Disruptive Capability

"MARINE"

"Cyber Secure Link"

Quantum Marine - Cyber Secure Link, has been developed by the Qubit Aerospace LLC, based on recent developments of quantum cybersecurity systems applied to the naval market, which includes disruptive technology systems and devices such as: QBB "Quantum Black Box", "Cryto Quantic" Enhanced Algorithms, Quantum Cryptography; Keyless Dynamic Coding Protocol [QKL-DC], "QubeSAT" Space Quantum Key Delivery Satellite Services, Quantum Communications. The objective of the Quantum Cyber Secure Data Link System is protect the Marine Transportation System (MTS); the Marine Safety Investigation; GMDSS; the Maritime Critical Infrastructure; to guarantee an ultra-secure links between the entire international maritime system, at any time, and from anywhere on the planet. Services & Solutions: Maritime Cyber Security Services. Hacker-Proof Quantum Multi-Domain Data Link & Naval Weapon Systems; Quantum C-5 ISTAR; Quantum IOT & Quantum Ultra Secure Mobiles Phones.-

QBB - "Quantum Black Box" - MARINE CYBER SECURITY Solutions

QBB "Quantum Black Box", provides an ultra-secure link through exclusive software ("Cryto Quantic") with advanced Quantum Cryptography algorithms, to ensure the integrity of the data generated, transmitted and hosted in the cloud; as well as its subsequent safe reception, thanks to the maintenance of a constant quantum entanglement with another twin QBB, installed both in the facilities of a maritime authority or shipping company located anywhere in the world; and that allows the decryption of the data, and subsequent reading of all the technical and operational parameters generated by the ships in navigation, accidents, incidents, as well as any other component of the maritime transport system (SMSSM, AIS, Satellites, ports, etc.) that wishes to maintain an ultra-secure data link, for the monitoring, control or surveillance of the global maritime system.

MARITIME - "REMOTE BLACK BOX" System

MARITIME DATALINK - MANAGEMENT

THE GUIDELINES ON CYBER SECURITY ONBOARD SHIPS

Cyber Security

IMO - Guidelines on Maritime Cyber Risk Management

IMO - Interim Guidelines on Maritime Cyber Risk Management

Organization: IMO - Release Date June 2016 - Type: Best Practices. - Page Count: 6; - Audience: Maritime risk managershttps://www.ics-shipping.org/wp-content/uploads/2021/02/2021-Cyber-Security-Guidelines.pdf

Applicability

Primary Domains: ✓ IT & ✓ OT
Stakeholders: ✓ Commercial & ✓ Government
Geography: ✓ U.S. & ✓ International
Asset: ✓ Facilities
Types: ✓ Offshore & ✓ Vessels

Description

These guidelines provide high-level recommendations for maritime cyber risk management. They recognize that risk management has traditionally been focused on operations in the physical domain, but greater reliance on digitization, integration, automation and network-based systems has created an increasing need for cyber risk management in the shipping industry. It provides recommendations that can be incorporated into existing risk management processes. In this regard, it is complementary to IMO’s published safety and security management practices.

The document is intended for all organizations in the shipping industry and is designed to encourage safety and security management practices in the cyber domain. It recognizes that no two organizations in the shipping industry are the same; so, they are expressed in broad terms for widespread application.

It presents the functional elements that support effective cyber risk management, which all should be continuous and concurrent, including:

Identify: Define personnel roles and responsibilities for cyber risk management and identify the systems, assets, data and capabilities that, when disrupted, pose risks to ship operations
Protect: Implement risk control processes and measures, and contingency planning to protect against a cyber event and ensure continuity of shipping operations
Detect: Develop and implement activities necessary to detect a cyber event in a timely manner
Respond: Develop and implement activities and plans to provide resilience and to restore systems necessary for shipping operations or services impaired due to a cyber event
Recover: Identify measures to back-up and restore cyber systems necessary for shipping operations impacted by a cyber event

Commentary

The paper recognizes and elevates cybersecurity as a fundamental consideration for the maritime industry. It extends the coverage of cybersecurity beyond ICSs to bridge, passenger servicing and management systems, and passenger facing public networks. This paper is an endorsement of the importance of maritime cybersecurity and a pointer to useful cybersecurity program planning references. It includes very brief treatment of:

