Information technology network security risk assessment and management framework for shipping companies

Shipping companies are high-vulnerability information handling organizations (HIHOs). In the past, such companies used exclusively HIHO private communication networks and own satellite resources in order to share and transport sensitive information. In recent years, the ability for the HIHO network users to exploit the advantages of the low-vulnerability information handling organizations’ (LIHOs) value added networks, has led to the need for augmentation of the HIHO networks. In the maritime sector, a push-and-pull effect on the need and demand to transfer information onboard and ashore has led many companies to experiment with interconnected HIHO and LIHO open distributed systems and networks, for their ship-to-shore communications. Security then becomes an issue in a domain, onboard–ashore data transmissions, where little information on the level of risk is available. This paper proposes a risk assessment and management framework to assist in countermeasure selection and level of LIHO network use definition. The model is ultimately applicable where information on potential risks and their impact is minimum and simultaneously changeable. The model is connected to a security profile for interconnected HIHO and LIHO open distributed systems and networks.     

Information technology network security risk assessment and management framework for shipping companies

Shipping companies are high-vulnerability information handling organizations (HIHOs). In the past, such companies used exclusively HIHO private communication networks and own satellite resources in order to share and transport sensitive information. In recent years, the ability for the HIHO network users to exploit the advantages of the low-vulnerability information handling organizations' (LIHOs) value added networks, has led to the need for augmentation of the HIHO networks. In the maritime sector, a push-and-pull effect on the need and demand to transfer information onboard and ashore has led many companies to experiment with interconnected HIHO and LIHO open distributed systems and networks, for their ship-to-shore communications. Security then becomes an issue in a domain, onboard-ashore data transmissions, where little information on the level of risk is available. This paper proposes a risk assessment and management framework to assist in countermeasure selection and level of LIHO network use definition. The model is ultimately applicable where information on potential risks and their impact is minimum and simultaneously changeable. The model is connected to a security profile for interconnected HIHO and LIHO open distributed systems and networks.     

Critical factors for successful implementation of the ISM Code in some Pacific Islands states

Although the International Safety Management (ISM) Code was fully implemented from July 1st 2002, not all countries signatories to the Code, particularly developing countries such as Pacific Islands states, are successful in the introduction and implementation of the instrument. In this paper, we aim to determine factors that facilitate the successful implementation of the ISM Code particularly for the above-named region. Through a thorough literature review, a model of 11 critical factors for the Code implementation success was proposed. These factors were empirically tested using the triangulation of a survey of a group of maritime administration personnel and shipping companies in Fiji and two indepth interviews with senior officers in the Samoa Maritime Administration during the period June–August 2007. The proposed factors were verified by both survey respondents and interview informants, i.e., that maritime safety awareness rooted in a safety culture, senior management commitment and leadership across organisations and the industry, employee involvement and empowerment, enforcement capability of flag state administrations, application of quality management principles in safety management systems, rationalisation of documentation, among others, are essential to the successful implementation of the Code. This research hopes to contribute to the literature and to provide maritime administrations and shipping companies in the Pacific Islands states with additional reference and information that will help expedite the effective implementation of the ISM Code. The need for future research directions is expressed in this paper. Additional investigations, e.g., conducting the same research in other Pacific Islands states as well as in other developing countries in the Asia-Pacific region, would enhance the validity and reliability of this study’s findings.     

浅议海事信息资源安全管理

海事信息系统的建设为业务管理的发展提供了便捷的支撑平台,然而随之而来的信息资源安全问题也备受关注。文章从海事信息资源安全管理的现状入手,对海事信息资源的安全管理方式进行了探讨,希望借此能够对广大读者有所启发和帮助。     

Ship, port and supply chain security concepts interlinking maritime with hinterland transport chains

As maritime processes do no stop at sea ports, hinterland operations have to be considered and addressed as well. This becomes obviously on designing and managing seamless cargo and information flows from/to hinterland regions via sea ports from/to transcontinental markets. Nowadays, also security-related aspects need to be tackled in order to enable continuous flows corresponding to security legislations and technical requirements set up in the field of maritime and intermodal hinterland transport. Ensuring transport security within the European transport market requires both adequate security legislations and innovative concepts. While for the maritime sector, including sea ports, security regulations are already in force, hinterland operations (road, rail and Inland Waterway Transport) are only indirectly affected today, either on carrying out transports from/to sea ports or exporting commodities to overseas territories. This results in the need for innovative security strategies and concepts combining maritime with hinterland transport enabling seamless security processes.     

