## 3 SLR Methodology  
This study adopted the PRISMA framework introduced by ref. [33]. PRISMA is recognized for its structured and comprehensive approach to conducting systematic literature reviews, ensuring rigorous and reproducible research outcomes [34; 35]. This methodology aligns with our research questions and provides a transparent process from study identification to data synthesis. Figure 2 illustrates the three stages of the PRISMA methodology  
\begin{table}
\begin{tabular}{p{56.9 pt} p{113.8 pt} p{113.8 pt} p{113.8 pt} p{113.8 pt}} \hline \hline
**Organization** & **Year** & **Title** & **Description** & **Related Studies** \\ \hline \multirow{4}{*}{IMO} & \multirow{4}{*}{2017} & Resolution MSC-428(98)—Maritime Cyber Risk Management in Safety Systems [24]. & It exposes five functional Cyber Risk Management in Safety Management & Ref. [25] suggests incorporating a cyber risk management framework into maritime ship safety systems (SMS). \\ \cline{3-6}  & & & & \\ \cline{3-6}  & & & & \\ \cline{3-6}  & & & & \\ \hline \multirow{4}{*}{NIST} & \multirow{4}{*}{2018} & \multirow{4}{*}{Framework for Improving Critical Infrastructure Cybersecurity (NIST) [27].} & The framework is a set of guidelines for mitigating organizational cybersecurity risks and organizes basic cybersecurity activities regarding the five elements proposed by IMO. & Ref. [18] merges the NIST framework with STWC standards to identify crew competencies needed for NIST’s core functions. \\ \cline{3-6}  & & & & \\ \cline{3-6}  & & & & \\ \cline{3-6}  & & & & \\ \cline{3-6}  & & & & \\ \hline \multirow{4}{*}{DNV} & \multirow{4}{*}{2016} & \multirow{4}{*}{DNVGL-RP-0496 Cybersecurity resilience management for ships and mobile offshore units in operations [29].} & \multirow{4}{*}{It is composed of four essential steps for cyber risk management: Assessment— Improvement— Verification—Validation.} & Ref. [30] reviews eight cybersecurity guidelines and notes the DNV’s lack of operational best practices despite its detailed risk assessment guide. \\ \cline{3-6}  & & & & \\ \cline{3-6}  & & & & \\ \cline{3-6}  & & & & \\ \cline{3-6}  & & & & \\ \hline \multirow{4}{*}{ABS} & \multirow{4}{*}{2021} & Guide for Cybersecurity Implementation for the Marine and Offshore Industries [32]. & It contains 27 cybersecurity controls and the recommendations are based on three levels of cybersecurity urgency (Tier 1, Tier 2, and Tier 3). & Ref. [30] finds the ABS guidelines helpful for pinpointing operational best practices for maritime stakeholders. \\ \cline{3-6}  & & & & \\ \hline \hline \end{tabular}
\end{table}
Table 1: Summary of available cybersecurity guidelines.  
applied in this study. The PRISMA flow diagram follows a structured three-step process. (1) Identification: researchers define the research question and systematically search for relevant studies, adhering to predefined inclusion and exclusion criteria. (2) Screening: identified studies are screened for relevance by reviewing titles and abstracts. Those that align with the research question undergo a full-text review. (3) Inclusion: eligible studies are included in the systematic review. Data from these studies are extracted and analyzed, and the findings are synthesized and reported.