CyberPrism Guard for Vessel Cyber Security

Sectors

Commercial Shipping

Cyber security capability onboard is limited. Shipping companies need a technical cyber security solution that segregates a vessel from cyber-attacks and other forms of intrusion without constant reference to the crew.
Actions in the event of an alert must be automatic in many cases - this will not just be a monitoring tool.
The crew interface must be both intuitive and bespoke to the user, allowing key personnel to understand what is going on and to take control at appropriate times.
Reach-back must be facilitated so that a higher level of expertise can be applied when needed.
The ability to control internal access to IP addresses and bandwidth, and to segregate key systems within the ship, is highly desirable.
The solution must support the IMO 2021 guidance and IEC 62443.

CyberPrism Guard unit is a next generation segregation device and Unified Threat Manager (UTM).
In this use case, it is connected between the vessel’s primary communications router and the network switches, where it conducts deep packet inspection of data entering and leaving the vessel, alerting and/or blocking traffic if it discovers anything potentially harmful.
The Captain also has the option to control bandwidth allocation and access to IP addresses by internal users through its traffic shaping capability.
Guard can act as the single point of access for third parties such as maintenance engineers by controlling connectivity through the switches.
Guard can segregate networks within the vessel – for instance protecting Operational Technology using our proprietary software which allows it to operate safely with OT.
Legacy devices which no longer have an effective patch solution can also be protected.
A range of intuitive dashboards are supplied so that key personnel receive exactly the information they need.

Operational Services

Next Generation UTM/Firewall – including customised firewall functionality for the OT domain
Application network management
Traffic shaping
Web and content filtering
Network access control
Remote access control
Fully customisable dashboards

Optional Services

Training: CyberPrism Guard - specific plus cyber training for key personnel and crew
Intrusion detection and protection
Legacy device protection
Network monitoring and alerts
Incident response services
Forensic data capture
Passive IT/OT asset discovery

Operational

Vessels are protected without the need for onboard technical presence
Malware can be prevented from entering the ship rather than alerted after entry
Cyber security controls are intuitive for the crew, which can take action to the limit of its ability
OT is protected by a system that genuinely understands it
CyberPrism’s service supplies a very high level of cyber security expertise
Additional capabilities can be hosted on a single platform

Financial