Internationally recognized, this research program assists industry in achieving an acceptable level of cyber awareness, safety, security, and resilience through evidence-based research. This is an industry-centric program (for maritime, by maritime) with the goal of helping to maintain operational safety at sea and in the marine terminals. Our research process includes:

​

• Vulnerability assessments (to include penetration testing as required and applicable)

• Operational impact and risk analysis

• Mitigation recommendations

• Aggregate database of anonymized information for use by industry stakeholder

​

Understanding the Risk

Vessels and marine terminals are becoming more and more IT-dependent, from equipment and software, to the next generation of IT savvy mariners, to the inherent risks of Big Data. Globally, industries are rapidly and recklessly innovating without security as a priority leading to potential high vulnerabilities and risk. Given the global economic power of the maritime industry, cyber security must be a priority.            

                            

How might my organization be vulnerable?  

 

We see the most common vulnerabilities in the following areas: awareness, ineffective policies and procedures, few, if any, security requirements implemented for critical systems, little or no validated reporting, and lack of a risk management culture relating to cyber.

​

Assessments & Mitigation Recommendations

 

As part of this research, the USMRC Maritime Cyber Assurance Team (MCAT) conducts cybersecurity assessments of vessels and marine terminals, both domestically and internationally.  We developed a NIST-based risk assessment methodology that is customized for maritime and recognized by industry. 

​

By request of our research sponsors, USMRC now provides Maritime Cyber Assurance advisory services.  This includes mitigation recommendations and developing new security requirements around automation and connected systems.  

​