Shipping & Maritime

IT & OT Security

Changing threat landscape

Digital threats are becoming more complex. The access, connectivity, and networking of IT (Information Technology) and OT (Operational Technology) have increased cyber security threats and risks for many maritime operations. It’s more important than ever to stay ahead of these threats before they cause damage to your organization.

Vulnerability Management should be an inherent part of your company's safety and security culture - ensuring the ship's safety, security, and protection, the crew, the cargo, and the marine environment. An investment in our platform will help your operation runs smoothly and on time.

COMPLIANCE

Meet IMO’s & ICS’s cyber security requirements

IMO compliance

IMO (the International Maritime Organization), the United Nations specialized agency, with responsibility for the safety and security of shipping. IMO provides guidelines and recommendations for maritime cyber risk. Stakeholders should take the necessary steps to safeguard shipping from current and emerging threats and vulnerabilities related to digitization, integration, and automation of processes and systems in shipping. IMO’s recommendations clearly state that identifying vulnerabilities and risks is required within the maritime industry.

ICS compliance

ICS (Internal Chamber of Shipping) is the global trade association for shipowners and operators. ICS has specific guidelines for cyber security onboard ships produced and supported by BIMCO, CLIA, ICS, Intercargo, Intermanager, Intertanko, IUMI, OCIMF, and World Shipping Council.
These guidelines focus on the need for cyber risk management and the importance of identifying vulnerabilities. the need for risk-based work

Getting started

Safety both offshore & onshore

As a maritime customer at Holm Security, you can, for example, scan all ships on a scheduled monthly basis and collect all vulnerability data in one place, neatly organized per ship. With Holm Security, you can scan your offshore locations, onshore locations, and cloud infrastructure. You don’t have to wait until your ship is in the dock, and you don’t have to worry about high costs related to the number of scanner appliances. It works just as well on other maritime sites, including oil rigs, wind, and farm locations.

You can easily set up multiple Scanner Appliance in separated networks on almost all hardware regardless of connectivity. The scanning data will all end up in the customer's own Security Center. In Security Center, the customer, or their partner, can manage, re-scan, generate reports and create integrations to several ticket systems.

CHALLENGES

Scan infrastructure onboard

The amount of digital infrastructure onboard ships is growing. At the same time, there are challenges with connectivity at sea that limit how fast and when data can be communicated to centralized systems for cyber security. Holm Security's vulnerability management platform limits the amount of data to be communicated - whenever possible. Thus, the vulnerability data from systems used onboard can be efficiently managed centrally directly in the cloud.

Security requirements

Fully understand the threat landscape and create a security framework that allows you to be ahead of any attackers. Here are a few best practices to protect your organization from disruptive and costly intrusions.

Identify

Identify and understand the threat landscape, including external and internal cyber threats.

Assess

Assess the risk exposure by determining the likelihood and impact of vulnerability exploitation by any external or internal actor.

Risk posture

Continuously and carefully adjust your risk posture to align with the changing cyber environment.

Reduce

Reduce the likelihood and the impact of any potential exploitation by implementing detection measures.

Mitigate

Establish a contingency plan to mitigate any potential cyber risk.

Recover

Use contingency plan to respond and recover from any cyber incidents to ensure operational stability.

system-and-network-scanning-holm-security

System & Network Scanning

Take control over the security of your systems and networks. We support all parts of your infrastructure – public, local, cloud, IoT, containers as well as OT and SCADA.

Web Application Scanning

One of the most powerful web application scanners on the market finding all types of vulnerabilities, like OWASP top 10. Also scanning APIs.

phishing-and-awareness-training-holm-security

Phishing & Awareness Training

Increase resilience against email attacks through simulation of email attacks, like phishing, spear phishing, and ransomware attacks. Built-in automated awareness training.

Shipping & maritime

Gain insight

Secure operations

Compliance