Seaports Magazine - Summer 2017 - 24

against the National Institute of Standards
and Technology (NIST), Risk Management
Framework (RMF). Stephanie Gonzales, ‎a
director of security solutions sales & capture
at KBRwyle, said that true security is not
found in a piece of hardware or software
alone. "We provide a holistic security solution
that addresses cyber and physical security
threats. We provide vulnerability assessments and penetration testing for SCADA (a
control system architecture) and IT systems."
Beyond the actual regulations requiring facilities (and also vessels) to maintain
security plans, the Coast Guard continues to
provide recommendations on matters related
to security. In November 2016, the agency
issued a voluntary "Cybersecurity Profile"
for facilities engaged in maritime transfers
of bulk liquids, including oil and natural
gas. As explained by the Coast Guard on its
Maritime Commons blog, "The Profile pulls
into one document the recommended cybersecurity safeguards and provides a starting
point to review and adapt risk management
processes. It outlines a desired minimum
state of cybersecurity and provides the opportunity to plan for future business decisions."
In December 2016, the agency issued a Policy

24859586_Hoist.indd
AAPA SEAPORTS
MAGAZINE
1

"At these facilities,
anybody - even
delivery truck drivers
- needs to have a valid
TWIC card with the
biometric indicator."
-Jim Strey,
President/CEO, idSoftware
Letter advising both U.S. terminal and vessel
operators (who have filed Facility or Vessel
Security Plans, FSPs and VSPs, respectively)
to report suspicious cyber activity and actual
breaches of cyber security directed specifically at maritime systems to the National
Response Center - a hotline used since the
early 1990s for notifying the government
about oil and chemical spills. The letter can
be accessed at: http://bit.ly/USCGhomeport
Going forward, the Coast Guard is on a
path toward issuing guidance, in the form a
Navigation and Vessel Inspection Circular
(NAVIC), on cyber security. The NAVIC,
which will not create new laws, will provide

terminals and other sites that file FSPs with
guidelines on the best ways to include cyber
risk management when these plans are
revised. One challenge here is that the cyber
aspect may not have been considered at the
time of their installation for systems put in
place to comply with earlier guidelines and
actual rules. So, in essence, the new NAVIC
will create a path for FSP holders to catch
up. Danos said that the plans for the NAVIC
are in progress, though she was uncertain of
exactly when they'd be released.
On an organizational basis, a useful viewpoint comes from a high-level cyber security session, which took place at the recent
Seatrade Cruise Global conference, held at
Port Everglades, Fla., in mid-March 2017.
One panel member, a DHS veteran, talked
about making thinking about cyber matters in the age of inter-connectedness as a
"horizontal" (organization-wide, and then
externally to vendors and partners) activity,
rather than as a "vertical" activity (architected around separate silos for "operations,"
"finance" and "IT"). Though this presentation was aimed at operators of vessels, the
same advice, adjusted for each organizational
schematic, would certainly apply to ports.  ●

