ENHANCING PORT CYBER RESILIENCE THROUGH CYBER PHYSICAL SECURITY ASSESSMENT

Abstract

Marine ports are critical elements of the global supply chain and maritime transportation sector, facilitating the transportation of goods, energy, and information across the globe. Ports as part of the critical infrastructure sector, experience rapid transformation driven by digitalization, sustainability requirements and the need for the reduction of carbon emissions and environmental impact. This has led to the intensified exposure of ports to multiple and diverse cyber threats stemming from the vulnerabilities and the wider attack surface created through the integration of operational technologies (OT) with information technologies (IT) and the development of more efficient but complex cyber- physical systems. Ports now face a growing threat landscape where cyber attacks can disrupt both digital systems and infrastructure as well as physical operations, leading to cascading effects on international trade and economic stability. This article explores the imperative of strengthening port resilience through comprehensive cyber physical security assessment. It presents a case study of a cyber attack on a cold iron plant—a facility that supplies shore-side electrical power to docked ships—highlighting how a targeted breach led to operational paralysis and safety hazards. Using bow tie analysis, the study maps the causal pathways from threat sources to consequences, identifying critical barriers and recovery measures. This method provides a structured framework for visualizing risk scenarios and enhancing decision-making in security planning. By examining the intersection of digitalization and physical infrastructure in marine ports, the article underscores the need for proactive security strategies that bridge cyber and physical domains. It advocates for the adoption of integrated assessment models that not only detect vulnerabilities but also quantify potential impacts and guide mitigation efforts. Ultimately, enhancing port resilience requires a paradigm shift—from reactive cybersecurity to holistic cyber physical security governance—ensuring that ports remain robust, adaptive, and secure in the face of increasingly sophisticated cyber threats.