Running Head: IT 659 ac ac ac ac ac a ac ac ac ac a ac ac ac ac ac ac ac ac ac ac ac ac ac ac a ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac a ac ac ac ac
ac ac ac ac ac ac ac ac ac ac ac ac a ac ac ac ac ac ac ac ac ac ac ac ac ac ac a ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac 1
IT-659-Q1436: Assignment 7-2
IT 659 ac ac ac ac ac ac ac a ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac a ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac a ac ac ac ac ac ac ac ac
ac ac ac ac ac ac ac ac ac ac ac ac a ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac a ac ac ac ac ac 2
Recommendations and Global Considerations
The Notpetya cyberattack affected Maersk business as well as the entire
shipping industry. Here the main recommendations have been done that could have
helped the firm to prevent the incident. Similarly, the global implication of the cyber
incident has been captured to understand how it has affected the global business
setting.
Recommendations
Relevant changes for preventing the cyber attack
Maersk could have prevented the cyber-attack that crippled its shipping
business activities by upgrading the technological infrastructure. The business concern
was considered to have a decent level of protection on the cyber platform as
compared to the other shipping firms with weak security model. In spite of this, its
vulnerabilities were exposed (Lennane, 2018). The dissemination of the attack across
different business units of Maersk indicates that the firm’s level of cybersecurity was
not good enough.
The Blockchain technology could have played a key role and saved the
shipping concern from the Notpetya cyber-attack. The incident could have been
averted if it had shifted from the obsolete electronic data interchange (EDI) to the
‘blockchain-enabled’ technology. According to Antony Abell, the managing director of
TrustMe, such a transition on the technology front could have strengthened the cyber
security model of the shipping concern (Marinemec.com, n.d). The innovative
technology would have increased the security process of the concern multifold as
blockchain runs in a sterile environmental setting.
Reasonable ethical guidelines for cyberattack prevention
IT 659 ac ac ac ac ac ac ac a ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac a ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac a ac ac ac ac ac ac ac ac
ac ac ac ac ac ac ac ac ac ac ac ac a ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac a ac ac ac ac ac 3
The serious cyber incident which compromised the IT infrastructure of Maersk
could have been prevented if the appropriate and reasonable ethical guidelines were in
place. The moral compass of the business was shaky. This is because the shipping
concern had failed to upgrade the cyber infrastructure with the evolving times.
Similarly, Maersk could have increased the awareness and education level of the
employees so that they could have been more conscious and agile before the incident
(Marinemec.com, n.d). The shipping industry is known to have a weak cyber risk
management model which makes the industry and the participants susceptible to the
cyber attackers. The Notpetya attack acted as a major wakeup call that revealed that
there is the need to introduce stringent ethical guidelines so that the lousy security
subsystems can be replaced by technologically-advanced security models such as the
Blockchain technology.
Global considerations
International Compliance Standards
The proper establishment of an effective cybersecurity program is necessary for
all the business undertakings that function today irrespective of the nature of the
industry or the geographic location. In the current times, several regulations have
been introduced urging business firms to navigate the cyber risks and effectively
tackle the online vulnerability (Deloitte, 2018, p 2).
Some of the main international compliance requirements that would be relevant
at the time of the Notpetya incident include the adoption of a risk-based approach for
the purpose of understanding the various cybersecurity threats that arise in the
industrial environments and the establishment of a robust IT governance structure in
order to drive accountability. Similarly, in the current times, business undertakings
always have to be on their toes to identify vulnerable areas so that the security
IT 659 ac ac ac ac ac ac ac a ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac a ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac a ac ac ac ac ac ac ac ac
ac ac ac ac ac ac ac ac ac ac ac ac a ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac a ac ac ac ac ac 4
controls can be upgraded (Deloitte, 2018, p 3). Firms also need to conduct the
frequent monitoring of the information systems (IS) so that they can identify the
instance of a breach or attempted breach. The existence of the International
Compliance Standards and regulations would have naturally persuaded Maersk to
prevent the attack or identify it earlier.
