Andrew Woo Schill, Head of Growth, MicroSec

Share on

Speaking on the growing threats in the cyber domain, MicroSec’s Head of Growth Andrew Woo Schill enlightens Asian Defence Journal on those threats at IMDEX Asia 2025.

ADJ: What are some of the virtual cyber threats towards the maritime industry?

AWS: The maritime industry faces several cyber threats, including ransomware attacks, phishing scams targeting crew and staff, GPS spoofing, data breaches, unsecured remote access, unauthorised access, and the hacking of operational technology (OT) systems. These attacks can disrupt vessel operations and supply chains, steal sensitive information, or even compromise the safety of ships and ports.

ADJ: With the deep interconnectedness of global networks, what are some of the challenges in safeguarding the cyber domain in relation to maritime security?

AWS: The global interconnectedness of maritime networks creates vulnerabilities in supply chain systems, vessel communication, and port operations. Challenges include securing legacy systems, maintaining cybersecurity across diverse platforms (ship-to-shore communications), and preventing unauthorised access to critical systems. The maritime industry’s reliance on outdated technology and a lack of standardised cybersecurity protocols across countries further complicates safeguarding the cyber domain.

ADJ: Can you elaborate more on how MicroSec aims to strengthen the industry’s response against looming threats of devastating cyberstrikes?

AWS: MicroSec aims to enable standardisation of cybersecurity readiness for vessels and ports. Firstly by enabling the support and enforcement of security protocols and risk assessments that help maritime entities protect against cyberattacks, such as the recent IACS URE26/27 mandatory regulations for vessels, as well as standards that align with the IMO and NIST. In addition, MicroSec also enables vessel owners and ports to monitor their network traffic for anomalies and potential threats in real time, enabling early detection and rapid response to security incidents. Together, these measures ensure that maritime organisations are better equipped to prevent, detect, and recover from cyberattacks, reducing the risk of devastating disruptions.