Introduction

The ISPS Code Cyber Security Officer Training course is designed to provide participants with the knowledge and skills they need to effectively manage cybersecurity risks in accordance with the ISPS Code. This course is targeted specifically towards those who are responsible for managing cybersecurity risks in port facilities and vessels, including cybersecurity officers and IT professionals.

Training Program Objectives

By the end of the course, participants will be able to:

• Understand the key cybersecurity threats and risks facing port facilities and vessels
• Conduct a cybersecurity risk assessment and develop a risk management plan
• Develop and implement cybersecurity policies and procedures for port facilities and vessels
• Respond to and manage cybersecurity incidents effectively
• Ensure compliance with the cybersecurity requirements of the ISPS Code
• Understand the importance of international cybersecurity cooperation and information sharing

Target Audience

This course is designed for those who are responsible for managing cybersecurity risks in port facilities and vessels in accordance with the ISPS Code, including cybersecurity officers and IT professionals.

It may also be relevant for port facility security officers (PFSOs) and other personnel involved in the security of port facilities and vessels. Participants should have a basic understanding of cybersecurity concepts and the ISPS Code.

Training Course Outlines

day 1: Introduction to Cybersecurity and the ISPS Code

• Overview of cybersecurity threats in the maritime industry
• The role of the ISPS Code in managing cybersecurity risks

day 2: Cybersecurity Risk Assessment and Management

• Identifying cyber risks in port facilities and vessels
• Conducting a cybersecurity risk assessment
• Developing a cybersecurity risk management plan

day 3: Cybersecurity Policies and Procedures

• Developing cybersecurity policies and procedures for port facilities and vessels
• Implementing cybersecurity controls and monitoring

day 4: Incident Management and Response

• Preparing for a cybersecurity incident
• Responding to a cybersecurity incident
• Conducting a cybersecurity incident investigation

day 5: Compliance with the ISPS Code

• Understanding the cybersecurity requirements of the ISPS Code
• Developing a cybersecurity plan to comply with the ISPS Code
• Conducting internal and external audits for compliance

day 6: International Cybersecurity Cooperation and Information Sharing

• International cybersecurity initiatives and organizations
• Sharing cybersecurity information with stakeholders and authorities

• Review of course materials and concepts