## 1 Introduction  
Maritime transportation is the primary means of global trade, responsible for approximately 80-90% of the transportation of commodities and raw resources, providing significant economic advantages for moving large quantities over extensive distances [1]. A maritime supply chain network (MSCN) comprises essential elements, including freight forwarders, shipping lines, and port terminal operators, all of which play vital roles in optimizing operations to ensure efficient service delivery. Figure 1, adapted from [2], depicts the connections between these pivotal participants. In recent decades, as globalization and competitiveness have intensified, it has become crucial for maritime industry stakeholders to implement Industry 4.0 technology. The objective of this transition toward greater digitization and automation is to reduce waiting times and increase efficiency, particularly in complex operations such as ship navigation and cargo management [3, 4]. Nevertheless, this digital transformation introduces various new risks, specifically cyber-attacks, which have emerged as a significant concern for MSCN agents [5, 6, 7]. The classification society \"Lloyd Register\" has documented an alarming surge in cyber-attacks over the last ten years, with an annual increase of 27%. In 2017, 86% of organizations reported experiencing attacks [8, 9, 10], a situation worsened by the COVID-19 pandemic, leading to a four-fold rise in cyber-attacks globally [11, 10, 12]. Considering these challenges, cybersecurity has become a critical concern in the maritime industry. The International Maritime Organization (IMO) mandated in 2021 that shipowners develop cyber risk management strategies [6; 13]. Classification societies, such as the American Bureau of Shipping (ABS) and Det Norske Veritas (DNV), have also promoted effective cyber risk management systems to mitigate these threats. Analyzing cyber-attacks within the MSCN is essential due to the sector's unique operational dynamics and reliance on complex global logistics. The MSCN operates in a highly interconnected environment, where vulnerabilities can rapidly propagate among multiple stakeholders, including shipping companies, port authorities, and logistics providers. This interdependence heightens the risk of systemic failures, resulting in potentially severe consequences from cyber-attacks. Addressing these issues requires a comprehensive understanding of the specific risks and challenges faced by the MSCN, emphasizing the need for tailored strategies to enhance cybersecurity resilience. The academic community has also made strides in identifying and classifying cybersecurity vulnerabilities in the maritime domain. For instance, ref. [14] explored cyber-attacks on the automatic identification system (AIS) of American vessels using the Parkerian hexad. While this framework provides a valuable lens for evaluating vulnerabilities in specific systems such as the AIS, it lacks a broader application to the entire supply chain and does not offer practical mitigation steps for MSCN agents. Similarly, ref. [7; 15] developed classification schemes distinguishing between cyber-attacks on on-board systems and off-board systems, but they do not provide a holistic approach or practical guidance on managing these threats. Other works, such as ref [16; 17], have focused on risks associated with emphasizing the integration of advanced digital technologies such as the Internet of things (IoT), the cloud, blockchains, big data, and artificial intelligence (AI) into cybersecurity frameworks. These technologies are critical to monitoring, detecting, and mitigating cyber risks in increasingly digitized and interconnected maritime systems. While Industry 4.0 encompasses a wide range of innovations, we have focused on those technologies that are directly applicable to strengthening cyber defenses, in line with the core objectives of our study.