Address the human factor in cyber security

With the increasing use of systems with embedded software on ships and mobile offshore platforms, cyber security is becoming critical not only for data protection, but also for reliable operations. It is known that 97% of attacks consist of trying to trick an employee by using social engineering techniques. Phishing and social engineering, causing unintentional downloads of malware, etc., are common issues.

DNV offers an e-learning course for your crews and shore staff to raise awareness concerning cyber security, focusing on issues such as common cyber threats and onboard vulnerabilities and how staff can contribute to your company’s cyber security. The e-learning course “Maritime Cyber Security Awareness” developed by DNV raises awareness about threats and countermeasures, addressing your cyber security management system by encouraging the crew’s good cyber hygiene. The course explains in simple steps how cyber security is relevant for the crew and how to protect both the onboard IT infrastructure and operational technology (OT) systems, which have serious safety consequences for the vessel, crew and environment.

The easy-to-understand course is intended for a wider audience, the material also leverages key safety management practices and shows how they can be applied to cyber security within the maritime and offshore industries.

Your benefit – How it works

Each user will receive an individual access code for the online course and an electronic certificate upon successful completion of the training. This makes it possible to keep track of and verify who has followed the training. The course is available online, which means it can run from any device with Internet access.

What we offer – The course

The course focuses on raising the awareness of crew and office personnel which is one critical aspect of cyber security. It acknowledges the distinct onboard context, including environmental factors, crew behaviour and the use of automation and control systems. Using easy-to-understand language, the training modules outline some individual roles in preventing onboard cyber incidents and minimizing the operational impact. Users will gain insights into behaviour changes that contribute significantly to improving cyber security.

The set-up

• Module 1: Your role in Maritime cyber security – This module highlights the impact of cyber incidents on board ships and offshore platforms and explains how the different roles of onboard crew members can protect against cyber-attacks.
• Module 2: Common threats in Maritime – This module focuses on typical threats, such as phishing or hacker attempts that try to trick you into installing malicious software. The participant learns how to detect such cyber-attacks and what actions to take.
• Module 3: Common vulnerabilities and Cyber hygiene – Through illustrative examples, this module communicates good practices to safely use electronic devices on board and conduct operations as part of the daily routine.
• Module 4: Advanced cyber security measures and how to react to cyber incidents – This module covers best practices for preventing onboard cyber incidents and handling them if they occur.
• Final Test: After the four modules a final quiz is included to check how much the user has learnt.

More than just a cyber security course 

In response to the escalating number of cyber security threats and sophisticated cyber attacks in the maritime industry, DNV has fully revised this e-learning training to provide an easy-to-install solution that will heighten the cyber awareness of all crew and office staff.

The course addresses critical requirements including IMO Resolution MSC.428 (98), the latest MSC-FAL.1-Circ.3 (draft version of Rev.3), important cyber security concepts from IACS and USCG cyber incident reporting. Additionally, we incorporate internationally recognised best practices such as NIST 2 Cyber Security, IEC 62443, ISO/IEC 27001 and DNV-RP-0496.

Customisation options exist if you wish to tailor the course to your company's specific needs. We can support you in achieving cyber resilience by strengthening your first line of cyber security defence - your crew and colleagues ashore. Contact your local DNV Cyber team or Maritime Academy.