Research for Direction of Maritime Cybersecurity Regulatory Framework

Autonomous ships are gaining continuous attention due to their superiority in terms of efficiency, cost-effectiveness, and safety from human error. However, as autonomous navigation systems are controlled in a cyber environment, the security and accuracy of information and data are critical factors. Therefore, establishing structural safeguards that can eliminate threats such as data breaches, tampering, and forgery, which may lead to financial, social, or terror-related risks to ships and human lives, is a prerequisite for the introduction of autonomous navigation systems in the maritime industry. This study focuses on reviewing existing cybersecurity rules and regulations in the maritime sector and identifying shortcomings compared to other industries. As a result, unlike other industries with highly standardized and detailed regulations, the security maturity of shipping against cyber threats was found to be based on a fragmented regulatory framework and inadequate response procedures. In addition, the lack of uniform global regulations and the lack of cybersecurity threat information and case-sharing mechanisms were identified as problems. In this paper, a framework is developed and proposed to address these problems and strengthen cybersecurity. Through this, the study aims to contribute to the secure adoption of autonomous systems in the maritime industry by ensuring more stringent cybersecurity measures. In addition, it is expected that sustainability can be improved by regularly and continuously performing prevention and response support for cybersecurity in the shipping industry.