{"product_id":"cyber-security-workbook-onboard-ship","title":"Cyber Security Workbook for On Board Ship Use, 8th Edition","description":"\u003ch4\u003eShort Overview\u003c\/h4\u003e\n\u003cp\u003eThis practical and easy to understand workbook supports the owner, Master and the ship's crew with cyber security risk management.\u003c\/p\u003e\n\u003cp\u003eIt contains comprehensive checklists to support the day-to-day management of onboard cyber security and facilitates collaboration between ships, onshore IT departments and equipment manufacturers.\u003c\/p\u003e\n\u003ch4\u003e\u003cspan style=\"font-size: 0.875rem;\"\u003eDetailed Overview\u003c\/span\u003e\u003c\/h4\u003e\n\u003cp\u003eCyber risk management should be an inherent part of safety and security and should be considered at all levels of the company, including senior management ashore and onboard personnel.\u003c\/p\u003e\n\u003cp\u003eThis Workbook has been designed as a practical, straightforward guide to support the Master and officers on board ship (Part I - Onboard Practical Considerations). It is designed to facilitate understanding and good collaboration between individual ships, onshore IT departments and equipment manufacturers (Part II - Shore Management Considerations). The Workbook may also be useful to the wider maritime industry.\u003c\/p\u003e\n\u003cp\u003eThe seventh edition has been produced by Witherbys, BIMCO and the International Chamber of Shipping (ICS).\u003c\/p\u003e\n\u003cp\u003eThe Workbook has been fully revised and updated and contains new guidance on:\u003c\/p\u003e\n\u003cul\u003e\n\u003cli\u003eIndustry guidelines and regulatory requirements, including IACS UR E26 and E27\u003c\/li\u003e\n\u003cli\u003ecyber security in port\u003c\/li\u003e\n\u003cli\u003epassenger ships\u003c\/li\u003e\n\u003cli\u003eship inspections and port state control\u003c\/li\u003e\n\u003cli\u003esoftware updates\u003c\/li\u003e\n\u003cli\u003emalware detection and prevention\u003c\/li\u003e\n\u003cli\u003ephishing risks.\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003cp\u003eDetailed case studies and diagrams have been added to help illustrate cyber risks. The Workbook contains 13 checklists and 6 annexes, including Cyber Security Risk Assessment and Creating a Cyber Security Plan.\u003c\/p\u003e\n\u003ch4\u003eIntroduction\u003c\/h4\u003e\n\u003cp\u003e\u003cstrong\u003eForeword\u003c\/strong\u003e\u003c\/p\u003e\n\u003cp\u003eHarvesting the full potential of data gathering with the implementation of digital technologies and improved connectivity can certainly bring commercial benefits. However, in parallel, cyber criminals are refining their methods and developing techniques that cause disruptions to business and create hazardous situations for ships, their crew, the environment and the cargo.\u003c\/p\u003e\n\u003cp\u003eBuilding on the latest 'Guidelines on Cyber Security Onboard Ships' (Version 5), the 'Cyber Security Workbook for On Board Ship Use' goes one step further and translates the high-level guidelines into operational tools and checklists for use on board ships. The Workbook is an indispensable complement to the Guidelines and is highly recommended reading for ship officers and shore staff with a cyber security risk management role.\u003c\/p\u003e\n\u003cp\u003eDavid Loosley\u003cbr\u003e\u003cstrong\u003eSecretary General and CEO\u003cbr\u003e\u003cstrong\u003eBIMCO\u003c\/strong\u003e\u003c\/strong\u003e\u003c\/p\u003e\n\u003chr\u003e\n\u003cp\u003eCyber attacks are on the rise, with criminals and State actors all setting their sights on shipping. This is a threat we cannot ignore. Our vessels have become more technologically advanced, with the growth of the internet of things and our shipboard systems increasingly connected to the internet and to systems ashore. Today?s modern ships are a target-rich environment for cyber attackers. A number of high-profile incidents on major shipping companies in recent years have demonstrated the serious potential for major disruption to operations and safety for maritime trade. It is essential that shipping remains resilient against these threats if it is to continue to carry the vast bulk of global trade safely and securely.\u003c\/p\u003e\n\u003cp\u003eAwareness of the threat presented by cyber attack to shipping has increased, as have the mechanisms to reduce it. The IMO requirement to include cyber risk management in the Safety Management System from 1st January 2021 has brought cyber risk management into the statutory realm. Class and insurance requirements now also play a role in maintaining the cyber security of ships. Today, the shipping industry is better placed than ever to safeguard the vital service it provides from cyber attack. However, we should not grow complacent; regular risk assessments of your company's cyber weak spots, training and awareness campaigns for staff and plans for recovery if a cyber attack occurs are all essential to stay resilient to the ever-changing threat landscape.\u003c\/p\u003e\n\u003cp\u003eCyber security is central to the safe and secure operation of ships and shipping companies, and this guidance provides a comprehensive resource to understand the threat practically and continually mitigate against the risks it presents to maritime transport.