# Comprehensive Analysis of Maritime Cybersecurity Landscape Based on the NIST CSF v2.0
## 4 Related Work  
Several crucial research papers were identified according to the literature review. These papers utilised literature review either as a standalone research method or in combination with other methodologies, offering valuable insights into the various dimensions of cybersecurity within the maritime industry. Among the articles we identified in our literature review, a few stood out for their insightful application of diverse research methodologies catering to various aspects of cybersecurity in the maritime industry. The research of [PERSON] et al. [13] was notable for its blend of literature review and a case study, offering a deep understanding of the vulnerabilities within the Automatic Identification System (AIS). Concurrently, the literature review of [PERSON] et al. [14], complemented by an email questionnaire, underscored the importance of staff education and secure networks in mitigating risks within the maritime sector. Further expanding on the theme of cybersecurity, the research [PERSON] et al. [15] highlighted the escalating prominence of cybersecurity in ports considering the developments of Industry 4.0, building on their preceding studies of ports and terminals. [PERSON] et al. 's [16] study ingeniously utilized literature review and questionnaires to highlight the prevailing knowledge and education lacunae in maritime cybersecurity. [PERSON] et al. 's [17] meticulous investigation of GPS-related cyber threats significantly enhances the understanding of such threats in the maritime sphere, including analysis of a global spoofing event involving the Global Navigation Satellite System (GNSS) and AIS. In addition, [PERSON] et al. 's [18] comprehensive review of cybersecurity policies in the maritime sector proposes valuable enhancements, while the literature review by [PERSON] et al. [19] provides crucial insights into the potential risk scenarios within Port Community Systems (PCSs). Overall, these seminal works enrich our collective understanding of maritime cybersecurity, laying crucial groundwork for subsequent research in this realm. Figure 3: Procedure for selecting references from the SCOPUS search engine (PRISMA flowchart). [PERSON] et al. [20] notably advocated for an evolved application of the NIST CSF to mitigate risks within the maritime sector. This includes formulating a classification system for cyberattacks based on their impact. This system categorizes each cyberattack by evaluating its influence on the latest techniques. The significant contributions of researchers such as [PERSON] et al. and [PERSON] et al. [21; 22] highlight the strategic incorporation of the NIST CSF within the maritime sector. This adoption aims for a comprehensive approach that weaves cybersecurity within organizational objectives and operations. Such an approach does not solely comprise technical steps, also encompassing facets such as governance, asset management, and risk assessment. Upholding international standards such as those presented by the IMO reemphasizes the suitability of using the NIST CSF within the maritime industry. In addition, [PERSON] et al. [23] articulated underscored the necessity for shipping corporations to embrace cyber risk management methodologies in response to the escalating sophistication of cyber threats. In mitigating these pertinent issues, the authors promoted the implementation of the NIST CSF. When amalgamated with the SOHRA human risk assessment technique, this framework demonstrates potency in risk identification, mitigation, and post-attack recovery, thereby contributing significantly to the industry's cyber resilience. Crucially, this framework offers comprehensive protection for the Automatic Identification System (AIS), an exceptionally susceptible onboard component. Violation of the AIS could precipitate severe ramifications. Their article suggests that effective use of the NIST CSF would lead to better decision-making, enhanced control measures, and improved cybersecurity, particularly in relation to the AIS.