Journal is indexed in following databases:
- SCOPUS
- Web of Science Core Collection - Journal Citation Reports
- EBSCOhost
- Directory of Open Access Journals
- TRID Database - Transportation Research Board
- Index Copernicus Journals Master List
- BazTech
- Google Scholar
2023 Journal Impact Factor - 0.7
2023 CiteScore - 1.4
ISSN 2083-6473
ISSN 2083-6481 (electronic version)
Editor-in-Chief
Associate Editor
Prof. Tomasz Neumann
Published by
TransNav, Faculty of Navigation
Gdynia Maritime University
3, John Paul II Avenue
81-345 Gdynia, POLAND
e-mail transnav@umg.edu.pl
Evaluation of Maritime Cyber Security (MarCy) Training Programme
1 Norwegian University of Science and Technology, Gjøvik, Norway
ABSTRACT: The prevalence of digital technologies is growing in the maritime industry, as in other sectors. Consequently, concerns regarding cyber risks are also escalating. Incidents have occurred in the industry, and findings from academic studies further validate these concerns. While technical measures are being taken against cyber threats, the human element remains another crucial aspect that requires strengthening. To effectively combat cyber threats and vulnerabilities, it is imperative to enhance individuals’ awareness through education and training. In order to address the cyber security training needs of maritime professionals and students, we have developed an approach called the Maritime Cyber Security (MarCy) training programme. In this study, we evaluate all stages of the proposed programme through four conducted training sessions involving different learner groups. As a result, the MarCy programme was improved based on the findings obtained during the training sessions and the feedback from the learners. This study validates that the MarCy programme is an effective approach to meet the cyber security training needs of various groups in the maritime domain.
KEYWORDS: Risk Assessment, Maritime Education and Training (MET), Maritime Safety, Human Element, Seafarers, International Maritime Organization (IMO), Cyber Security, Standards of Training Certification and Watchkeeping (STCW)
REFERENCES
Sauli Ahvenjarvi, Ireneusz Czarnowski, and John Mogensen. Addressing Cyber Security in Maritime Education and Training (CYMET). Ed. by Gamal Ahmed Mohamed Ghalwash and Aykut Olcer. Tokyo, Japan, 2019. URL: http://archive.iamu-edu.org/download/final-report-of-research-project-fy2018/?wpdmdl=6691 (visited on 09/29/2022).
BIMCO and ICS. Seafarer workforce report. Scotland, UK, 2021. URL: https://shop.witherbys.com/seafarer-workforce-report/ (visited on 05/21/2023).
BIMCO et al. The guidelines on cyber security onboard ships. 2020. URL: https://www.ics-shipping.org/wp-content/uploads/2021/02/2021-Cyber-Security-Guidelines.pdf (visited on 03/21/2022).
Victor Bolbot et al. “Developments and research directions in maritime cybersecurity: A systematic literature review and bibliometric analysis”. In: International Journal of Critical Infrastructure Protection 39 (2022), p. 100571. ISSN: 18745482. DOI: 10.1016/j.ijcip.2022.100571. - doi:10.1016/j.ijcip.2022.100571
C4ADS. Above us only stars. 2019. URL: https : / / c4ads . org / wp - content / uploads / 2022 / 05 /AboveUsOnlyStars-Report.pdf (visited on 04/15/2023).
Cambridge. Attitude. 2023. URL: https : / / dictionary . cambridge . org / dictionary / english /attitude (visited on 05/25/2023).
Monica Canepa et al. “Assessing the effectiveness of cybersecurity training and raising awareness within the maritime domain”. In: 15th International Technology, Education and Development Conference (INTED 2021). Ed. by Luis Gómez Chova, Agustín López Martínez, and Ignacio Candel Torres. Valencia, Spain: IATED Academy, 2021, pp. 3489–3499. ISBN: 978-84-09-27666-0. DOI: 10.21125/inted.2021.0726. - doi:10.21125/inted.2021.0726
Nabin Chowdhury and Vasileios Gkioulos. “A personalized learning theory-based cyber-security training exercise”. In: International Journal of Information Security (2023), pp. 1–16. DOI: 10.1007/s10207-023-00704-z. - doi:10.1007/s10207-023-00704-z
Citavi. Reference management and knowledge organization. URL: https://citavi.com/en (visited on 06/20/2023).