\u003c\/p\u003e\n\u003cp\u003e\u003cstrong\u003e\u003cstrong\u003eGuy Platten\u003cbr\u003e\u003cstrong\u003eSecretary General\u003cbr\u003e\u003cstrong\u003eInternational Chamber of Shipping\u003c\/strong\u003e\u003c\/strong\u003e\u003c\/strong\u003e\u003c\/strong\u003e\u003c\/p\u003e\n\u003ch4\u003e\u003cspan style=\"font-size: 0.875rem;\"\u003eContents Listing\u003c\/span\u003e\u003c\/h4\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003eForeword\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003eAbbreviations\/Definitions\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003eIntroduction\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e\u003cbr\u003e\u003cb\u003eSection 1: Regulations and Guidance\u003c\/b\u003e\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e1.1 IMO Requirements\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e1.1.1 Designated Roles and Responsibilities\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e1.2 ‘The Guidelines on Cyber Security Onboard Ships’\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e1.3 Additional Industry Guidelines\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e1.3.1 International Association of Classification Societies (IACS)\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e1.3.2 Non-governmental Organizations (NGOs)\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e1.4 Regional Regulatory Guidance\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e1.4.1 UK\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e1.4.2 EU\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e1.4.3 USA\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e1.5 Guidance on Mitigation Strategies for IT\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e1.5.1 Essential Eight Maturity Model\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e1.5.2 Cyber Essentials\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e1.5.3 IMO Insider Threat Toolkit\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e\u003cbr\u003e\u003cb\u003ePart One: Onboard Practical Considerations\u003c\/b\u003e\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e \u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e\u003cb\u003eSection 2: Identifying Risks\u003c\/b\u003e\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e2.1 Vulnerable Ship Systems\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e2.2 What is a Maritime Cyber Attack?\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e2.3 Phases of a Cyber Attack\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e2.4 Threats\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e2.5 Types of Cyber Attack\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e2.6 Social Engineering\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e2.6.1 Tailgating\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e2.6.2 Email Phishing\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e2.6.3 Spear Phishing\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e2.6.4 Man-in-the-middle Attacks\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e2.6.5 Phone or Text Messages\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e2.6.6 QR Code Phishing\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e2.6.7 Multi-factor Authentication (MFA) Phishing\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e2.7 Ransomware\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e2.8 Use of Artificial Intelligence\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e\u003cbr\u003e\u003cb\u003eSection 3: Protection and Prevention: General Principles\u003c\/b\u003e\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e3.1 Prevention of Malware Attacks\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e3.2 Software Updates\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e3.2.1 Updating the Operating System (OS)\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e3.2.2 Updating Programs that are not Part of the Operating System\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e3.3 Endpoint Protection\/Security Suite\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e3.3.1 Endpoint Protection Updates\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e3.3.2 Checking Whether the Endpoint Protection Suite is Up to Date\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e3.3.3 Other Security Tools in Windows\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e3.4 Passwords\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e3.4.1 Creating Passwords\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e3.4.2 Password Length\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e3.4.3 Managing Passwords\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e3.4.4 Handover of Passwords\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e3.4.5 Passkeys\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e3.4.6 Usernames\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e3.5 Cyber Security and the Safety Management System (SMS)\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e3.5.1 Cyber Security and the Ship Security Plan (SSP)\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e3.6 Ship Inspections and Port State Control (PSC)\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e3.6.1 Focus of Inspections\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e3.6.2 US Port State Control\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e3.6.3 European Union\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e3.6.4 Other Inspections\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e \u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e\u003cb\u003eSection 4: Crew Considerations and Training\u003c\/b\u003e\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e4.1 Key Aspects of Crew Training\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e4.2 Cyber Security Familiarization for Crew\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e4.3 Training for Non-crewmembers\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e4.4 Designing a Training Program\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e4.5 Unintentional Cyber Breaches by the Crew\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e4.6 Planning a Crew Training Session\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e4.7 Cyber Security Drills\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e4.7.1 Generic Drill Scenario\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e4.8 Social Media\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e4.9 Travelling in Cyber Safe Mode\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e\u003cbr\u003e\u003cb\u003eSection 5: Detect, Respond and Recover: General