UNSW Research Reveals Maritime Cybersecurity Regulation Gaps

In a world where ships are becoming as much about software as they are about steel, a new study is shining a light on how well regulators are keeping up with the digital revolution. Mark van Zomeren, a researcher from the School of Systems and Computing at the University of New South Wales in Canberra, has been digging into how maritime, aviation, and nuclear regulators are handling the cyber aspects of high-hazard systems. His work, published in the journal ‘Systems’ (which, in plain English, is a journal about interconnected things and how they’re managed), suggests that there’s room for improvement.

Van Zomeren’s research looked at regulations, codes, and standards from the U.S., the EU, and Australia. He found that while cybersecurity is on the radar, it’s often treated separately from physical safety. “Current regulations primarily treat cyber and physical safety in isolation,” he noted, pointing out that this siloed approach might not be enough for the complex systems we’re dealing with today.

So, what does this mean for the maritime sector? Well, as ships become more connected and automated, the stakes get higher. A cyber incident on a modern vessel could have serious consequences, not just for the ship but for the people on board and the environment. Van Zomeren argues that we need a more holistic approach, something he calls “cyberworthiness.” This isn’t just about protecting systems from hackers; it’s about ensuring that the cyber and physical aspects of a system work together safely and reliably.

For maritime professionals, this research highlights a few key points. First, it’s a reminder that cyber risks are real and need to be managed proactively. Second, it suggests that the industry might need to push for more comprehensive regulations and standards. And third, it opens up opportunities for companies that can offer solutions for assessing and improving the cyberworthiness of ships and other complex systems.

Van Zomeren’s work also introduces the idea of “Complex Systems Governance,” a approach that aims to incrementally improve how we manage these intricate systems. It’s a bit like fine-tuning an engine; you don’t just tweak one part and call it a day. You need to consider how all the parts interact and work together.

In the end, this research serves as a wake-up call and a roadmap. It’s a call to action for regulators, shipowners, and tech providers to work together to ensure that our increasingly digital ships are as safe and reliable as possible. And for those in the maritime sector, it’s an opportunity to stay ahead of the curve and lead the way in managing cyber risks. After all, in an industry where safety is paramount, being proactive about cyberworthiness isn’t just good practice—it’s good business.

Scroll to Top