Intelligent CISO Issue 68 | Page 44

industry unlocked

TERMINAL OPERATOR PARTNERS WITH DRAGOS TO REDUCE COSTS AND ENHANCE OT CYBERSECURITY

The maritime and logistics industry is highly dependent on efficient and secure operations to ensure timely delivery of goods and cargo . Port owners and operators need to ensure that their Operational Technology ( OT ) environments are secure from cyber threats to avoid disruptions in operations . We explore how a leading container terminal operator approaches OT cybersecurity and how the company leverages Dragos technology and professional services to secure its environments .
ybersecurity

C is particularly challenging in today ’ s world , partially because of the increase in threats and digital connectivity and partially because of the shift in how supply chain is managed in the wake of the COVID-19 pandemic . Traditionally , supply chains have primarily relied on the ‘ just in time ’ model , which emphasises efficiency and cost reduction by minimising inventory levels and relying on precise demand forecasts . The pandemic exposed vulnerabilities in this approach and the concept of ‘ just in case ’ emerged . This new approach represents a shift towards building more resilience and flexibility into supply chains by maintaining larger inventories , diversifying sourcing options and developing contingency plans .

Challenges
In 2017 , a piece of malware called NotPetya infected the computer systems of A . P . Moller-Maersk , a Danish shipping conglomerate , and spread to other companies worldwide .
The attack caused widespread disruption to Maersk ’ s operations , including the temporary shutdown of several of its container terminals and port operations . The company estimated that the incident cost between US $ 200 million and US $ 300 million in lost revenue and recovery costs . The Maersk incident is often cited as a cautionary tale for the importance of cybersecurity and the need for companies to take proactive steps to protect their systems and data , and probably served as a trigger for insurance companies to take a closer look at pricing cybersecurity risk into their policies .
During this time , the performance and security of Operations Technology was managed by the maintenance department at the company , rather than a centralised , security-focused business unit . Facing premium increases , along with heightened focus on OT cybersecurity because of the Maersk headlines , the leadership team kicked off the development of a strategic roadmap that included significant investment in its existing safety-focused culture , a conscious environmental initiative , and projects to evaluate and
This customer is one of the world ’ s largest and most innovative container terminal operators , with a history of driving terminal efficiency . The company operates several large port facilities that handle a significant number of containers daily . Port operations are automated , with various OT systems controlling cargo handling equipment , safety systems , lighting and security systems .
increase OT cybersecurity posture at each of its port locations . Management was already concerned about the potential impact of cyber threats on its OT systems and the potential for disruptions in operations , and the initiatives driven by the roadmap exercise helped to provide the attention and funding needed to tackle the challenges .
Solutions
Addressing cybersecurity challenges in the maritime and logistics industry requires a comprehensive approach that includes risk assessment , policy
44 www . intelligentciso . com