Principles\u003c\/b\u003e\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e5.1 Detecting a Cyber Incident\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e5.1.1 Introduction\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e5.1.2 Useful Tools Available to Help Detect Possible Malware\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e5.2 Incident Response\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e5.2.1 Third-party Support\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e5.2.2 Cyber Recovery Plan\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e5.2.3 Backups\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e \u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e\u003cb\u003eSection 6: External Communications and Cyber Security in Port\u003c\/b\u003e\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e6.1 Satellite Communications (Satcom) Equipment\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e6.1.1 Satcom Passwords\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e6.1.2 Satcom Visibility on the Public Internet\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e \u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e6.1.3 Satcom Software Updates\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e6.1.4 Physical Security of the Satellite Terminal\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e6.1.5 Software Security of the Satellite System\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e6.2 Cyber Security Risks in Port\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e6.2.1 Mobile (Cellular) Data Connections\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e6.2.2 Connecting to Shore WiFi in Port\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e6.2.3 Port Cyber Attacks\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e\u003cbr\u003e\u003cb\u003eSection 7: Ship’s Business Systems\u003c\/b\u003e\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e7.1 Network Segregation On Board\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e7.1.1 Segregated Networks\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e7.1.2 Achieving a Segregated Network\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e7.1.3 Maintaining a Segregated Network\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e7.1.4 Benefits of Network Segregation\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e7.1.5 Vulnerable Systems On Board\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e7.1.6 Defense in Depth and Breadth\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e7.2 Wireless Networks On Board\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e7.2.1 Business WiFi\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e7.2.2 Crew WiFi\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e7.2.3 Guest Access\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e7.2.4 WiFi Network Security\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e7.2.5 Virtual Private Network (VPN)\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e7.3 Onboard Business Computers\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e7.3.1 USB Ports and Drives\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e7.3.2 USB Port Blockers\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e7.3.3 USB Cleaning Stations\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e7.3.4 Tablets\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e7.3.5 Personal Devices and USB Ports\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e7.3.6 Configuring Business Computers to Minimize the Risks of Cyber Attack\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e7.4 Passenger Ship Systems\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e7.4.1 Passenger Services\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e7.4.2 Other Considerations\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e\u003cbr\u003e\u003cb\u003eSection 8: OT Systems\u003c\/b\u003e\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e8.1 Understanding OT Systems\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e8.2 Engine Department Considerations\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e8.3 Cargo Management\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e8.4 ECDIS Security\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e8.4.1 Updates\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e8.4.2 Physical Security\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e8.4.3 ECDIS Recovery\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e8.4.4 Recognizing Genuine NAVTEX Messages\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e8.4.5 Digital Navigational Data System (NAVDAT)\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e8.5 GNSS Security\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e8.5.1 GNSS Input Data\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e8.6 Other Bridge Systems\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e8.6.1 Voyage Data Recorder (VDR)\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e8.6.2 Automatic Identification System (AIS)\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e\u003cbr\u003e\u003cb\u003ePart Two: Shore Management Considerations\u003c\/b\u003e\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e\u003cbr\u003e\u003cb\u003eSection 9: Key Considerations\u003c\/b\u003e\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e9.1 Cooperation Between the Office Departments and their Suppliers\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e9.1.1 IT Department and Technical Department: ‘Secure by Design’\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e9.1.2 Securing the Supply Chain\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e9.1.3 Company Cyber Security Working Group\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e9.2 Cooperation Between the Office and the Ship’s Crew\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e9.2.1 Maritime Cyber Security Management\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e9.2.2 