Aims & Objectives

• Provide the key principles related to Cyber Security and Information Security and specify the important factors for the prevention of Cyber Attacks in maritime industry (Shipping Companies and Ports)
• Give an overview on the general procedure and various methods used by criminals to bypass your security
• Provide an overview on general procedures and methods used to conduct Cyber Risk Marine Assessment and Cyber Risk Analysis
• Provide Case studies for Ports & Vessels
• Outline the key requirements, structure and benefits of ISO 27001:2013
• Outline additional information security control in relation to relevant standards such as ISO 27002, 27018, 27701, 29100 and GDPR

Learning Outcomes

Having successfully completed this course you will be able to:

• Address Marine Cyber Security threats
• Prepare company’s or organization’s personnel and crew for Cyber Security risks
• Demonstrate understanding on Cyber Security risk management in a shipping company and Port.
• Create an effective marine Cyber risk assessment and plan and follow risk assessment & analysis procedures.
• Implement Cyber and Information Security Control Measures
• Assess and improve your organization’s ISMS Systems.
• Interpret the ISO 27001 requirements to the needs of your organization

Who should attend?

• Employees who use software, emails, devices, and network services within any size and type of a shipping company, port or port facility
• Those involved in the planning, implementing, maintaining or supervising ISO 27001:2013 ISMS

Prerequisite skills & knowledge: Basic Knowledge for ISM & ISPS is recommended

Available in-house/distant learning? Yes

Created by: LiberoAssurance Continuous Professional Development Training Centre Level 1 – Accredited by Univab

PART A: Maritime Cyber Security Advanced

Introduction to Maritime Cyber Security

• What is Maritime Cyber Security?
• IT and OT systems
• IMO related Resolutions, Circulars and Guidelines
• Industry Guidance on Maritime Cyber Security

Cyber Security Risks

• ISM/ISPS – Identified Risks
  • Company risk assessment procedure
  • Third party risk assessments
  • Risks related to Ship-Port interface
  • Recent cyber security regulations
• Assessment of Identified Cyber Risks
  • Identify threats
  • Identify Vulnerabilities
  • Risk Calculation
  • Risk Mitigation (corrective/preventive measures)
  • Cyber Security Awareness & Training

Cyber Security Plan

• Incident Management
• Emergency Preparation
• Steps for cyber security plan preparation
• Check your Cyber Security Status
  • Questions & Answers
  • Check your IT applicant
  • Proposed Procedural & Controls
  • Immediate Actions

Case Studies

• Vessel Cyber Attack
  • How a shipping Company named “Shco” defeated a cyber attack
  • US facing Vessel Cyber Attacks
• Port Facility Cyber Attack
  • COSCO Shipping Lines Falls Victim to Cyber Attack
  • Maersk Hit by Cyber Attack
  • San Diego Hit by Cyber Attack
  • Austal Falls Victim to Cyber Attack

PART B: ISO 27001 Requirements

Overview

• Management Systems
• Goals of a Management System
• ISO 27001:2013 Structure

Clauses 0-3

• Introduction
• Scope
• Normative references
• Terms and definitions

Context of the organization

• Introduction to company’s context
• Understanding the organization, its context and interested parties
• Scope of the ISMS
• SWOT & Pest Analysis

Leadership

• Leadership and commitment
• Information Security Policy
• Organizational roles, responsibilities and authorities

Planning

• Actions to address risks and opportunities
• Information security objectives and planning to achieve them

Support

• Resources
• Competence
• Awareness
• Communication
• Documented information

Operation

• Operational planning and control
• Information security risk assessment & treatment

Performance evaluation (Monitoring and Evaluation)

• Monitoring, measurement, analysis and evaluation
• Internal audit
• Management review

Improvement

• Nonconformity & corrective action
• Continual improvement

Annex A -Control objectives and controls

Teaching Methods

• Detailed seminar presentations (available for download)
• Terms and definitions
• No. of slides: 353
  

Resources

• Reading list & Resources: Available in the presentations

Study time allocation

• Private study hours: 41
  
• Trainer contact hours: Availability and competence of instructors upon request
• Enrollment Duration: 90 days (starting from the date of purchase)

Credits

• CPD Points: 41
  
• ECTS/ECVET Points: 1.4