04/03/17 12:09 AM


http://www.bit.ly/USCGhomeport http://www.HOISTLIFT.com http://www.HOISTLIFT.com

Table of Contents for the Digital Edition of Seaports Magazine - Summer 2017

AAPA Headquarters
From the President’s Desk
Stakeholders: A Seaport’s Secret Resource
Why Ports Need Allies: Maintaining a Working Waterfront Takes a Network of Supporters
The Next Generation of Leaders — Succession Planning Provides Security, Guidance for Future
Port Security — An Exercise in Partnerships
Lessons From the Past: A Renewed Commentary on Port Security
Cyber Security: What Port Authorities Need to Know
Tomorrow’s Leaders Need More Than On-the-Job Training
Index of Advertisers
Seaports Magazine - Summer 2017 - Intro
Seaports Magazine - Summer 2017 - bellyband1
Seaports Magazine - Summer 2017 - bellyband2
Seaports Magazine - Summer 2017 - cover1
Seaports Magazine - Summer 2017 - cover2
Seaports Magazine - Summer 2017 - 3
Seaports Magazine - Summer 2017 - 4
Seaports Magazine - Summer 2017 - 5
Seaports Magazine - Summer 2017 - AAPA Headquarters
Seaports Magazine - Summer 2017 - 7
Seaports Magazine - Summer 2017 - From the President’s Desk
Seaports Magazine - Summer 2017 - 9
Seaports Magazine - Summer 2017 - Stakeholders: A Seaport’s Secret Resource
Seaports Magazine - Summer 2017 - 11
Seaports Magazine - Summer 2017 - 12
Seaports Magazine - Summer 2017 - 13
Seaports Magazine - Summer 2017 - Why Ports Need Allies: Maintaining a Working Waterfront Takes a Network of Supporters
Seaports Magazine - Summer 2017 - 15
Seaports Magazine - Summer 2017 - 16
Seaports Magazine - Summer 2017 - 17
Seaports Magazine - Summer 2017 - The Next Generation of Leaders — Succession Planning Provides Security, Guidance for Future
Seaports Magazine - Summer 2017 - 19
Seaports Magazine - Summer 2017 - 20
Seaports Magazine - Summer 2017 - 21
Seaports Magazine - Summer 2017 - Port Security — An Exercise in Partnerships
Seaports Magazine - Summer 2017 - 23
Seaports Magazine - Summer 2017 - 24
Seaports Magazine - Summer 2017 - 25
Seaports Magazine - Summer 2017 - Lessons From the Past: A Renewed Commentary on Port Security
Seaports Magazine - Summer 2017 - 27
Seaports Magazine - Summer 2017 - Cyber Security: What Port Authorities Need to Know
Seaports Magazine - Summer 2017 - 29
Seaports Magazine - Summer 2017 - 30
Seaports Magazine - Summer 2017 - 31
Seaports Magazine - Summer 2017 - Tomorrow’s Leaders Need More Than On-the-Job Training
Seaports Magazine - Summer 2017 - 33
Seaports Magazine - Summer 2017 - Index of Advertisers
Seaports Magazine - Summer 2017 - cover3
Seaports Magazine - Summer 2017 - cover4
Seaports Magazine - Summer 2017 - divider1
Seaports Magazine - Summer 2017 - divider2
Seaports Magazine - Summer 2017 - 41
Seaports Magazine - Summer 2017 - 42
Seaports Magazine - Summer 2017 - 43
Seaports Magazine - Summer 2017 - 44
Seaports Magazine - Summer 2017 - 45
Seaports Magazine - Summer 2017 - 46
Seaports Magazine - Summer 2017 - outsert1
Seaports Magazine - Summer 2017 - outsert2
http://www.nxtbook.com/naylor/AAPQ/AAPQ0118
http://www.nxtbook.com/naylor/AAPQ/AAPQ0417
http://www.nxtbook.com/naylor/AAPQ/AAPQ0317
http://www.nxtbook.com/naylor/AAPQ/AAPQ0217
http://www.nxtbook.com/naylor/AAPQ/AAPQ0117
http://www.nxtbook.com/naylor/AAPQ/AAPQ0416
http://www.nxtbook.com/naylor/AAPQ/AAPQ0316
http://www.nxtbook.com/naylor/AAPQ/AAPQ0216
http://www.nxtbook.com/naylor/AAPQ/AAPQ0116
http://www.nxtbook.com/naylor/AAPQ/AAPQ0415
http://www.nxtbook.com/naylor/AAPQ/AAPQ0315
http://www.nxtbook.com/naylor/AAPQ/AAPQ0215
http://www.nxtbook.com/naylor/AAPQ/AAPQ0115
http://www.nxtbook.com/naylor/AAPQ/AAPQ0414
http://www.nxtbook.com/naylor/AAPQ/AAPQ0314
http://www.nxtbook.com/naylor/AAPQ/AAPQ0214
http://www.nxtbook.com/naylor/AAPQ/AAPQ0114
http://www.nxtbook.com/naylor/AAPQ/AAPQ0413
http://www.nxtbook.com/naylor/AAPQ/AAPQ0313
http://www.nxtbook.com/naylor/AAPQ/AAPQ0213
http://www.nxtbook.com/naylor/AAPQ/AAPQ0113
http://www.nxtbookMEDIA.com