Cybersecurity in Tanzanian Maritime Operations: Exploring Global Best Practices and Their Local Adaptation Using the Cybersecurity Capability Maturity Model (C2M2)

Mayala Patrick; Edrick Mugisha; Keneth Mbaga; Mansour Likamba

doi:10.18535/sshj.v8i10.1421

Abstract

The increasing integration of digital technologies in maritime operations has significantly enhanced efficiency in cargo tracking, port management, and communication systems. However, this digital transformation also introduces substantial cybersecurity risks, particularly in developing regions like Tanzania, where technological infrastructure and specialized skills may lag behind global standards. This study evaluates the cybersecurity readiness of three key Tanzanian maritime organizations Tanzania Ports Authority (TPA), Tanzania Shipping Agency Corporation (TASAC), and SINOTASHIP using the Cybersecurity Capability Maturity Model (C2M2). Through a detailed assessment across ten C2M2 domains, the study identifies existing strengths and critical gaps in areas such as risk management, asset management, and incident response. The findings reveal that while basic cybersecurity practices exist, they are largely reactive, with most domains scoring between Level 1 (Initial) and Level 3 (Defined). This lack of advanced, proactive measures poses significant risks to Tanzania's maritime infrastructure, particularly given the strategic role of ports like Dar es Salaam in regional trade. The study highlights the need for tailored improvements, including enhanced asset management, continuous workforce training, and real-time monitoring systems, to bridge the gap between global standards and local practices. By implementing these measures, Tanzanian maritime operations can strengthen their resilience against cyber threats, ensuring secure and efficient port operations in an increasingly interconnected world.

Keywords

ChampascripdevelopmentVietnam

References

Allianz Global Corporate & Specialty (AGCS). (2020). Rising Sophistication of Cyber Attacks in Maritime Industry. Retrieved fromGoogle Scholar ↗
https://www.agcs.allianz.com/news-and-insights/reports/shipping-review.htmlGoogle Scholar ↗
Allianz Global Corporate & Specialty (AGCS). (2020). Safety and Shipping Review 2020: Cyber Risks in Maritime Operations. Retrieved fromGoogle Scholar ↗
https://www.agcs.allianz.comGoogle Scholar ↗
BIMCO, CLIA, ICS, INTERCARGO, INTERTANKO. (2018). Guidelines on Cyber Security Onboard Ships (Version 3). Retrieved from https://www.bimco.orgGoogle Scholar ↗
BIMCO, et al. (2018). Guidelines on Cyber Security Onboard Ships. Retrieved from https://www.bimco.orgGoogle Scholar ↗
BIMCO. (2018). Over 40% of Shipping Companies Affected by Cyber-Attacks. Retrieved from https://www.bimco.orgGoogle Scholar ↗
Chalya, S., & Mkoma, H. (2020). Cybersecurity Preparedness in the Maritime Sector: A Case of Tanzania.Google Scholar ↗
European Commission. (2016). The Network and Information Systems (NIS) Directive. Retrieved fromGoogle Scholar ↗
https://digital-strategy.ec.europa.eu/en/policies/nis-directiveGoogle Scholar ↗
International Maritime Organization (IMO). (2017). Resolution MSC.428(98) on Maritime Cyber Risk Management in Safety Management Systems. Retrieved from https://www.imo.org/en/MediaCentre/HotTopics/Pages/Guidelines-on-Maritime-Cyber-Risk-Management.aspxGoogle Scholar ↗
International Maritime Organization (IMO). (2020). Global Rise in Cyberattacks on Maritime Operations. Retrieved from https://www.imo.orgGoogle Scholar ↗
Jones, P., & Tam, Y. (2019). Impact of Cyber Threats on Global Maritime Trade.Google Scholar ↗
Kaspersky. (2018). Ransomware Attack on A.P. Moller-Maersk: Case Study. Retrieved from https://www.kaspersky.comGoogle Scholar ↗
Maersk. (2018). NotPetya Cyber Attack: Financial and Operational Impacts. Retrieved from https://www.maersk.comGoogle Scholar ↗
Maritime and Port Authority of Singapore (MPA). (2019). Maritime Cybersecurity Programme: A Collaborative Initiative. Retrieved from https://www.mpa.gov.sgGoogle Scholar ↗
Mwangoka, J., & Mtenzi, F. (2019). Cybersecurity Challenges in Developing Nations: A Tanzanian Perspective.Google Scholar ↗
U.S. Department of Energy (DOE). (2014). Cybersecurity Capability Maturity Model (C2M2) Version 1.1. Retrieved from https://www.energy.gov/c2m2Google Scholar ↗

