MITIGATE: An Innovative Cyber-Security Maritime Supply Chain Risk Management System

Despite the importance of Critical Information Infrastructures (CIIs) and dynamic ICT-based maritime Supply Chains (SCs) for ports operations, state-of-the-art Risk Management (RM) methodologies for maritime environments pay limited attention to cyber-security and do not adequately address security processes for international SCs. Motivated by these limitations, we have developed and will validate a novel RM system which will empower stakeholders’ collaboration for the identification, assessment and mitigation of risks associated with cyber assets and SC processes. This collaborative system will boost transparency in risk handling, while enabling the generation of unique evidence about risk assessment and mitigation. At the heart of this system is an open simulation environment enabling stakeholders to collaboratively simulate risks and evaluate risk mitigation actions. Emphasis is paid on the estimation of cascading effects in SCs, as well as on prediction of future risks. The system is compliant with prominent security standards and regulations for the maritime sector, i.e. ISPS, ISO 27001, ISO 27005, ISO 28000 etc.