A model of factors influencing deck officers’ cyber risk perception in offshore operations

Larsen, Marie Haugli; Lund, Mass Soldal; Bjørneseth, Frøy Birte

doi:10.1016/j.martra.2022.100065

Cited by 5 publications

(1 citation statement)

References 35 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…An individual's psychological reactions or fears (arising from uncertainty) determine the ability to assess risks and prevent future attacks. Larsen et al in [33] highlight that cyber incidents are often caused by complex relationships between humans and technology; humans can represent both a risk of cybersecurity threat and an important resource in strengthening cybersecurity. In general, the behaviour of the decision-makers plays a key role in preventing and handling cyber risks [34].…”

Section: Introductionmentioning

confidence: 99%

Application of Structural Equation Modelling to Cybersecurity Risk Analysis in the Era of Industry 4.0

Gombár,

Vagaská,

Korauš

et al. 2024

Mathematics

View full text Add to dashboard Cite

In the current digital transformation to Industry 4.0, the demands on the ability of countries to react responsibly and effectively to threats in the field of cyber security (CS) are increasing. Cyber safety is one of the pillars and concepts of Industry 4.0, as digitization brings convergence and integration of information technologies (IT) and operational technologies (OT), IT/OT systems, and data. Collecting and connecting a large amount of data in smart factories and cities poses risks, in a broader context for the entire state. The authors focus attention on the issue of CS, where, despite all digitization, the human factor plays a key role—an actor of risk as well as strengthening the sustainability and resilience of CS. It is obvious that in accordance with how the individuals (decision-makers) perceive the risk, thus they subsequently evaluate the situation and countermeasures. Perceiving cyber threats/risks in their complexity as a part of hybrid threats (HT) helps decision-makers prevent and manage them. Due to the growing trend of HT, the need for research focused on the perception of threats by individuals and companies is increasing. Moreover, the literature review points out a lack of methodology and evaluation strategy. This study presents the results of the research aimed at the mathematical modelling of risk perception of threats to the state and industry through the disruption of CS. The authors provide the developed factor model of cyber security (FMCS), i.e., the model of CS threat risk perception. When creating the FMCS, the researchers applied SEM (structural equation modelling) and confirmatory factor analysis to the data obtained by the implementation of the research tool (a questionnaire designed by the authors). The pillars and sub-pillars of CS defined within the questionnaire enable quantification in the perception of the level of risk of CS as well as differentiation and comparison between the analyzed groups of respondents (students of considered universities in SK and CZ). The convergent and discriminant validity of the research instrument is verified, and its reliability is confirmed (Cronbach’s alpha = 0.95047). The influence of the individual pillars is demonstrated as significant at the significance level of α = 5%. For the entire research set N = 964, the highest share of risk perception of CS threats is achieved by the DISRIT pillar (disruption or reduction of the resistance of IT infrastructure).

show abstract

Section: Introductionmentioning

confidence: 99%

Application of Structural Equation Modelling to Cybersecurity Risk Analysis in the Era of Industry 4.0

Gombár,

Vagaská,

Korauš

et al. 2024

Mathematics

View full text Add to dashboard Cite

show abstract

Maritime decision-makers and cyber security: deck officers’ perception of cyber risks towards IT and OT systems

Haugli-Sandvik,

Lund,

Bjørneseth

2024

Int. J. Inf. Secur.

View full text Add to dashboard Cite

Through a quantitative study of deck officers’ cyber risk perceptions towards information (IT) and operational (OT) systems, this paper contributes to substantiate the importance of considering human behaviour within maritime cyber security. Using survey data from 293 deck officers working on offshore vessels, statistical analyses were conducted to measure and predict the participants cyber risk perceptions towards IT and OT systems. Performing a Wilcoxon signed-rank test revealed a significant discrepancy in the levels of cyber risk perception between the system categories. Hierarchical regression analyses were conducted to develop statistical models, considering multiple independent variables, including perceived benefit, cyber security training, experience with cyber-attacks, and trust towards various stakeholders. Key findings revealed distinct results for IT and OT systems, and the regression models varied in both predictive power and significance of the independent variables. Perceived benefit positively predicts deck officers cyber risk perception for both IT and OT systems, while trust, which included measures of social trust and confidence, was not found to be significant. Cyber security training and experience with cyber-attacks only influence deck officers’ perception of cyber risks related to operational technology. Practical implications of this work provide actionable recommendations for the maritime industry, including tailored risk communication tools, training programs, reporting systems, and holistic policies.

show abstract

A human-centred design approach for the development and conducting of maritime cyber resilience training

Erstad

Hopcraft

Harish

et al. 2023

WMU J Marit Affairs

View full text Add to dashboard Cite

Due to the increase in the digitalization on board ships, the potential consequences of a cyber-induced incident can threaten the safety of the ships. A known challenge in the maritime industry is communication between ship owner management onshore and the crew on board a ship, especially during incident handling. To mitigate this issue and enhance cooperation in the digital age, crew and ship owner management need to meet, train for, and discuss cyber risks and their challenges. One way to enhance cohesive teams and effective communication is through the application of a human-centred design (HCD) approach to holistic team training. This paper proposes how simulator instructors should utilise HCD for the development of maritime cyber resilience training, tailored to a variety of maritime stakeholders including ship’s crew and onshore support personnel. To do this, this paper will explore relevant learning theories and current maritime and cyber-related training methods. The paper will then demonstrate, through a practical application, the effectiveness of adopting HCD when designing maritime cyber resilience training. This application will argue that maritime simulators present an effective training solution for new cyber-related incidents. The authors demonstrate the application of HCD by showcasing a ballast water handling system cyber incident designed for the simulator. The development of such a training resource allows all participants to experience the consequences of a cyber-attack in a safe environment whilst enhancing their ability to respond (i.e. communicate with each other) effectively.

show abstract

A model of factors influencing deck officers’ cyber risk perception in offshore operations

Cited by 5 publications

References 35 publications

Application of Structural Equation Modelling to Cybersecurity Risk Analysis in the Era of Industry 4.0

Application of Structural Equation Modelling to Cybersecurity Risk Analysis in the Era of Industry 4.0

Maritime decision-makers and cyber security: deck officers’ perception of cyber risks towards IT and OT systems

A human-centred design approach for the development and conducting of maritime cyber resilience training

Contact Info

Product

Resources

About