[refR-1] Allianz Global Corporate & Specialty (AGCS). (2020). Rising Sophistication of Cyber Attacks in Maritime Industry. Retrieved fromGoogle Scholar ↗

[refR-2] https://www.agcs.allianz.com/news-and-insights/reports/shipping-review.htmlGoogle Scholar ↗

[refR-3] Allianz Global Corporate & Specialty (AGCS). (2020). Safety and Shipping Review 2020: Cyber Risks in Maritime Operations. Retrieved fromGoogle Scholar ↗

[refR-4] https://www.agcs.allianz.comGoogle Scholar ↗

[refR-5] BIMCO, CLIA, ICS, INTERCARGO, INTERTANKO. (2018). Guidelines on Cyber Security Onboard Ships (Version 3). Retrieved from https://www.bimco.orgGoogle Scholar ↗

[refR-6] BIMCO, et al. (2018). Guidelines on Cyber Security Onboard Ships. Retrieved from https://www.bimco.orgGoogle Scholar ↗

[refR-7] BIMCO. (2018). Over 40% of Shipping Companies Affected by Cyber-Attacks. Retrieved from https://www.bimco.orgGoogle Scholar ↗

[refR-8] Chalya, S., & Mkoma, H. (2020). Cybersecurity Preparedness in the Maritime Sector: A Case of Tanzania.Google Scholar ↗

[refR-9] European Commission. (2016). The Network and Information Systems (NIS) Directive. Retrieved fromGoogle Scholar ↗

[refR-10] https://digital-strategy.ec.europa.eu/en/policies/nis-directiveGoogle Scholar ↗

[refR-11] International Maritime Organization (IMO). (2017). Resolution MSC.428(98) on Maritime Cyber Risk Management in Safety Management Systems. Retrieved from https://www.imo.org/en/MediaCentre/HotTopics/Pages/Guidelines-on-Maritime-Cyber-Risk-Management.aspxGoogle Scholar ↗

[refR-12] International Maritime Organization (IMO). (2020). Global Rise in Cyberattacks on Maritime Operations. Retrieved from https://www.imo.orgGoogle Scholar ↗

[refR-13] Jones, P., & Tam, Y. (2019). Impact of Cyber Threats on Global Maritime Trade.Google Scholar ↗

[refR-14] Kaspersky. (2018). Ransomware Attack on A.P. Moller-Maersk: Case Study. Retrieved from https://www.kaspersky.comGoogle Scholar ↗

[refR-15] Maersk. (2018). NotPetya Cyber Attack: Financial and Operational Impacts. Retrieved from https://www.maersk.comGoogle Scholar ↗

[refR-16] Maritime and Port Authority of Singapore (MPA). (2019). Maritime Cybersecurity Programme: A Collaborative Initiative. Retrieved from https://www.mpa.gov.sgGoogle Scholar ↗

[refR-17] Mwangoka, J., & Mtenzi, F. (2019). Cybersecurity Challenges in Developing Nations: A Tanzanian Perspective.Google Scholar ↗

[refR-18] U.S. Department of Energy (DOE). (2014). Cybersecurity Capability Maturity Model (C2M2) Version 1.1. Retrieved from https://www.energy.gov/c2m2Google Scholar ↗