Session offered discussion on current challenges to maintain the security of ports and strategic maritime passageways with best practices from the European Union. Experts noted that modern ports are increasingly connected, automated and dependent on digital systems which makes them attractive targets for both cybercriminals and organised trafficking networks. The more critical and connected a port is, the more attractive it becomes for illicit use. 

Experts also explained that one of the greatest challenges is trust. A port does not operate within a single clearly defined cybersecurity perimeter. Instead, it functions through hundreds of trusted relations between ships, port authorities, shipping companies, logistics providers, customs, technology providers and partners. If an attacker compromises one participant in that ecosystem, they may be able to exploit the existing chain of trust and gain access to critical operations without ever directly attacking the port itself.  

Experts concluded that the adversary wants the port to be up and operational, but not aware of being compromised. This means that cyber, physical and human vulnerabilities cannot be treated as separate issues. As they form a single attack surface, the effective port security therefore requires organisations to look beyond the digital perimeter and understand how people, physical infrastructure, connected systems and trusted relationships interact.  

Experts’ Forum on Critical Maritime Infrastructure was organised by the Department of Foreign Affairs of the Philippines and attended by policymakers and representatives of the Philippines, International Maritime Organization, Australia, Canada, the Netherlands, European External Action Service, Singapore, Japan, the United Kingdom, United States of America and Vietnam. 

• Photos: https://www.flickr.com/photos/eucybernet/albums/72177720335522236