Cyber Security and the Safety Management System (SMS)\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e9.2.3 Cyber Security and the Ship Security Plan (SSP)\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e9.2.4 Onboard Resources According to Ship Type\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e9.3 Ship’s Network Architecture\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e9.3.1 Industrial Demilitarized Zone (IDMZ)\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e9.3.2 Data Diodes (Unidirectional Gateways)\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e\u003cbr\u003e\u003cb\u003eSection 10: OT Systems Management\u003c\/b\u003e\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e10.1 OT Asset Management and Risk Assessment\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e10.1.1 Asset Management\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e10.1.2 Asset Risk Assessment\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e10.2 Securing OT Systems\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e10.3 Securing the Ethernet IP Network Used by OT Systems\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e10.3.1 Converter Security\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e10.4 Intrusion Detection Systems (IDS)\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e\u003cbr\u003e\u003cb\u003eSection 11: IT Systems Management\u003c\/b\u003e\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e11.1 Remote Access\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e11.1.1 Protection Measures\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e11.2 Vulnerability Scanning (Cyber Audit)\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e11.2.1 Performing a Vulnerability Scan\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e11.3 Penetration (Pen) Testing\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e11.3.1 Carrying out a Pen Test\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e11.3.2 Benefits of a Pen Test\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e11.4 Endpoint Detection and Response (EDR)\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e11.4.1 Extended Detection and Response (XDR)\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e11.5 Disaster Recovery from Backup\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e11.5.1 Backup Strategy\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e11.6 Uninterruptible Power Supply (UPS) for IT\/OT Systems\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e \u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e \u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e\u003cbr\u003e\u003cb\u003eChecklists\u003c\/b\u003e\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003eChecklist 1: Cyber Security Familiarisation for New Crewmembers\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003eChecklist 2: Cyber Security Crew Training\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003eChecklist 3: Detecting a Cyber Incident\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003eChecklist 4: Responding to a Cyber Incident On Board\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003eChecklist 5: Onboard Business Computer\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003eChecklist 6: Network Segregation\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003eChecklist 7: Networks (Wireless and Wired)\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003eChecklist 8: Satellite Communications\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003eChecklist 9: OT Systems Initial Inspection\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003eChecklist 10: ECDIS Cyber Security\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003eChecklist 11: Cyber Security Checks on the Navigation Bridge\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003eChecklist 12: Asset Management and Risk Assessment\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003eChecklist 13: Remote Access\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e\u003cbr\u003e\u003cb\u003eAnnexes\u003c\/b\u003e\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003eAnnex 1: Cyber Security Assessment\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003eAnnex 2: Creating a Cyber Security Plan\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003eAnnex 3: Creating User Accounts\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003eAnnex 4: Checking for Segregated Networks\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003eAnnex 5: NMEA 0183\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003eAnnex 6: Further Resources\u003c\/p\u003e\n\u003cp class=\"MsoNormal\" style=\"margin-bottom: 0in; line-height: normal;\"\u003e \u003c\/p\u003e\n\u003ch4\u003eAdditional Information\u003c\/h4\u003e\n\u003cdiv\u003eNumber of Pages:\u003cspan\u003e \u003c\/span\u003e262\u003c\/div\u003e\n\u003cdiv\u003ePublication Date:\u003cspan\u003e \u003c\/span\u003eNovember 2025\u003c\/div\u003e\n\u003cdiv\u003eBook Height:\u003cspan\u003e \u003c\/span\u003e297 mm\u003c\/div\u003e\n\u003cdiv\u003eBook Width:\u003cspan\u003e \u003c\/span\u003e150 mm\u003c\/div\u003e\n\u003cdiv\u003eAuthors:\u003cspan\u003e \u003c\/span\u003eWitherbys, BIMCO and ICS\u003c\/div\u003e\n\u003cdiv\u003eISBN:\u003cspan\u003e \u003c\/span\u003e1917308887\u003c\/div\u003e\n\u003cdiv\u003eWeight:\u003cspan\u003e \u003c\/span\u003e2 kg\u003c\/div\u003e","brand":"Witherby Seamanship International","offers":[{"title":"Book","offer_id":67572634714357,"sku":"9781918766288","price":459.95,"currency_code":"USD","in_stock":true},{"title":"eBook","offer_id":67572634747125,"sku":"9781918766288EB","price":410.95,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/0090\/5072\/files\/cyber-security-workbook-for-on-board-ship-use-8th-edition-1263147839.png?v=1792174749","url":"https:\/\/www.amnautical.com\/products\/cyber-security-workbook-onboard-ship","provider":"American Nautical Services","version":"1.0","type":"link"}