Cyber-MAR. The project. 2019. URL: https://www.cyber-mar.eu/ (visited on 05/20/2023).
Mazlitdinova Dilnoza et al. “Modular training system as a factor of improving educational process”. In: International Journal of Innovative Technology and Exploring Engineering (IJITEE) 9.1 (2019), pp. 3160–3166. DOI: 10.35940/ijitee.A9152.119119. - doi:10.35940/ijitee.A9152.119119
DNV. DNV-CG-0264 Autonomous and remotely operated ships. 2001. URL: https : / / www . dnv . com /maritime/autonomous-remotely-operated-ships/class-guideline.html (visited on 05/23/2023).
DSCA. Implementation guide for cyber security on vessels. 2020. URL: https://dcsa.org/wp-content/uploads/2020/03/DCSA-Implementation-Guideline-for-BIMCO-Compliant-Cyber-Security-on-Vessels-v1.0.pdf (visited on 10/22/2022).
Erlend Erstad et al. “A human-centred design approach for the development and conducting of maritime cyber resilience training”. In: WMU Journal of Maritime Affairs 22.2 (2023), pp. 241–266. DOI: 10.1007/s13437-023-00304-7. - doi:10.1007/s13437-023-00304-7
Finferries. Finferries’ Falco world’s first fully autonomous ferry. 2018. URL: https://www.finferries.fi/en/news/press-releases/finferries-falco-worlds-first-fully-autonomous-ferry.html (visited on 05/24/2023).
Sarah French. The benefits challenges of modular higher education curricula. Australia, 2015. URL: https://eric.ed.gov/?id=ED573806 (visited on 05/21/2023).
IMO. Autonomous shipping. URL: https : / / www . imo . org / en / MediaCentre / HotTopics / Pages /Autonomous-shipping.aspx (visited on 05/24/2023).
IMO. HTW 8/15/1 Any other business: Necessity of developing relevant provisions concerning cybersecurity related training for seafarers. London, UK, 2021.
IMO. Resolution MSC.428(98) Maritime cyber risk management in Safety Management Systems. London, UK, 2017.
Georgios Kavallieratos and Sokratis Katsikas. “Managing cyber security risks of the cyber-enabled Ship”. In: Journal of Marine Science and Engineering 8.10 (2020), p. 768. DOI: 10.3390/jmse8100768. - doi:10.3390/jmse8100768
Paloma de La Vallée et al. “Sector-specific training - A federated maritime scenario”. In: Multimedia Communications, Services and Security. Ed. by Andrzej Dziech, Wim Mees, and Marcin Niemiec. Vol. 1689. Communications in Computer and Information Science. Cham: Springer International Publishing, 2022, pp. 21–35. ISBN: 978-3-031-20214-8. DOI: 10.1007/978-3-031-20215-53. - doi:10.1007/978-3-031-20215-5_3
Lloyd’s Register. ShipRight procedure assignment for cyber descriptive notes for autonomous & remote access ships. 2017. URL: https : / / maritime . lr . org / l / 941163 / 2021 - 12 - 09 / 2pwb2 / 941163 /1639061961zcaozhcz/mo_cyber_enabled_ships_shipright_procedure_v2.0_201712.pdf (visited on 05/24/2023).
Mentimeter. Live Q&A. URL: https://www.mentimeter.com/features/live-questions-and-answers (visited on 05/22/2023).
Moodle. Moodle Learning Management System (LMS). 2023. URL: https://moodle.com/solutions/lms/(visited on 06/23/2023).
Nadler and Leonard. Designing training programs: The Critical Events Model. US: Addison-Wesley Publishing, 1982.
NTNU. Autonomous all-electric passanger ferries for urban water transport (Autoferry). URL: https://www.ntnu.edu/autoferry (visited on 05/24/2023).
NTNU. Autosea. URL: https://www.ntnu.edu/autosea (visited on 05/24/2023).
OCIMF. Ship Inspection Report (SIRE) Programme. London, UK, 2018. URL: https : / / www . ocimf .org / document - libary / 287 - sire - vessel - inspection - questionnaire - viq - ver - 7007 -questionnaire/file (visited on 10/25/2022).
