New U.S. Coast Guard Cyber Security Rules Insights from ABS

The U.S. Coast Guard is implementing new rules on Cyber Security, prompting discussions on maritime cyber security. Angeliki Zisimatou, Director of Cybersecurity at ABS, provides insights on the draft rules and advises vessel owners on what it could mean for them. With the increasing reliance on connectivity in the maritime industry, cyber security preparedness varies widely across industries. Some are unaware of the risks, believing their onboard systems are secure when they are not. ABS aims to educate and inform stakeholders about the real threats of cyber attacks, citing examples like the NotPetya attack on A.P. Moller-Maersk Group in 2017.

As the maritime industry slowly embraces cyber security measures, large fleet owners and operators are taking the risk seriously by investing in secure operation centers. However, smaller operators and owners are primarily driven by regulations, following the minimum requirements mandated by authorities like the International Maritime Organization and the U.S. Coast Guard. Zisimatou highlights the importance of awareness, training, and collaboration between operations and IT departments to address cyber security gaps and vulnerabilities in legacy systems.

The U.S. Coast Guard recently proposed new regulations focused on establishing minimum cybersecurity requirements for U.S.-flagged vessels and facilities. Zisimatou provided feedback on the proposed rules, pointing out potential challenges for operators, such as network segmentation requirements. She emphasized the need for clarity on specific controls and responsibilities for stakeholders throughout the vessel’s lifecycle.

Source