Maritime Cyber Defence and Digital Resilience Masterclass

Maritime Cyber Defence and Digital Resilience Masterclass

Master Precise Meeting Documentation and Strategic Report Writing for Professional Impact

|
Platform:
Online
In-class
Revised and Updated: 23 October 2026
Date Venue Duration
09 - 20 November 2026 Cape Town, Western Cape 10 Days
08 - 19 February 2027 East London, Eastern Cape 10 Days
10 - 21 May 2027 Live/Online 10 Days
05 - 16 July 2027 Sandton, Gauteng 10 Days
30 August - 10 September 2027 Sandton, Gauteng 10 Days

Course Introduction

Ships and ports now depend on connected systems for navigation, propulsion, cargo handling, communications, and operations. That brings efficiency, but it also exposes safety-critical operational technology (OT) and business systems to cyber attack. Cyber incidents have stopped container terminals, disrupted global shipping lines, and forced ships to navigate with misleading satellite positions. Regulators, flag states, classification societies, insurers, and charterers now expect shipping companies to manage cyber risk as part of safe operation. 

 

This ten-day masterclass is for maritime IT professionals, vessel operators, port security managers, shipping executives, and compliance and legal leaders who need to protect digital operations, vessel control systems, and sensitive data. It takes a sector-specific approach, going beyond general IT security to the realities of ships and ports: legacy equipment, limited connectivity, remote vendors, crew turnover, and the safety consequences of failure. 

Through interactive sessions, hands-on exercises, and real case studies, participants learn to assess cyber risk, apply and manage security controls, meet regulatory and industry requirements, prepare and test incident response, protect data and the supply chain, and build a cyber-aware workforce and a lasting resilience programme. 

 

Participants receive a Prospen Africa certificate of completion. Exercises are defensive and take place in controlled, simulated environments. Regulation and threats in this field change quickly, so examples are updated to current positions at delivery. Legal content is general guidance and is not legal advice. 

Course Objectives

By the end of this masterclass, participants will be able to: 

  • Analyse the cyber threats and vulnerabilities that are specific to the maritime industry, and their safety, operational, and financial consequences 
  • Carry out maritime cyber risk assessments for both vessels and shore-based facilities 
  • Apply and manage OT cyber security controls on board ships, including for legacy systems 
  • Select and apply technical, physical, and administrative controls for vessels and ports 
  • Protect navigation, propulsion, and communication systems against cyber attack, spoofing, and jamming 
  • Meet maritime cyber security requirements, including those of the IMO, classification societies, flag and port states, and recognised frameworks and industry guidelines 
  • Develop, test, and improve incident response plans suited to maritime conditions 
  • Build data protection and privacy practice into shipping operations, in line with POPIA, GDPR, and similar laws 
  • Secure the maritime supply chain and manage third-party cyber risk 
  • Manage the risks of converged IT and OT environments, including remote vendor access 
  • Build a cyber-aware culture and reduce human error 
  • Lead the development and continuous improvement of a maritime cyber resilience programme 

Who should attend?

  • Maritime IT Managers and Professionals 
  • Cyber Security and OT Engineers 
  • Ship and Shore-Based Operations Personnel 
  • Vessel Masters and Bridge Officers 
  • Port and Port Facility Security Officers (PFSOs) 
  • Shipping Company Executives and Owners 
  • Maritime Compliance, Risk, and Legal Professionals 
  • Marine Engineers and Technicians 
Environmental, Social and Governance (ESG) Training

Training Methodology

Our diverse instructional approaches ensure effective learning:

– Lectures & Presentations: Engage with expert-driven, stimulating content.
– Course Material: Access well-crafted supporting resources.
– Group Work: Collaborate on discussions and case studies for practical insights.
– Workshops & Role-Play: Participate in immersive, scenario-based activities.
– Practical Application: Focus on applying theoretical knowledge in real situations.
– Post-Training Support: Receive extensive support after training for skill implementation.

Training Outline

10-Day Advanced Programme Outline

Day 1 — The Maritime Cyber Threat Landscape
Module 1: The Maritime Cyber Threat Landscape
  • Mapping the attack surfaces of vessels and ports: bridge and engine systems, cargo and terminal systems, satellite links, crew devices, and shore-side business systems
  • Key cyber threats: ransomware, malware, phishing, insider attacks, and interference with satellite navigation (jamming and spoofing)
  • Consequences: safety, operational, financial, legal, and reputational impact
  • The IT/OT convergence challenge
  • Case studies of real maritime cyber incidents, such as the NotPetya attack on a global shipping line in 2017 and the 2021 attack that disrupted South African container terminals; examples refreshed at delivery
  • Practical Exercise: map the attack surfaces of a sample vessel and port, and rank the most serious threats

