Cyber risks in shipping are as real and present as ever. The risk of having your full operations brought to a standstill is genuine. The risk of having your ships rendered inoperative, or ineffective, is genuine.
Our experience from Improsec is that if you have never had your systems properly tested against a cyber-attack, you are unlikely to have a good overview of your actual vulnerabilities. However, our experience is also that many of the vulnerabilities can be alleviated if a proper plan is drawn up based on the actual vulnerabilities found, whereas a plan made only on the basis of assumptions is likely to miss the mark.