## 5 Results and Discussion
### RQ1: What Cyber-Attacks in the MSCN Have Been Reported in the Academic Literature?
#### 5.2.2 Practices Towards an Information Security Policy  
The literature suggests various practices for an information security policy in the MSCN, as presented in Table 6.  
Collaboration between agents in the MSCN: The literature underscores the importance of cooperation among MSCN stakeholders to improve cybersecurity capabilities. Effective collaboration involves the exchange of crucial information, including the documentation of cyber-attacks, strategies for mitigating them, and instruments for managing cyber risk. The studies conducted by [23; 121] emphasized the effectiveness of collaborative workshops and shared platforms in enhancing collective cyber resilience in the maritime sector, particularly during periods of new regulatory changes and crises, such as COVID-19. On the other hand, [PERSON] [15; 129] highlights the crucial role of collaborative data-sharing platforms in effectively combating cyber-attacks within the MSCN. Collaboration between international MSCN stakeholders: International partnerships are crucial, particularly among countries that share similar risk perceptions, to avoid the misallocation of resources and the amplification of incidents, as noted by [62; 89]. Nevertheless, differences in risk profiles may limit the effectiveness of such alliances, underscoring the need for collaboration between countries that possess similar capabilities and perspectives on cybersecurity threats [57; 128]. Integration of clear and acceptable cybersecurity practices: The standardization of cybersecurity practices within the MSCN is urgently required. Although frameworks such as ISO/EIC 27.001 and NIST recommendations already exist, there are still difficulties in obtaining complete standardization. Establishing partnerships between maritime and scientific communities is essential for advancing cybersecurity. These collaborations focus \begin{table}
\begin{tabular}{l c c c c} \hline \hline
**Best Practices** & **Mitigation** & **Contingency** & **MSCN Actor** & **Frequency References** \\ \hline \begin{tabular}{l} Develop computational tools for \\ risk management \\ \end{tabular} & X & X & All actors & 30 & \begin{tabular}{c} [11; 13; 15; 56; 57; 61; 65; 66; 71; 74; 76; 77; 79; 82; 85; 92; 96; 96; 97; 109; 110; 111; 112; 113; 114; 115; 116; 117; 118]. \\ \end{tabular} & X & X & All actors & 13 & \begin{tabular}{c} [43; 46; 47; 48; 52; 54; 63; 99; 100; 102; 117; 118]. \\ \end{tabular} \\ \hline \begin{tabular}{l} Program digital tools to ensure \\ IoT cybersecurity \\ \end{tabular} & X & X & All actors & 13 & \begin{tabular}{c} [43; 46; 48; 52; 54; 63; 99; 100; 102; 116; 117; 118]. \\ \end{tabular} \\ \hline \begin{tabular}{l} Implement detection–blocking \\ techniques to restrict network \\ access to authorized systems \\ \end{tabular} & X & X & Shipping line & 13 & \begin{tabular}{c} [48; 53; 57; 61; 73; 75; 102; 107; 108; 120; 121; 122; 123]. \\ \end{tabular} \\ \hline \begin{tabular}{l} Secure email accounts with \\ strong passwords and \\ multi-factor authentication \\ \end{tabular} & X & All actors & 4 & [81; 83; 97; 99]. \\ \hline \begin{tabular}{l} Install physical barriers, surveillance \\ cameras, and rapid-response alarms \\ in control rooms \\ \end{tabular} & X & & \begin{tabular}{c} Shipping line, \\ Port operators \\ \end{tabular} & 6 & [28; 35; 57; 84; 109; 124]. \\ \end{tabular} \\ \hline \begin{tabular}{l} Deploy advanced intrusion \\ detection systems and \\ antivirus software \\ \end{tabular} & X & All actors & 6 & [25; 35; 105; 125; 126; 127]. \\ \end{tabular} \\ \hline \begin{tabular}{l} Monitor, control, or block access to \\ communication interface port(s) \\ \end{tabular} & X & Port operators & 2 & [57; 104]. \\ \hline \
\begin{tabular}{l} Manage RFID usage to protect the \\ personal data of watchkeeping \\ officers and captains \\ \end{tabular} & X & Shipping line & 5 & [59; 70; 72; 92; 128]. \\ \hline
\begin{tabular}{l} Use VPNs on remote \\ working laptops \\ \end{tabular} & X & All actors & 2 & [25; 107]. \\ \hline \hline \end{tabular}
\end{table}