Insights from Maritime Cyber Experts: It Requires a United Front

So, what was on the docket?

First, cyber threats in shipping are on the rise, and no company is too small or too large to be immune. The panelists recounted stories of attacks both on major companies and through clever means like changing software before it even reached ships. Regulations like IMO, NIS2, and renewed attention from bodies like the US Coast Guard are important, but the experts agreed: checking boxes on compliance forms won’t guarantee safety. It’s about building a culture of awareness at every level, from the boardroom to the engine room.​

The panelists emphasized the critical “human factor.” Systems can be firewalled, but people remain the biggest vulnerability. In a striking analogy, one expert compared our trustful nature to small communities where everyone leaves doors unlocked. Today’s phishing emails and malware have become so convincing that even the best-trained staff can be tricked, making ongoing education and vigilance essential.​

Continuous monitoring is another must, not only for IT systems but also for critical operational technology (OT) on board. Rapid response to incidents, driven by a thorough understanding of what “normal” looks like for each business, can mean the difference between business as usual and a major crisis. The panel called out the need for every shipping company, big or small, to approach cybersecurity as a shared responsibility and not just an IT problem.​