Running Head: IT 659 g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g
g g g g g g g g g g g g g g g g g 1
IT-659-Q1436: Assignment 7-2
IT 659 g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g
g g g g g g g g g g g g g g g g g g g g g g 2
Recommendations and Global Considerations
The Notpetya cyberattack affected Maersk business as well as the entire shipping
industry. Here the main recommendations have been done that could have helped the firm
to prevent the incident. Similarly, the global implication of the cyber incident has been
captured to understand how it has affected the global business setting.
Recommendations
Relevant changes for preventing the cyber attack
Maersk could have prevented the cyber-attack that crippled its shipping business
activities by upgrading the technological infrastructure. The business concern was
considered to have a decent level of protection on the cyber platform as compared to the
other shipping firms with weak security model. In spite of this, its vulnerabilities were
exposed (Lennane, 2018). The dissemination of the attack across different business units of
Maersk indicates that the firm’s level of cybersecurity was not good enough.
The Blockchain technology could have played a key role and saved the shipping
concern from the Notpetya cyber-attack. The incident could have been averted if it had
shifted from the obsolete electronic data interchange (EDI) to the ‘blockchain-enabled’
technology. According to Antony Abell, the managing director of TrustMe, such a
transition on the technology front could have strengthened the cyber security model of the
shipping concern (Marinemec.com, n.d). The innovative technology would have increased
the security process of the concern multifold as blockchain runs in a sterile environmental
setting.
Reasonable ethical guidelines for cyberattack prevention
The serious cyber incident which compromised the IT infrastructure of Maersk
could have been prevented if the appropriate and reasonable ethical guidelines were in
place. The moral compass of the business was shaky. This is because the shipping concern
IT 659 g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g
g g g g g g g g g g g g g g g g g g g g g g 3
had failed to upgrade the cyber infrastructure with the evolving times. Similarly, Maersk
could have increased the awareness and education level of the employees so that they
could have been more conscious and agile before the incident (Marinemec.com, n.d). The
shipping industry is known to have a weak cyber risk management model which makes the
industry and the participants susceptible to the cyber attackers. The Notpetya attack acted
as a major wakeup call that revealed that there is the need to introduce stringent ethical
guidelines so that the lousy security subsystems can be replaced by technologically-
advanced security models such as the Blockchain technology.
Global considerations
International Compliance Standards
The proper establishment of an effective cybersecurity program is necessary for all
the business undertakings that function today irrespective of the nature of the industry or
the geographic location. In the current times, several regulations have been introduced
urging business firms to navigate the cyber risks and effectively tackle the online
vulnerability (Deloitte, 2018, p 2).
Some of the main international compliance requirements that would be relevant at
the time of the Notpetya incident include the adoption of a risk-based approach for the
purpose of understanding the various cybersecurity threats that arise in the industrial
environments and the establishment of a robust IT governance structure in order to drive
accountability. Similarly, in the current times, business undertakings always have to be on
their toes to identify vulnerable areas so that the security controls can be upgraded
(Deloitte, 2018, p 3). Firms also need to conduct the frequent monitoring of the
information systems (IS) so that they can identify the instance of a breach or attempted
breach. The existence of the International Compliance Standards and regulations would
have naturally persuaded Maersk to prevent the attack or identify it earlier.
IT 659 g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g
g g g g g g g g g g g g g g g g g g g g g g 4
Impact of the cyber-attack on global communication and commerce
The Notpetya cyber-attack was a major incident that not only affected the Maersk
shipping business but exposed the high degree of vulnerability of the entire shipping
industry. It acted as a major wake-up call for the entire industry. The incident made the
shipping concerns that function in the industry conscious about the Information
Technology infrastructure and the management of the IT assets (Deloitte, 2018). g
After the cyber-attack that crippled the shipping firm has made global business
undertakings understand the gravity of having a robust cyber risk management model. In
order to strengthen the overall survival and sustainability of business and commerce on the
cyber platform, firms are making a sincere effort to comply with the evolving cyber
security standards and policies (Deloitte, 2018). The objective is to carry out the business
activities in a safe way so that the vulnerability of firms on the cyber platform can be
managed and mitigated to a certain extent. g
The business concerns that operate in the diverse and dynamic industrial
environment have learnt from no business is indispensable on the cyber platform. In order
to operate in a safe cyber setting, in the present times, organizations are focusing on
establishing a robust cybersecurity model that can enhance the safety and security of the
business (Deloitte, 2018, p 3). Firms in different nations are imposing strict ‘cyber
integrity’ requirements in order to have an edge against the cyber attackers and online
hackers. g
The relationship between Maersk cyberattack and current global regulatory
standards
After Maersk became a victim of one of the most notorious cyberattacks, numerous
changes have been introduced in the global technology environment so that business
undertakings can function in a safe and secure cyber platform. The incident has led to the
IT 659 g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g
g g g g g g g g g g g g g g g g g g g g g g 5
sharpening of the regulatory focus so that the vulnerabilities of the shipping businesses can
be managed in an effective and efficient manner (IHS Fairplay, 2018). The shipping
industry has, in fact, started to brace itself for a potential robust cyber security regulatory
regime so that the online hackers will not have the scope to cripple the Information
Technology systems of the operational business undertakings.
The serious cyber incident which compromised the security model of the business
has put businesses on their toes. In fact, the regulators have also introduced stringent
standards and rules so that the businesses can be empowered to tackle against cyber-
attacks. The regulatory standards are urging business concerns to adapt to the digitalized
era by implementing fast and formal escalation programs (Deloitte, 2018). This can help
them to take fast actions against any kind of unauthorized activity that is carried out on the
network systems of the business firms. g
In order to help businesses function in a safe setting, the current global regulatory
standards have been designed by taking a cue from the Notpetya cyberattack. They are
urging firms to strengthen the IT backbone so that their cyber resilience can be enhanced
(Moller, 2018, p 8).
IT 659 g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g
g g g g g g g g g g g g g g g g g g g g g g 6
References
Deloitte, N. (2018). Global cybersecurity compliance integrity. Retrieved from
https://www2.deloitte.com/content/dam/Deloitte/us/Documents/risk/us-risk-global-
cybersecurity-compliance-integrity.pdf
IHS Fairplay. (2018). Maersk cyber-attack sharpens regulatory focus. Retrieved from
https://fairplay.ihs.com/safety-regulation/article/4289206/maersk-cyber-attack-
sharpens-regulatory-focus
Lennane, A. (2018). Shipping must learn from Maersk cyber attack – tighten security or be
next, warning - The Loadstar. Retrieved from https://theloadstar.co.uk/shipping-must-
learn-maersk-cyber-attack-tighten-security-next-warning/
Marinemec.com. (n.d). Blockchain would have prevented Maersk cyber-attack. Retrieved
from https://www.marinemec.com/news/view,blockchain-would-have-prevented-
maersk-cyber-attack_48287.htm
Moller, A. (2018). MAERSK 2017 Annual Report. Retrieved from
http://files.shareholder.com/downloads/ABEA-
3GG91Y/6115885668x0x971046/54DA7595-1904-4118-9174-
E741CB7621D4/A.P._Moller_-_Maersk_Annual_Report_2017.pdf
