## 5 Results and Discussion
### RQ1: What Cyber-Attacks in the MSCN Have Been Reported in the Academic Literature?
#### 5.2.3 Practices to Raise Awareness and Training on Cybersecurity  
The literature review revealed five crucial practices for cybersecurity awareness and training within the MSCN, as summarized in Table 7.  
Development of training platforms: A common approach is to establish extensive training programs for MSCN workers. This involves developing specialized courses and training platforms to boost the technical knowledge of MSCN staff, addressing weaknesses in their ability to respond to cyber-attacks. Recent cyber incidents have highlighted the im \begin{table}
\begin{tabular}{l c c c c} \hline \hline
**Best Practices** & **Mitigation** & **Contingency** & **MSCN Actor** & **Frequency references** \\ \hline Collaborate among MSCN & & & & \\ agents to share protocols and & X & X & All actors & 6 & [15; 23; 62; 76; 109; 128]. \\ reduce cyber-attack impacts & & & & \\ \hline Foster international collaboration & & & & \\ among maritime stakeholders & X & X & All actors & 9 & [23; 51; 57; 62; 73; 80; 84; 89; 128]. \\ with aligned risk perceptions & & & & \\ \hline Integrate standardized, clear & & & & \\ cybersecurity practices & & & & \\ \hline Establish a certification & & & & \\ authority to oversee the creation & & & & \\ of pseudonyms for ship MMSI & X & Shipping line & 2 & [52; 129]. \\ to protect identities & & & & \\ \hline \hline \end{tabular}
\end{table} 
Table 6: Practices for an information security policy. \begin{table}
\begin{tabular}{l c c c c} \hline \hline
**Best Practices** & **Mitigation** & **Contingency** & **MSCN Actor** & **Frequency References** \\ \hline Develop training courses and & & & & \\ platforms to enhance operator & X & X & All actors & 18 & [3; 15; 25; 28; 35; 44; 53; 60; 69; 93; 99; 110; 121; 132; 133; 134]. \\ attack prevention & & & & & \\ \hline Create a risk assessment library to & & & & \\ share mitigating measures and & & X & All actors & 2 & [13; 117]. \\ risk experiences & & & & \\ \hline Define a common glossary of & & & & \\ cyber terms to ensure clarity and & X & All actors & 3 & [10; 69; 121]. \\ precision in communication & & & & \\ \hline Introduce a ’port cyber resilience & & & & \\ officer’ role to enforce cybersecurity & X & Port operators & 1 & [129]. \\ awareness in and around ports & & & & \\ \hline Regular apply cyber & & & & \\ hygiene practices & & & Port operators & 5 & [25; 69; 76; 129; 135]. \\ \hline \hline \end{tabular}
\end{table} 
Table 7: Practices to raise awareness of cybersecurity. portance of structured security awareness training as they have exposed the shortcomings of many personnel in properly dealing with such threats [93; 132]. Risk assessment library: Establishing a risk assessment library is essential for exchanging information about the identified risks and sharing strategies to mitigate them. The objective of this program is to reduce knowledge gaps, specifically among crew members aboard, by creating a centralized repository of clearly defined cyber-attack vectors and prevention strategies. This approach helps minimize unintentional vulnerabilities caused by inadequately informed staff [129]. Common glossary of cyber terms: The creation of a common glossary specifically designed for the maritime environment is essential for eliminating communication inaccuracies and ambiguities. Using a common set of terms improves comprehension among professionals with different backgrounds, promoting a unified approach to managing cybersecurity threats across the maritime industry [10; 69]. Port cyber resilience officer: A proposal was made to enhance cybersecurity supervision in ports by introducing a dedicated 'port cyber resilience officer'. This position is dedicated to promoting and enforcing a thorough understanding of cybersecurity among all individuals associated with the port, acknowledging that the duty to maintain cybersecurity goes beyond that of any single individual [129]. Regular application of cyber hygiene: Encouraging consistent adherence to cyber hygiene standards is an essential approach to decreasing the occurrence of cyber-attacks.