Day 2 — Maritime Cyber Risk Assessment and Governance
Module 2: Maritime Cyber Risk Assessment and Governance
  • Step-by-step risk assessment methods, drawing on the IMO guidelines on maritime cyber risk management, the NIST Cybersecurity Framework (version 2.0), and ISO/IEC 27001 and 27005
  • Identifying critical maritime assets, dependencies, and vulnerabilities
  • Building a dynamic cyber risk register and defining risk appetite
  • Integrating cyber security into the Safety Management System (SMS) under the ISM Code
  • Governance and accountability: board responsibility, roles on board and ashore, and reporting
  • Practical Exercise: build a cyber risk register for a sample vessel and rate its top ten risks

Day 3 — Operational Technology (OT) Security for Vessels
Module 3: Operational Technology (OT) Security for Vessels
  • The OT landscape: ECDIS, GMDSS, propulsion and machinery control, ballast and cargo systems, and more
  • Overcoming challenges with legacy systems and proprietary technology
  • Network segmentation and secure OT architectures; the IEC 62443 series for industrial control system security
  • OT patching, vulnerability management, asset inventory, and control of removable media and maintenance laptops
  • Class requirements for new ships: IACS UR E26 and E27 on cyber resilience of ships and of onboard systems and equipment, for ships contracted from 1 July 2024
  • Case-based OT breach response
  • Practical Exercise: design a segmented network for a sample vessel and decide how its legacy systems will be protected and patched

Day 4 — Cyber Security Controls and Countermeasures
Module 4: Cyber Security Controls and Countermeasures
  • Firewalls, intrusion detection and prevention, and endpoint protection, with their limits in low-bandwidth shipboard conditions
  • Access management for shipboard and shore systems: strong authentication, least privilege, and control of shared and privileged accounts
  • Data encryption, secure protocols, and secure remote access
  • Backup and recovery, including offline and tested backups
  • Physical and environmental security considerations; logging and monitoring
  • Practical Exercise: select and justify a set of controls within a limited budget for a sample fleet

Day 5 — Navigation and Communication System Protection
Module 5: Navigation and Communication System Protection
  • Securing ECDIS (including update media and software), GNSS, AIS, and satellite communications
  • Vulnerabilities in bridge and navigation systems
  • Protection against spoofing, jamming, and cyber intrusion: detecting interference, backup positioning, cross-checking, and reporting
  • Best practice for secure bridge operations and bridge team procedures
  • Securing satellite terminals and ship-to-shore links
  • Practical Exercise: run a bridge scenario in which satellite positions become unreliable, and agree the team's response

Day 6 — Maritime Cyber Security Regulations and Guidelines
Module 6: Maritime Cyber Security Regulations and Guidelines
  • IMO requirements: resolution MSC.428(98), which requires cyber risk to be addressed in safety management systems, and the IMO guidelines on maritime cyber risk management
  • Industry guidance: the BIMCO-led Guidelines on Cyber Security Onboard Ships; links to NIST and ISO/IEC standards
  • How cyber risk fits into ship and port facility security assessments and plans under the ISPS Code (confirm current detail)
  • Flag state, port state, and classification society requirements; the United States Coast Guard cyber security rule, in effect from 16 July 2025, for US-flagged vessels and regulated facilities, and EU network and information security rules (confirm current detail)
  • National and regional trends, including South African law: the Cybercrimes Act and POPIA (confirm current detail)
  • Compliance strategies, evidence, and audit readiness
  • Practical Exercise: prepare an audit-readiness checklist for a sample ship and shipping company

Day 7 — Incident Response and Digital Forensics
Module 7: Incident Response and Digital Forensics
  • Crafting a vessel-ready cyber incident response plan, with playbooks for ransomware, loss of navigation data, and compromised remote access
  • Building and training incident response teams, and defining ship and shore roles
  • Detection, containment, eradication, and recovery
  • Digital forensics: evidence collection and preservation, investigation, and reporting
  • Managing communications and stakeholder expectations in a crisis, including notifications to regulators, flag state, insurers, and charterers; decisions on ransom demands and their legal and sanctions implications
  • Practical Exercise: run a ransomware tabletop exercise on a sample shipping company and write the first-hour response log

Day 8 — Data Protection and Privacy, and the Maritime Supply Chain
Module 8: Data Protection and Privacy in Shipping
  • Classification and protection of sensitive maritime data, including crew, passenger, cargo, and commercial data
  • GDPR, POPIA, and other privacy frameworks in the maritime context; cross-border transfers and breach notification
  • Data handling, retention, encryption, and anonymisation
  • Intellectual property and trade secret protection
  • Practical Exercise: classify a sample shipping data set and set handling, retention, and breach notification rules for it
Module 9: Securing the Maritime Supply Chain
  • Third-party and vendor risk management
  • Assessing and reducing risks from logistics partners, software providers, and equipment manufacturers
  • Contractual cyber security clauses and supply chain collaboration
  • Software updates, vendor access, and software component transparency
  • Practical Exercise: draft cyber security clauses for a contract with a navigation system supplier

