Cybersecurity in the Maritime Industry: Protecting the Connected Ship and Port Ecosystem
The maritime industry is undergoing a significant digital transformation, with increasing integration of Information Technology (IT) and Operational Technology (OT) systems across ships, port logistics, cargo and container distribution, autonomous control and navigation, and global identification and navigation systems. While this interconnected environment delivers substantial operational and business benefits, it also expands the maritime cyberattack surface and creates new cybersecurity risks that must be systematically identified, assessed, managed, and mitigated.
This study examines the key components of the maritime industry’s cybersecurity landscape, with particular attention to the cyber threats affecting vessels and maritime organizations. It explores the principal types of cyberattacks, their methods and means, and the different stages through which attacks may be carried out. The study also considers the assessment of cyber vulnerabilities in onboard information and communication systems and highlights technological measures that can support effective cyber defence.
The presentation further provides practical guidance on the procedures and actions required to maintain the security and resilience of cyber systems onboard ships. Cyberattacks affecting maritime organizations and vessels are broadly considered as either untargeted or targeted. Untargeted attacks involve systems and data being among many potential targets, whereas targeted attacks specifically identify a company, vessel, or its systems and data as the intended target. Understanding this distinction, together with the vulnerabilities created by IT/OT convergence, is essential for developing an effective maritime cybersecurity posture.
Akash Saksena
Akash Saksena is a cybersecurity professional with over 20 years of experience leading cybersecurity, OT/ICS security, risk management, governance, and digital transformation initiatives across global organizations.
A recognized industry thought leader, Akash specializes in OT cybersecurity strategy, industrial cyber resilience, IEC 62443, IT-OT convergence, governance, risk and compliance, and AI-enabled security transformation. He is a frequent speaker at industry forums, webinars, and academic institutions on topics including OT security, IoT security, medical device security, AI governance, and emerging technologies.