ETD

• cyber resilience
• cyber security
• maritime
• shipping

This thesis first analyzes the concept of organizational cyber resilience to gain a general understanding. It then connects organizational cyber resilience to the maritime sector. Later, it analyzes eight cyber-attack case studies on organizations in the maritime industry. It tries to assess the organizational cyber resilience of these organizations, considering a cyber resilience framework explored in earlier parts of the thesis. Finally, it conducts a comparative analysis of the case study results.

Cyber resilience is a concept that has received increased attention in research in the last few years. Therefore, understanding the idea is the first step, mainly because the conjunction between cyber resilience and the maritime industry is under-researched. Today's maritime industry is outstanding in global commerce, trade, and the economy.
However, past cyber-attacks on maritime shipping companies have negatively affected their operations. Ensuring a cyber-resilient maritime economy is therefore of high importance. The thesis thus aims to analyze the state of maritime organizational cyber resilience and argues the significance of cyber-resilient maritime organizations. Using a framework provided by other researchers, insight is given into the resilience of the organizations analyzed. In the comparative analysis, the thesis also establishes specific steps organizations could take to ensure maritime organizational cyber resilience. The thesis results first show that further research is necessary into maritime cyber resilience. Specifically, the case study results show that larger shipping companies perform better than expected in organizational cyber resilience, whereas smaller companies still lack. Overall, the state of maritime cyber resilience – at least – in shipping is better than expected, yet it still needs significant improvements and research.