Introduction to the special issue on maritime security

The terrorist attacks of 11 September 2001 heightened awareness about the vulnerability of all modes of transportation to terrorist attack. The issue of maritime security has therefore become a major concern in the international maritime sector over the past several years. Globalization has led to a strong growth in seaborne trade; however, it simultaneously increases vulnerability to not only terrorism but also international criminal activities that threaten the world's supply chain. For example, in 2008, the rise in piracy activities in the Gulf of Aden brought the issue of maritime security to the forefront of international debate. In addition to the direct impact on ships, crews and cargoes, and on the maritime industry and governments, piracy also threatens global seaborne trade, and has an impact on energy security and the environment [UNCTAD, 2009, Review of Maritime Transport 2009 (New York: United Nations)]. Maritime piracy can pose substantial risks to seaborne trades, with considerable commodities, ranging between raw materials and energy to high-value manufactured products, being shipped between global economic powerhouses [FU, X. W., NG, A. K. Y., LAU, Y. Y., forthcoming, The impacts of maritime piracy on global economic development: The case of Somalia. Maritime Policy and Management]. Maritime security management, including the definition of security, maritime risk assessment, security measures, the regulation and policy of maritime security in shipping and port-related business operations has been receiving growing attention, both in practice and research.     

Impact of the container security initiative on Taiwan's shipping industry

This paper evaluates the impact of risk factors from the container security initiative on Taiwan's shipping industry by employing a risk management matrix to identify the severity and frequency of CSI risk factors, and discovers some appropriate risk management alternatives. This paper's findings are as follows: (1) The majority of risk factors have a moderate-risk level, and possible alternative risk management measures include risk prevention, self-retention and insurance. (2) Ensuring a balance between the efficiency of maritime logistics and supply chain security is of vital importance to any trading countries dealing with security risk issues. (3) The government should encourage the private sector to design and market security hardware and software, which will promote the growth of the domestic security industry and generate employment opportunities.     

Disaster prevention and strategic investment for multiple ports in a region: cooperation or not

With the growth of maritime transportation, seaports have become critical to the world economy as linking nodes between shipping and inland transport. However, the port system is fragile under certain unconventional emergency events. This study addresses the issue of investment on disaster prevention within the port competition context. The present model discusses and compares four situations of different relationships and strategies of pre-disaster prevention between two adjacent ports. Results indicate that both ports increase the disaster prevention investment under the cooperation scenario compared with that in the case of non-cooperation wherein they are complementary ports. Meanwhile, a numerical simulation is conducted to examine the collective and individual rationality of both ports. Although cooperation strategy decreases the total risk cost of two ports, one of the two ports may profit, whereas the other may suffer losses.     

Themes and tools of maritime transport research during 2000-2014

This study examines how maritime transport has been researched through a comprehensive review of papers published in 19 transportation journals over the period 2000–2014. Systematic investigation shows that Maritime Policy & Management plays a prominent role in publishing maritime transport research. At the same time, ‘shipping’ is a dominant research area, with ‘port management, service, performance, efficiency and competitiveness’; ‘shipping market, industry, freight rate and economic impact’; and ‘terminal studies’ as the most popular topics. Nevertheless, few efforts have investigated ‘shipping finance’; ‘shipping service’; or ‘port risk and security.’ Since 2000, the use of quantitative analysis techniques has steadily increased in maritime transport to help participants make decisions scientifically. We here present the major data analysis techniques and highlight some limitations regarding their application. Thus, we provide a better understanding of how maritime transport research has been undertaken in a quantitative manner.     

