Online Cyber Security Awareness for Seafarers

About the Course

The ‘Cyber Security Awareness for Seafarers' course examines the definition of Cyber Security, the Cyber Threats that exist, the vulnerabilities onboard that there may be in ship IT and OT systems, and how they may be exploited. The course then examines the measures that can be taken to mitigate and defend against these types of threats. This course is designed to provide the user a firm grounding in Maritime Cyber Security issues and to encourage the understanding amongst all individuals in an organisation, because: 'Cyber Security is everyone's responsibility'

Aim of the Course

This course is designed to provide the user, who is at any level in the company or on board ship, with a firm grounding in Maritime Cyber Security issues, and to provide seafarers the basic knowledge and training to enable them to safeguard on board equipment vulnerable to cyber security threats as well as to introduce measures within the shipboard safety management system (SMS) to ensure that vessels are operationally resilient to cyber risks.

This course sets out practicable best-practice guidance on areas such as:

• General knowledge of Cyber Threats and how they are effective, including real-world case studies to put context to the learning.
• Best practice ‘Cyber Hygiene’: The steps we can take to avoid falling foul of an attack.
• Spotting a threat or an attack in progress and what to do in the event of security incidents.
• Developing and following a Cyber Security Assessment and Plan.
• Awareness and application of the mitigation measures that are most appropriate.
• Knowledge of the correct structures, roles, responsibilities and processes that facilitate a sound Cyber Defence.

Target Audience

No prerequisites are required for ship's personnel to get entry on to this course, which can be delivered on board ship or ashore. This online course has been created to give staff and crew of all levels a firm grounding in Cyber Security. The course can be utilised as an intrinsic part of an organisation's overall risk management and is intended to be used by any seafarer. Additionally, the course can be taken by those with accountability for protecting the ships (both when underway and when at port), crew, other personnel, cargo, cargo transport units and ship's stores from the risk of a security-related incident. This course is aimed at:

• Anyone of any rank or capacity, working on or around a ship.
• This course can also be useful for any crew or staff.

Course Duration

The course lasts for approximately 4.5 to 5.5 hours depending on the learner’s abilities and reading speed. However, you can enter and exit this course as often as you require but you must complete each assessment in one sitting as they will reset if you exit during an assessment phase.

Course Contents

The Introduction comprises the following topics:

• Course Contents, Target Audience and Aims
• Learner Verification Information
• Course Usage Instructions

Outcome 1: Information and Operational Technology, IT and OT systems onboard

• What is cyber security?
• Why cyber security is important to ships and shipping
• The threats that cyber security seeks to address and mitigate.
• The effects that threat actors try to achieve.
• Inherent and acquired resilience of ship systems and infrastructure (IT and OT systems)

Outcome 2: Common threats and vulnerabilities

• Risk assessment on cyber-attack
• Types of cyber-attacks
• Stages of a cyber-attack
• Detect and isolate equipment under cyber-attack, and what actions to take

Outcome 3: Best Practices and basic cyber-hygiene

• The human factor in cyber security
• Shipboard operations safety briefing
• Best practices towards implicit cyber hygiene

Outcome 4: Cyber security and safety management system (SMS)

• Developing a shipboard Cyber Security Plan (CSP)
• Review of the CSP
• Monitoring and auditing of the CSP
• Role of a cyber Security Officer (CySO)
• Functions of a Security Operations Centre (SOC)
• Software maintenance, including remote maintenance procedures

Case Studies: Real-world examples of successful Cyber Attacks

• Maersk (2017)
• Gulf of Mexico Oil Rigs (2013)
• Port of Antwerp (2011 to 2013)
• Yahoo (2016)
• Marriott International (2018)
• Stuxnet / Iranian Nuclear Program (2010)

Continuous Professional Development (CPD) Certification

This course is fully approved by the CPD Accreditation Board which is an internationally recognised certification. Learners will receive an electronic copy of the official course certificate in PDF format upon successful completion of the course via the eLearning system. Each of these CPD Certificates will provide the following information to the learner:

• Course Title
• CPD Approval Logo
• CPD Approval Centre Number
• CPD Course Approval Number and associated Points
• Unique Reference Number
• Score and Completion Date