Maritime Transportation System Information Sharing And Analysis C

THE CORPORATION PROMOTES AND FACILITATES MARITIME CYBERSECURITY INFORMATION SHARING, AWARENESS, TRAINING, EXERCISE, AND COLLABORATION EFFORTS BETWEEN PRIVATE AND PUBLIC SECTOR STAKEHOLDERS TO EFFECTIVELY IMPROVE CYBER RISK MANAGEMENT ACROSS THE ENTIRE MTS COMMUNITY.

THE MTS-ISAC PROVIDED MARITIME CYBER THREAT INFORMATION TO PERSONNEL IN OVER 150 ORGANIZATIONS, WITH INFORMATION SOMETIMES GOING TO DOZENS OF INDIVIDUALS WITHIN AN ORGANIZATION. THESE ORGANIZATIONS INCLUDED PRIVATE INDUSTRY CRITICAL INFRASTRUCTURE STAKEHOLDERS AS WELL AS FEDERAL AGENCY ORGANIZATIONS (WHICH PROVIDED NO RESOURCES OR FUNDING TO THE MTS-ISAC IN 2021). THE INFORMATION PROVIDED TO THESE ORGANIZATIONS WAS TIMELY AND INCLUDED IN WHOLE OR IN PART (DEPENDING ON THEIR PARTICIPATION WITH THE MTS-ISAC) ACCESS TO: 89 CYBERSECURITY ADVISORIES, 753 INDICATOR BULLETINS, MORE THAN 12 WEBINARS, AND MULTIPLE OPEN CALLS TO DISCUSS CYBERSECURITY. THIS WORK WAS ACCOMPLISHED AS THE MTS-ISAC RESPONDED TO OVER 80 REQUESTS FOR INFORMATION AND ANALYZED 1,452 THREAT INFORMATION SHARES (WITH ONE SHARE SOMETIMES CONTAINING DOZENS OF ATTACHMENTS AND HUNDREDS OF DATA POINTS NEEDING REVIEW). THE OUTCOMES OF THIS WORK PROVIDED THE FOLLOWING RESULTS TO MARITIME CRITICAL INFRASTRUCTURE STAKEHOLDERS: EARLY WARNING OF CYBER THREAT ACTIVITY, INCLUDING PHISHING, CREDENTIAL STUFFING, SCANNING, VULNERABILITY EXPLOITATIONS, AND OTHER ATTACK BEHAVIORS; AND CYBERSECURITY BEST PRACTICES THAT COULD BE APPLIED TO COUNTER THOSE ATTACKS.

MISCELLANEOUS SUPPORT SERVICES

THE MTS-ISAC SUPPORTED THREE CYBERSECURITY TABLETOP EXERCISES THAT WERE EITHER FACILITATED BY THE MTS-ISAC OR FACILITATED BY THIRD PARTIES, INCLUDING GOVERNMENT AGENCIES, THAT INVOLVED MTS-ISAC STAKEHOLDERS. THE MTS-ISAC STRIVED TO PROVIDE REALISTIC SCENARIO INPUTS THAT WERE BASED ON GENERICIZED TYPES OF ATTACKS THAT THE MTS-ISAC IS AWARE OF OCCURRING THAT TARGETED THE MARITIME SECTOR. THESE EXERCISES RESULTED IN ORGANIZATIONS BEING ABLE TO TEST THEIR PREPAREDNESS FOR CYBER-ATTACKS AND IDENTIFY AREAS WHERE THEIR CYBERSECURITY PROGRAMS COULD BE STRENGTHENED IF A GAP OR WEAKNESS WAS IDENTIFIED. THIS RESULTS IN MORE SECURE AND RESILIENT MARITIME TRANSPORTATION SYSTEM STAKEHOLDERS WHICH IN TURN SUPPORTS MORE SECURE AND RESILIENT SUPPLY CHAINS.

THE MTS-ISAC ORGANIZED THE ANNUAL MARITIME CYBERSECURITY SUMMIT. THE SUMMIT CONSISTED OF TWO DAYS OF KEYNOTES, DISCUSSIONS, AND PRESENTATIONS ON BOTH TECHNICAL AND NON-TECHNICAL MARITIME CYBERSECURITY CHALLENGES AND A THIRD DAY DEDICATED TO MARITIME CYBERSECURITY PRACTITIONER TRAINING. WITH OVER 100 REGISTRANTS FROM OVER 50 ORGANIZATIONS, THE SUMMIT BROUGHT TOGETHER PUBLIC AND PRIVATE SECTOR STAKEHOLDERS FOR THESE IMPORTANT DISCUSSIONS. IN ADDITION TO DISCUSSING THE CHALLENGES, INFORMATION WAS PRESENTED ON BEST PRACTICES, UPDATED CYBERSECURITY STRATEGIES, USE CASES, AND LESSONS LEARNED. THE SUMMIT RESULTED IN GREATER UNDERSTANDING OF HOW TO APPROACH CYBERSECURITY CHALLENGES IN THE MARITIME SECTOR AND HELPED ATTENDEES CREATE NEW PEER RELATIONSHIPS THAT PREVIOUSLY DID NOT EXIST. THE SUMMIT DIRECTLY SUPPORTS THE MTS-ISAC'S MISSION OF IMPROVING CYBER RESILIENCY OF THE MARITIME SECTOR.