Undeclared dangerous goods — Risk implications for maritime transport

Dangerous goods that have not been correctly declared when offered for transport have contributed to some serious accidents at sea. Safe handling, stowage, and segregation of packaged dangerous goods cannot be carried out if there is no knowledge of the presence of dangerous goods inside the cargo transport unit (container and/or trailer), or if the goods have been incorrectly declared. Although undeclared dangerous goods are recognized as a safety issue in the shipping industry, there is little information available on the extent of the risk involved. The study described in this paper was carried out to investigate the extent and potential consequences of the maritime transport of undeclared dangerous goods. Dangerous goods incident and inspection reports and ship casualty data were reviewed and analysed. A generic qualitative model was constructed to illustrate contributing factors and potential consequences in incidents involving undeclared dangerous goods.     

Service-oriented computing and model-driven development as enablers of port information systems: an integrated view

Port information management is considered a critical instrument towards enabling international transport and trade; thus, various forms of Port Information Systems (PORTIS) have been developed today, namely Port Community Systems, Terminal Operating Systems and Single Window systems. In Europe, the nautical information system SafeSeaNet is viewed as an important e-infrastructure. PORTIS systems are expected to evolve into next-generation technological platforms in order to offer a fully integrated digital environment to a multitude of maritime business actors and public authorities towards more efficient, safe and environment-aware transport and trade infrastructures and services. We propose service-oriented computing and model-driven development techniques as a robust PORTIS modelling and development approach. We present a reference model of PORTIS and a particular enabling methodological and technological framework. The proposed approach has been tested in a maritime single-window case.     

Hazardous material incidents: Some key results of a risk analysis

Human safety and health, environmental and property protection and security concerning hazardous materials supply chain are important issues for many countries, industries and organisations around the world. This paper presents some key results of a comprehensive risk study on hazardous materials supply chain incidents. Based on a risk analysis framework adapted for maritime transport of packaged dangerous goods, this study combines qualitative and quantitative analysis of large and diverse datasets collected from some of the U.S.’s best and largest data sources. The study may be one of the largest of its kind, and some of the results might not be found elsewhere. Incidents have occurred in every system of the hazardous materials supply chain, including platforms, all modes of transport, chemical plants, terminals and storages. The results show that more than half (52.1 %) of incidents are attributed to the transport system. The study largely considers incidents happening during maritime transport, which account for 18% of transport incidents. In absolute terms, the FN curves of maritime transport human risks are generally found to be well below the corresponding FN curves of aggregated supply chain human risks.     

人为因素对驾驶操作安全的影响评估（英文）

In recent years,marine pilotage accidents occurring on a worldwide basis as a result of human error have not been ceased to transpire,despite advances in technology and a significant set of international conventions,regulations,and recommendations to reduce them.This paper aims to investigate the effect of human factors on the safety of maritime pilotage operations.The human factors that affect the operators who are performing ships' berthing operations have also been examined in detail.In this study,in order to determine the causes of human-related errors occurred in maritime pilotage accidents,a comprehensive literature review is carried out,and a considerable number of real past case examples and an analysis of the maritime accident investigation reports regarding pilotage operations events that occurred between 1995 and 2015 have been reviewed.To validate the identified humanrelated risk factors(HCFs) and explore other contributory factors,survey questionnaires and semi-structured interviews with domain experts have been conducted.A structural hierarchy diagram for the identified risk factors(HCFs) has been developed and validated through experienced experts belonging to the maritime sector.A questionnaire for pair-wise comparison is carried out and analysed using the analytic hierarchy process(AHP) approach to evaluate the weight and rank the importance of the identified human causal factors.The findings of this study will benefit the maritime industry,by identifying a new database on causal factors that are contributing to the occurrence of maritime pilotage disasters.The database can be used as a stand-alone reference or help implement effective risk reduction strategies to reduce the human error,that might occur during pilotage operations.     

Systematic training for maritime transport managers

Providing effective training for managers in the maritime and ports sector in developing countries has proven to be a daunting task. Initial attempts by the United Nations Conference on Trade and Development (UNCTAD) in the 1970s led to the development of senior port manager residence courses in Sweden. However, Given the vast numbers of managers needing training a more eficient method was required. Using the systematic training techniques pioneered by the International Telecommunications Union, UNCTAD, in the 1980s initiated two parallel programme: Trainmer (Training development in Maritime Transport); and IPP (Improving Port Performance). Both of these programmes demonstrated considerable success in terms of the numbers of maritime and port managers receiving training opportunities. Increased cooperation amoungst international agencies providing training programmes should result in improved transport management training in the 1990s, lrading to increased efficiences in port and related transport systems.     

