Cybersecurity is critical for safe cruising

Apr 27, 2023

The primary aim of cruises is to provide passengers with a safe and relaxing holiday while passengers focus on entertainment and new experiences. Behind the scenes, the vessel’s crew stands ready to maintain safety and cybersecurity.

The primary aim of cruises is to provide passengers with a safe and relaxing holiday while passengers focus on entertainment and new experiences. Behind the scenes, the vessel’screwstands ready to maintain safety and cybersecurity.

Preparation against viral attacks while at sea is essential. These may include attacks on personal data, phishing for sensitive information and much more.

An automation supplier can greatly assist in these areas.
While following the security guidelines of the shipowner is the best way to protect assets, the automation supplier has an essential role in securing the smooth operation of a vessel. Lars-Edin Svaasand, Manager, R&D, Valmet, explains: “Our target is to secure our customers’ business data and information with our services offering. For instance, system cybersecurity patching is necessary and continuous work. Patching clearly ensures higher availability of the automation system and
equipment. It is carried out by updating the current Windows patching software.”


Valmet works systematically to meet stringent standards and best practices. Valmet’s procedure starts by brainstorming with customers to pinpoint possible risks. This forms the basis for a detailed execution plan.


Valmet and the shipowner then work out specifics while creating a Cybersecurity Framework Agreement. For instance, firmware patching, system health check and documentation all have to be kept continuously up to date. In the end, however,
the processes developed and applied are designed to encompass cybersecurity along with operational security and safety.


Once all details have been considered and identified in the framework agreement, the agreement can serve as a model for other vessels, too. The framework focuses on using business drivers to guide cybersecurity activities. Cybersecurity risk
mitigations are an essential part of each organization’s risk management processes.


The framework provides a common organizing structure for multiple approaches to cybersecurity by assembling standards, guidelines and practices effective today.