The difference between IT and OT systems
The recognition of increasing computerized communications as an inevitability in the maritime industry
The risk to security presented by both malicious and benign actions/activities
The connected nature of vulnerabilities
The mutating nature of threats
The multiplicity of control options

The paper specifically references the NIST Framework for use as a cybersecurity planning/design model. It also points the reader to several other references (e.g., BIMCO, ISO/IEC 27001, and the NIST framework)

REF: Industrial Control Systems (ICS)

OMI - Directrices provisionales sobre la gestión del riesgo cibernético marítimo

Organización: OMI - Fecha de lanzamiento Junio 2016 - Tipo: Mejores Prácticas. - Número de páginas: 6; - Público: Gestores de riesgos marítimos

Aplicabilidad

Dominios principales: ✓ IT & ✓ OT
Partes interesadas: ✓ Comercial & ✓ Gobierno
Geografía: ✓ EE. UU. y ✓ Internacional
Activo: ✓ Instalaciones
Tipos: ✓ Offshore & ✓ Embarcaciones

Descripción

Estas directrices proporcionan recomendaciones de alto nivel para la gestión del riesgo cibernético marítimo. Reconocen que la gestión de riesgos se ha centrado tradicionalmente en las operaciones en el dominio físico, pero una mayor dependencia de la digitalización, la integración, la automatización y los sistemas basados en redes ha creado una necesidad cada vez mayor de gestión de riesgos cibernéticos en la industria del transporte marítimo. Proporciona recomendaciones que se pueden incorporar en los procesos de gestión de riesgos existentes. En este sentido, es complementario a las prácticas de gestión de seguridad y protección publicadas por la OMI.

El documento está destinado a todas las organizaciones de la industria del transporte marítimo y está diseñado para fomentar las prácticas de gestión de la seguridad y la protección en el dominio cibernético. Reconoce que no hay dos organizaciones en la industria del transporte marítimo que sean iguales; por lo tanto, se expresan en términos amplios para una aplicación generalizada.

Presenta los elementos funcionales que respaldan la gestión eficaz del riesgo cibernético, que deben ser continuos y concurrentes, incluidos:

Identificar: Definir las funciones y responsabilidades del personal para la gestión de riesgos cibernéticos e identificar los sistemas, activos, datos y capacidades que, cuando se interrumpen, plantean riesgos para las operaciones del barco.
Proteger: implementar procesos y medidas de control de riesgos y planes de contingencia para protegerse contra un evento cibernético y garantizar la continuidad de las operaciones de envío.
Detectar: desarrollar e implementar las actividades necesarias para detectar un evento cibernético de manera oportuna
Responder: Desarrollar e implementar actividades y planes para brindar resiliencia y restaurar los sistemas necesarios para las operaciones de envío o los servicios dañados debido a un evento cibernético.
Recuperar: identificar medidas para respaldar y restaurar los sistemas cibernéticos necesarios para las operaciones de envío afectadas por un evento cibernético

Comentario

El documento reconoce y eleva la ciberseguridad como una consideración fundamental para la industria marítima. Extiende la cobertura de la ciberseguridad más allá de los ICS al puente, los sistemas de gestión y servicio de pasajeros y las redes públicas orientadas a los pasajeros. Este documento es un respaldo a la importancia de la ciberseguridad marítima y un indicador de referencias útiles para la planificación de programas de ciberseguridad. Incluye un tratamiento muy breve de:

La diferencia entre los sistemas de TI y OT
El reconocimiento del aumento de las comunicaciones computarizadas como algo inevitable en la industria marítima
El riesgo para la seguridad presentado por acciones/actividades maliciosas y benignas
La naturaleza conectada de las vulnerabilidades
La naturaleza mutante de las amenazas
La multiplicidad de opciones de control

El documento hace referencia específicamente al Marco NIST para su uso como modelo de planificación/diseño de seguridad cibernética. También dirige al lector a varias otras referencias (p. ej., BIMCO, ISO/IEC 27001 y el marco NIST)

REF: Sistemas de Control Industrial (ICS)