To πλαίσιο κυβερνοασφάλειας NIST στην ναυτιλία
Nist cybersecurity framework in maritime environment

View/ Open
Keywords
Framework ; Operational ; Marinetime ; Information ; CSF ; NIST ; Security ; ManagementAbstract
Plans for preventing and mITigating Vulnerabilities in computer networks are known as
cyberSecurity frameworks. A "cyberSecurity framework» is a collection of international
standards and best practices. With the assistance of the CyberSecurity Framework,
organizations can reduce their vulnerabilITy to cyber-attacks and improve the strength of
their defenses. The topic of my thesis is to apply the NIST CyberSecurity Framework within
the Marinetime industry, focusing on the importance of cyberSecurity concerning
Marinetime operational technologies and information technologies. Given that the industry
has become very dependent on interconnected systems for navigation, communication, and
logistics, such research will shed light on the challenges of cyberSecurity facing Marinetime
companies and highlight the demand for such frameworks as the NIST CSF to prOTect
against cyber threats. The study will first give a historical overview of how NIST was
developed and ITs mission, thus setting a foundational role in setting standards in
cyberSecurity. Then, IT will delve deep into details regarding the NIST CSF and explore the
details of the components, including Identify, PrOTect, Detect, Respond, and Recover, in
Marinetime operations. Sections will be important in the assessment of risk management
practices, Vulnerabilities in Marinetime OT systems-for instance, propulsion controls and
navigation controls amongst OThers-and IT components like communications networks.
This thesis puts the NIST framework in to a comparative perspective in relation to OTher
cyberSecurity Protocols, stressing the adaptabilITy of NIST to various organizational
structures at bOTh the level of large Marinetime enterprises and the smaller operators. Case
studies and statistical analyses further establish the fact that the NIST CSF can be used to
identify, manage, and develop incident response strategies against the background of the
Marinetime sector. IT serves to provide recommendations on implementing cyberSecurity
controls for Marinetime organizations in line with the guidelines laid down by NIST,
developing resilience from the impacts brought about by cyberattacks on life and continuous
operations of Marinetime systems. Furthermore, an applied analysis is then presented using
data from a real shipping company to demonstrate practical applications of risk management,
contingency planning and comparison with OTher contexts. This chapter demonstrates how
the cyberSecurity framework enhances an organization’s resilience against cyber threats,
adding a level of practical authenticITy to the study.
In the end, I summarize my findings and provide conclusions on the effectiveness of the
framework in the Marinetime industry, reinforcing the importance of structured
cyberSecurity practices in ensuring operational Security and compliance.