Aybars Oruc, Nabin Chowdhury, and Vasileios Gkioulos. “A modular cyber security training programme for the maritime domain”. In: International Journal of Information Security (2024). DOI: 10.1007/s10207-023-00799-4. - doi:10.1007/s10207-023-00799-4
Aybars Oruc, Nabin Chowdhury, and Vasileios Gkioulos. Pre-requisite survey for invitees. 2023. URL: https://cyberonboard.com/files/Pre-Requisite_Survey_(Invitee).pdf (visited on 07/06/2023).
Aybars Oruc, Nabin Chowdhury, and Vasileios Gkioulos. Pre-requisite survey for leaders. 2023. URL: https://cyberonboard.com/files/Pre-Requisite_Survey_(Leader).pdf (visited on 07/06/2023).
Aybars Oruc, Nabin Chowdhury, and Vasileios Gkioulos. Specified post-assessment survey for the Class Society. 2023. URL: https://cyberonboard.com/files/Post-Assessment_Survey.pdf (visited on 07/06/2023).
xford. Knowledge. 2023. URL: https : / / www . oxfordlearnersdictionaries . com / definition /english/knowledge?q=knowledge (visited on 05/25/2023).
Oxford. Skill. 2023. URL: https://www.oxfordlearnersdictionaries.com/definition/english/skill?q=skill (visited on 05/25/2023).
Jaime Pancorbo Crespo, Luis Guerrero Gomez, and Javier Gonzalo Arias. “Autonomous shipping and cybersecurity”. In: Ciencia y tecnología de buques 13.25 (2019), pp. 19–26. ISSN: 1909-8642. DOI: 10.25043/19098642.185. - doi:10.25043/19098642.185
Georgios Potamos et al. “Building maritime cybersecurity capacity against ransomware attacks”. In: Proceedings of the International Conference on Cybersecurity, Situational Awareness and Social Media. Ed. by Cyril Onwubiko et al. Springer Proceedings in Complexity. Singapore: Springer Nature Singapore, 2023, pp. 87–101. ISBN: 978-981-19-6413-8. DOI: 10.1007/978-981-19-6414-56. - doi:10.1007/978-981-19-6414-5_6
Sanoma Group. itsLearning global. 2023. URL: https://itslearning.com/global/ (visited on 06/23/2023).
Sanjeev Singh et al. “Improving outcomes and reducing costs by modular training in infection control in a resource-limited setting”. In: International Journal for Quality in Health Care 24.6 (2012), pp. 641–648. DOI: 10.1093/intqhc/mzs059. - doi:10.1093/intqhc/mzs059
Gregory J. Skulmoski, Francis T. Hartman, and Jennifer Krahn. “The Delphi method for graduate research”. In: Journal of Information Technology Education 6.1 (2007), pp. 1–21. URL: https://www.learntechlib.org/p/111405/ (visited on 05/21/2023).
Hasan Mahbub Tusher et al. “Cyber security risk assessment in autonomous shipping”. In: Maritime Economics & Logistics (2022). DOI: 10.1057/s41278-022-00214-0. - doi:10.1057/s41278-022-00214-0
UNCTAD. Review of maritime transport 2022. New York, USA, 2022. URL: https : / / unctad . org /publication/review-maritime-transport-2022 (visited on 05/21/2023).
University of Oslo. Nettskjema. URL: https://nettskjema.no/?lang=en (visited on 06/20/2023).
USCG. CVC-WI-27(2) Vessel cyber risk management work instruction. Washington, USA, 2022. URL: https://www.dco.uscg.mil/Portals/9/CVC-WI-27%282%29.pdf (visited on 06/13/2023).
Witherbys, BIMCO, and ICS. Cyber security workbook for on board ship use. 2022.
Yara International. Yara Birkeland. URL: https://www.yara.com/news-and-media/media-library/press-kits/yara-birkeland-press-kit/ (visited on 05/24/2023).
Citation note:
Oruc A., Chowdhury N., Gkioulos V., Katsikas S.K.: Evaluation of Maritime Cyber Security (MarCy) Training Programme. TransNav, the International Journal on Marine Navigation and Safety of Sea Transportation, Vol. 18, No. 4, doi:10.12716/1001.18.04.01, pp. 743-763, 2024
Authors in other databases:
57428076500
wPWwPkkAAAAJOther publications of authors:
File downloaded 3 times
