舰载操作技术系统网络风险管理指南
Guidelines for cyber risk management in shipboard operational technology systems
摘要：
在过去的几年里，我们已经看到了几起网络事件的报道，其中一些主要原因是船上缺乏适当的安全控制和船员对网络安全的认识。为应对海事领域日益增长的网络威胁形势，我们制定了一套海上网络风险管理指南，重点关注对船舶日常运营至关重要的四个主要船上操作技术（OT）系统。这四个OT系统是：通信系统，推进，机械和电力控制系统，导航系统和货物管理系统。该指南确定了每个OT系统中的网络风险，并建议了可以采取的必要行动，以管理每个船上OT系统中的风险。在本文中，我们介绍了新的指南，其中包括网络风险，缓解措施，网络风险评估，以及帮助船东和海事当局评估和提高其船舶网络卫生的检查表。我们的指引已由新加坡海事及港口管理局（MPA）分发给新加坡船舶注册处的船东和运营商，供其参考和使用。
英文摘要：
Over the past few years, we have seen several cyber incidents being reported, where some of the primary causes were the lack of proper security controls onboard the ship and crew awareness on cybersecurity. In response to the growing cyber threat landscape in the maritime sector, we have developed a set of guidelines for maritime cyber risk management, focusing on four major shipboard Operational Technology (OT) systems that are crucial for the day-to-day operation of ships. These four OT systems are: Communication Systems, Propulsion, Machinery and Power Control Systems, Navigation Systems and Cargo Management Systems. The guidelines identify the cyber risks in each of the OT systems and recommend the necessary actions that can be taken to manage risks in each shipboard OT system. In this paper, we introduce the new guidelines, which include cyber risks, mitigation measures, cyber risk assessment, and a checklist to help shipowners and maritime authorities assess and enhance cyber hygiene of their vessels. Our guidelines have been disseminated by the Maritime and Port Authority of Singapore (MPA) to owners and operators of the Singapore Registry of Ships for their reference and use.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
