A New cyber risk identification and assessment approach of the maritime cyber risks
Ahmed M. Abdelmagid, Farshid Javadnejad, Michael K. McShane, Rafael Dı́az, Cesar Ariel Pinto · Enterprise Information Systems · 2025
The maritime sector, vital to global trade and national security, faces growing cybersecurity threats due to increased digitalization. This study proposes a methodology integrating Security Engineering Risk Analysis with the MITRE ATT&CK framework to assess cyber risks in maritime entities. Using the Advisen dataset, 111 relevant cyber incidents were analyzed, focusing on attack vectors targeting ports and maritime organizations. A qualitative risk assessment evaluates threats to the CIA triad and identifies adversarial tactics. Findings align with existing literature, reinforcing the methodology’s validity and offering actionable insights to enhance cybersecurity practices across the maritime sector.