## 1 Introduction
While these frameworks offer insights into technical vulnerabilities, they often lack recommendations that address the operational complexities and geopolitical impacts unique to maritime operations. To address these identified gaps and offer a comprehensive framework for the MSCN agents, this study presents a comprehensive approach to understanding and managing cyber-attacks in the maritime industry. Through a systematic literature review (SLR), this study aims to develop a classification model for cyber-attacks based on historical evidence, providing maritime supply chain managers with insights into pre-attack, during-attack, and post-attack measures. To guide this study, we identified the subsequent research questions (RQs):  
Figure 1: MSCN links, adapted from [2]. 1. RQ1: What cyber-attacks in the MSCN have been reported in the academic literature? This question is essential for understanding the types of threats faced by MSCN agents and how widespread they are across different systems and agents in the MSCN. 2. RQ2: What preventive and mitigating practices for cyber-attacks in the MSCN are reported in the literature? By answering this question, we aim to identify best practices and proven methods for reducing the impact of cyber-attacks, ensuring that MSCN agents are better equipped to protect their systems and assets. 3. RQ3: What emerging technologies address cyber-attacks in the MSCN? This question focuses on the future direction of maritime cybersecurity, examining how Industry 4.0 technologies can help prevent or mitigate these evolving threats. The contributions of this study are multifaceted and address key research questions. First, we develop a comprehensive cyber-attack taxonomy that directly responds to RQ1. By reviewing the existing literature and analyzing incident reports from MSCN actors, we bridge the gap between practical experience and academic knowledge. This taxonomy is essential for understanding the factors associated with cyber-attacks affecting the MSCN. In addition, we present historical cybersecurity evidence that also supports RQ1. This analysis reveals patterns in the most common cyber-attacks in the maritime sector, highlighting the systems and actors that are frequently targeted. These findings inform both the taxonomy and practical recommendations. In furtherance, we compile practical recommendations aligned with RQ2, focusing on prevention and mitigation practices for MSCN cyber-attacks. This compilation provides MSCN stakeholders with actionable strategies based on best practices derived from the literature. Finally, we explore emerging cybersecurity technologies related to RQ3, examining how innovations, including key Industry 4.0 technologies, can effectively combat cyber threats in the MSCN. By equipping stakeholders with essential insights, this study provides robust strategies for preventing and mitigating cyber-attacks. This paper is structured as follows. After this introduction, the following sections examine cybersecurity in maritime transport, describe the methodology of the SLR, show the results of the review, and explain these findings with regard to the research questions. The final sections provide suggestions for further research and conclude by discussing the wider implications of these findings for global supply chain networks.