Old laws for new risks at sea: mineral resources, climate change, sea lanes, and cables

Maritime security in a broad sense means more than piracy and terrorism. This paper concentrates on the risk potential of current and future resource-related activities on the seabed. The seabed mining of hard mineral resources??in addition to hydrocarbons??leads to new controversial maritime boundary claims of states in their effort to expand national access rights to raw materials. Outer continental shelf claims in the Arctic Ocean are today's test bench for law of the sea conflicts. Fiber-optic cables running through regional seas, straits, and land bridges may become another risky issue, while the pattern of maritime transport routes is moving from Northern to Southern waters. Under a medium-term perspective, the sea level rise will endanger ports and coasts. Borderlines of maritime zones will move and thus generate more injustice and conflicts among states. The tools to solve borderline conflicts and options for dispute settlement are available in UNCLOS. Some other legal gaps are covered by the 2005 SUA Convention and by bilateral agreements, while resolutions by the UN Security Council begin to broaden rights of intervention and interdiction. The need for new laws remains.     

船舶油料供受作业监管中存在问题及对策

随着世界航运业的快速发展,我国海域内船舶油料供受业务的不断发展,由于船舶油料供受作业存在较大的污染风险,因此,如何加强船舶油料供受作业监管是海事管理机构必须考虑的问题。文中首先介绍了我国目前船舶油料供受作业监管的法律规定,然后分析了目前船舶油料供受作业监管中存在的主要问题,最后提出了加强船舶油料供受作业海事监管的几点策略。     

海外项目之风险管控

越来越多的国内企业走向国际市场参与全球性的竞争。国内企业在海外施工项目的成败直接影响着企业的利润、声誉甚至生存。由于国际工程存在诸多不确定因素,加之我国工程企业自身弱点,企业在参与国际工程过程中面临着各种风险。以毛塔石油码头修复工程为例,分析海外项目风险管理现状,阐述了外项目风险识别方法,并提出行之有效的风险管理策略,以期增强企业风险管理意识,提高风险识别和评估能力。     

从"亚平"轮事故谈海上安全应急信息共享机制的建立

为切实保障海洋公共交通安全,建立海上安全应急信息共享机制已经迫在眉睫。本文认为,要打破“信息孤岛”现象,建立相互依存、有机联系、实用高效的海上安全应急信息共享机制,就必须加强四个系统建设,包括建设高效的指挥系统、密切的协同系统、完备的技术系统、长效的反馈系统。同时,本文提出,要发挥海事部门在海上安全应急信息共享机制中的主导作用,切实保障海洋公共交通安全。     

海事执法责任风险评估建模研究

开展海事执法责任风险评估建模研究,对降低、规避海事执法的责任风险,确保海事执法人员全面、安全履职具有重大的理论意义和现实意义。文中通过研究借鉴其他专业领域的风险控制理论,并对以往海事执法责任案例进行归纳统计,推导出计算海事执法风险的数学模型,为海事系统识别、评估、预控各项执法风险提供数理依据。     

Risk influencing factors analysis of Arctic maritime transportation systems: a Chinese perspective

Recently, the melting of Arctic sea ice and development of maritime technology are enabling the regular voyages in Arctic waters. However, the Arctic maritime transportation system (AMTS) is a complex and dynamic system with respect to human, technical, environmental and organizational issues. For example, ships operating in Arctic waters suffer severe weather conditions, fully and partially ice-covered waters, and are also difficult to search and rescue in ice-covered Arctic waters due to remoteness from lands. These risk factors will influence the safety and security of ships operating in Arctic waters. For this, this paper identifies potential risk influencing factors (RIFs) for the AMTS from human, technical (ship), environmental and organizational aspects. An analytical hierarchy process (AHP) method is used to analyze the hierarchical relationships and calculate the relative importance of the selected RIFs. Due to the complexity and uncertainty involved in the comprehensive analysis of RIFs for the AMTS, fuzzy sets are incorporated into AHP analysis to represent and treat the epistemic uncertainty. The identified critical RIFs in this study can be used to propose specific guidance for the operations of crews on board, ship owners, and ship managers.