Impact of the cyber-attack on global communication and commerce
The Notpetya cyber-attack was a major incident that not only affected the
Maersk shipping business but exposed the high degree of vulnerability of the entire
shipping industry. It acted as a major wake-up call for the entire industry. The
incident made the shipping concerns that function in the industry conscious about the
Information Technology infrastructure and the management of the IT assets (Deloitte,
2018). ac
After the cyber-attack that crippled the shipping firm has made global business
undertakings understand the gravity of having a robust cyber risk management model.
In order to strengthen the overall survival and sustainability of business and
commerce on the cyber platform, firms are making a sincere effort to comply with
the evolving cyber security standards and policies (Deloitte, 2018). The objective is to
carry out the business activities in a safe way so that the vulnerability of firms on
the cyber platform can be managed and mitigated to a certain extent. ac
The business concerns that operate in the diverse and dynamic industrial
environment have learnt from no business is indispensable on the cyber platform. In
order to operate in a safe cyber setting, in the present times, organizations are
focusing on establishing a robust cybersecurity model that can enhance the safety and
security of the business (Deloitte, 2018, p 3). Firms in different nations are imposing
IT 659 ac ac ac ac ac ac ac a ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac a ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac a ac ac ac ac ac ac ac ac
ac ac ac ac ac ac ac ac ac ac ac ac a ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac a ac ac ac ac ac 5
strict ‘cyber integrity’ requirements in order to have an edge against the cyber
attackers and online hackers. ac
The relationship between Maersk cyberattack and current global regulatory
standards
After Maersk became a victim of one of the most notorious cyberattacks,
numerous changes have been introduced in the global technology environment so that
business undertakings can function in a safe and secure cyber platform. The incident
has led to the sharpening of the regulatory focus so that the vulnerabilities of the
shipping businesses can be managed in an effective and efficient manner (IHS
Fairplay, 2018). The shipping industry has, in fact, started to brace itself for a
potential robust cyber security regulatory regime so that the online hackers will not
have the scope to cripple the Information Technology systems of the operational
business undertakings.
The serious cyber incident which compromised the security model of the
business has put businesses on their toes. In fact, the regulators have also introduced
stringent standards and rules so that the businesses can be empowered to tackle
against cyber-attacks. The regulatory standards are urging business concerns to adapt
to the digitalized era by implementing fast and formal escalation programs (Deloitte,
2018). This can help them to take fast actions against any kind of unauthorized
activity that is carried out on the network systems of the business firms. ac
In order to help businesses function in a safe setting, the current global
regulatory standards have been designed by taking a cue from the Notpetya
cyberattack. They are urging firms to strengthen the IT backbone so that their cyber
resilience can be enhanced (Moller, 2018, p 8).
IT 659 ac ac ac ac ac ac ac a ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac a ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac a ac ac ac ac ac ac ac ac
ac ac ac ac ac ac ac ac ac ac ac ac a ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac a ac ac ac ac ac 6
References
Deloitte, N. (2018). Global cybersecurity compliance integrity. Retrieved from
https://www2.deloitte.com/content/dam/Deloitte/us/Documents/risk/us-risk-global-
cybersecurity-compliance-integrity.pdf
IHS Fairplay. (2018). Maersk cyber-attack sharpens regulatory focus. Retrieved from
https://fairplay.ihs.com/safety-regulation/article/4289206/maersk-cyber-attack-
sharpens-regulatory-focus
Lennane, A. (2018). Shipping must learn from Maersk cyber attack – tighten security
or be next, warning - The Loadstar. Retrieved from
https://theloadstar.co.uk/shipping-must-learn-maersk-cyber-attack-tighten-security-
next-warning/
Marinemec.com. (n.d). Blockchain would have prevented Maersk cyber-attack.
Retrieved from https://www.marinemec.com/news/view,blockchain-would-have-
prevented-maersk-cyber-attack_48287.htm
IT 659 ac ac ac ac ac ac ac a ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac a ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac a ac ac ac ac ac ac ac ac
ac ac ac ac ac ac ac ac ac ac ac ac a ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac a ac ac ac ac ac 7
Moller, A. (2018). MAERSK 2017 Annual Report. Retrieved from
http://files.shareholder.com/downloads/ABEA-
3GG91Y/6115885668x0x971046/54DA7595-1904-4118-9174-
E741CB7621D4/A.P._Moller_-_Maersk_Annual_Report_2017.pdf