Day 9 — IT/OT Convergence, and Human Factors and Cyber Culture
Module 10: IT/OT Convergence — Risks and Management
  • Secure IT/OT integration strategies
  • Policy development for converged environments
  • Managing remote vendor access and support
  • A holistic security architecture for integrated operations
  • Practical Exercise: review a sample remote support arrangement and design safer access rules
Module 11: Human Factors and Cyber Security Culture
  • Understanding human error and insider risk
  • Designing effective crew and staff cyber security training, built into drills and the SMS
  • Simulated phishing and social engineering resilience, run with proper authorisation and care for staff
  • Building a culture of cyber vigilance at sea and ashore, including crew connectivity and personal devices
  • Practical Exercise: design a crew training and drill plan for a vessel with a high crew turnover

Day 10 — Future Trends and Building Sustainable Cyber Resilience
Module 12: Future Trends and Emerging Threats in Maritime Cyber Security
  • Autonomous vessels, remote operations, and new attack surfaces; the cyber provisions of the IMO MASS Code (adopted May 2026)
  • Artificial intelligence and machine learning: defensive use, and AI-enabled attacks
  • Quantum computing and the move to quantum-resistant encryption
  • Blockchain and digital twins; new connectivity such as low-orbit satellite links
  • Keeping pace with evolving cyber threats
  • Practical Exercise: assess the cyber risk of introducing a new remote monitoring service on a sample fleet
Module 13: Building and Sustaining Maritime Cyber Resilience
  • Developing a continuous improvement and audit programme; metrics and board reporting
  • Regular security assessments and penetration testing, with attention to safety when testing OT
  • Industry benchmarking and sharing threat intelligence
  • Insurance, risk transfer, and business continuity planning, including cyber insurance cover and exclusions
  • Review of key learning outcomes and a resilience roadmap
  • Practical Exercise: present a 12-month cyber resilience roadmap for your organisation, with priorities, resources, and measures of success

The course instructor may adjust the programme for technical reasons, but the course objectives will always be met. The thirteen modules are spread over ten days.

Course Categories

Get a Quote Banner Outline

Request a Call Back

Your submission has been successful

Please check your email for confirmation

Success Stories

Discover how our courses enhance professionals’ effectiveness in their workplaces.

No reviews found. Add reviews from the dashboard or switch source to Manual.

FAQs – Maritime Cyber Defence and Digital Resilience Masterclass

Master maritime cyber defence and digital resilience, learning cybersecurity fundamentals, threat detection, risk assessment, vessel and port system protection, incident response, data security, and strategies for safeguarding critical maritime operations against evolving cyber threats.

What topics are covered in the Maritime Cyber Defence and Digital Resilience Masterclass?
The masterclass covers maritime Operational Technology (OT) and Information Technology (IT) security, vessel electronic navigation safety (GPS/AIS spoofing defense), offshore and port cyber threat vectors, incident response planning, IMO cyber risk management compliance, and maritime digital supply chain resilience.
Who should attend the Maritime Cyber Defence and Digital Resilience Masterclass?
This training is designed for Chief Information Security Officers (CISOs), maritime IT/OT security engineers, port authority security managers, vessel superintendents, marine operations directors, compliance officers, and naval defence personnel responsible for securing maritime infrastructure.
What skills will delegates develop through the Maritime Cyber Defence and Digital Resilience Masterclass?
Delegates gain practical skills in auditing vessel and port OT networks, identifying maritime cyber vulnerabilities, formulating IMO-aligned Cyber Risk Management plans, responding to shipboard ransomware or GPS spoofing incidents, and building cyber-resilient maritime operations.
How long does the Maritime Cyber Defence and Digital Resilience Masterclass take to complete?
The course is delivered as an intensive short-course executive programme, with the exact duration determined by the scheduled masterclass timetable and client organizational requirements.
Does this course align with International Maritime Organization (IMO) cyber security mandates?
Yes. The curriculum directly incorporates IMO Resolution MSC.428(98) guidelines, ISM Code cyber risk management requirements, ISO/IEC 27001, and BIMCO cyber security standards for ships and port facilities.
Can Prospen Africa deliver the Maritime Cyber Defence and Digital Resilience Masterclass in-house?
Yes. Prospen Africa can deliver this masterclass on-site or in-house, tailoring incident response scenarios, vulnerability assessments, and compliance audits around your organization's specific fleet, port facilities, or maritime IT/OT architecture.

Related Courses

Your submission has been successful

Please check your email for confirmation