# Comprehensive Analysis of Maritime Cybersecurity Landscape Based on the NIST CSF v2.0
## 6 Discussion
* Strategic and Proactive Research: The research aims to develop a proactive approach to cybersecurity in the maritime industry, anticipating future developments and challenges. This strategic focus is expected to contribute to the maturity of maritime cybersecurity and lead to the development of advanced measures to protect against cyber threats. These advancements reflect a growing alignment with the NIST CSF and a concerted effort to address the dynamic cybersecurity challenges within the maritime industry. The literature suggests that while there are areas of progress, there is also a need for ongoing research and development to further enhance the cybersecurity posture of maritime operations. * How mature are the respective cybersecurity functions in the maritime domain? The maturity of the NIST CSF v2.0 in maritime operations has yet to fully evolve. While areas involving the Govern, Identify, and Protect functions have received considerable coverage in the literature, there are significant gaps, particularly with respect to the Respond and Recover functions, particularly the incident response reporting and communication, incident mitigation, and incident recovery communication processes. Furthermore, only three articles were found on cybersecurity for maritime supply chains [34; 35; 36], a particularly critical area; this lack of comprehensive coverage implies a need for further research to reinforce maritime cybersecurity, especially in the context of response and recovery strategies. Overall, while the maritime sector has made strides in aligning with NIST CSF v2.0, as shown in the study, there remains room for maturity and advancement. * Are there any identified gaps in maritime cybersecurity that necessitate attention from the scientific community? In light of the data presented in Table 7 below, further research is required to address a number of observed gaps, particularly within the Govern, Respond, and Recover functions of the NIST CSF v2.0. Notably, within the Govern function, there is a lack of research on the categories of roles, responsibilities, and authorities, policy, and oversight, all of which are essential for establishing a clear governance structure for cybersecurity in maritime operations. Moreover, the category of cybersecurity supply chain risk management is particularly crucial in the maritime industry in light of the interconnected nature of global supply chains. Cybersecurity breaches could potentially disrupt not only a single ship or company, but ripple through the entire network, causing widespread damage. A gap in the literature on this area suggests an urgent need for research into strategies, protocols, and frameworks that specifically address cybersecurity risks in maritime supply chains. Furthermore, the Respond function reveals gaps in incident response reporting and communication as well as incident mitigation, both of which are critical areas for effectively managing the impact of cybersecurity incidents. The research indicates another significant shortfall in the Recover function, particularly in incident recovery communication, which is vital for coordinating cohesive post-incident recovery efforts. This gap points to the need for research into communication protocols and strategies that can aid in swift and efficient recovery from cybersecurity breaches in the maritime context. By addressing these research gaps, the maritime sector could potentially achieve a more robust and comprehensive approach to cybersecurity.