NCS3- A ship comes loaded

Authors:

  • Mari Olsén
  • Christian Valassi
  • Ann-Sofie Stenerus

Publish date: 2023-01-24

Report number: FOI-R--5405--SE

Pages: 58

Written in: Swedish

Keywords:

  • Sea ports
  • cyber security
  • information flows
  • cyber-physical systems
  • digitization.

Abstract

Sea ports are a critical node in the transport system, where many different types of actors and freight goods meet. The objective of this study is to provide additional grounds to the Civil Contingency Agency in their work with cyber security for critical infrastructure. This is carried out through an overview of actors, informations flows and cyber-physical systems of importance for the flow of freight goods. Further, a brief overview of digitalisation and an assessment of cyber security maturity is presented. Data collection for this study has primarily been carried out via interviews with various port actors and authorities. The results of the study shows that the amount of cyber-physical systems within ports is still limited and that the flow of information is fragmented. Certain types of information are collected in joint systems, while other types are sent via email between different actors. Rudimentary solutions that are not reliant on complex and automated flows of information is perhaps why Port operators assess that there are few systems that are so critical that an attack on them would stop the flow of goods. At the same time, digitization is on the rise, which in the long term will allow for streamlining both handlig of goods and exchange of information. The port operators who participated in the study have expanded their work related to cyber security during the resent years. There also seems to be a willingness to work on cyber securityrelated issues on part of management. At the same time, focus on security in ports is still focused on physical security.