guidelines on Cyber Security On-board Ships
The Guidelines on Cyber Security On- board Ships The guidance includes : • Understanding the cyber threat • Assessing the risk • Reducing the risk • Development of contingency plans Based on the National Institute of Standards and Technology (NIST) 11/8/2016 SMM 2016 - Cyber Security 13
Slide 14: Understanding the Cyber Threat to Ships
Understanding the Cyber Threat to Ships Group Motivation Objective Reputational Destruction of data Activists (including damage Publication of sensitive data disgruntled Disruption of Media attention employees) operations Selling stolen data Financial gain Ransoming stolen data Com
Slide 15: Understanding that ships are vulnerable to cyber attacks
Understanding that ships are vulnerable to cyber attacks • Ships are chartered to 3rd party operators • The shipowner does not have control over the IT systems required by the charterer • Passengers and other external persons have access to the ships systems • Critical data pertaining to cargo is pa
Slide 16: IHS/BIMCO Study
IHS/BIMCO Study 11/8/2016 SMM 2016 - Cyber Security 16
Slide 17: Contingency Planning
Contingency Planning • Ship and Company response plan - covering: • Communications • Analysis • Mitigations • Recovery Plan – covering • Cyber improvements • Modifications • Corporate communications/damage control • Investigation of Cyber incidents should result in: • A better understanding of the t
Slide 18: Summary of Cyber Security Fundamentals
Summary of Cyber Security Fundamentals 11/8/2016 SMM 2016 - Cyber Security 18
Slide 19: IHS/BIMCO Study
IHS/BIMCO Study 11/8/2016 SMM 2016 - Cyber Security 19
Slide 20: The Way Forward?
The Way Forward ? Significant Implications Who ……………….. Qualified Advice/Standards ? Why…………………. Qualified Guidance/Standards? What ……………... Qualified Training/ Standards? Where…………….. On Board/Ashore? How ………………… Reporting and Recording? Reward for voluntary compliance – Insurance 11/8/2016 SMM 201
Slide 21: Conclusions to Date
Conclusions to Date • Greater awareness is needed in the industry • Ships are exposed to cyber-threats - calling for a risk based approach to mitigate in what is a dynamic environment • Industry Guidance has been submitted and endorsed by IMO but standards essential – ISO? • Cyber crime is constantl
Slide 22: Holistic approach to Cyber Security is the way forward
“Cyber risk , including data privacy is now the biggest risk on the minds of shipping company executives”. Wilson Towers Watson in Lloyds List today 25/10/16 Holistic approach to Cyber Security is the way forward Set the tone from the top Appropriate Governance and Management Information Use the ris
Bimco — Danish Maritime Days 2016 – Maritime Security Conference on 6ix