# Comprehensive Analysis of Maritime Cybersecurity Landscape Based on the NIST CSF v2.0
## 5 NIST CSF-Based Analysis of Maritime Cybersecurity
### Govern
#### 5.1.1 Organizational Context  
Organizational Context in cybersecurity risk management relates to understanding the organization's specific circumstances in order to make informed cybersecurity decisions. This encompasses understanding the organization's mission, stakeholder expectations, legal and regulatory obligations, dependencies, and contractual requirements. It necessitates identifying both internal and external dependencies, clearly communicating these elements, and involving them in risk management decisions. Lastly, it involves understanding and managing the organization's legal requirements related to privacy and civil liberties in the cybersecurity context. According to the Governance subcategory, in addressing cyber risks, comprehensive governance and risk management processes are crucial [24]. In parallel, [PERSON] et al. 's [25] article critically assesses existing IMO legal instruments regarding maritime cybersecurity, highlighting the need for comprehensive international legal reform and collaboration between state and non-state actors. Furthermore, [PERSON] et al. [26] examined the legislative measures that oversee cybersecurity and digitalization in maritime navigation, particularly in the context of ferry transportation, delving into the governance dimension. Their work addresses state, federal, and international legal requirements while highlighting the critical role that secure transactions and user experience play. Crucially, it is consistent with governance and regulatory frameworks, emphasizing how important it is to maintain cybersecurity in the ferry maritime industry. [PERSON] et al. [27] examined European law and how it applies to international business settings, drawing parallels with US law. The European Union has been addressing the \begin{table}
\begin{tabular}{p{113.8 pt} p{113.8 pt} p{113.8 pt}} \hline \hline
**Category** & **References** & **Conclusions** \\ \hline Organizational Context & [PERSON] (2022) [24], [PERSON] et al. (2022) [25], [PERSON] et al. (2023) [26], [PERSON] et al. (2018) [27], [PERSON] et al. (2017) [28] & The Organizational Context is key to cybersecurity risk management, considering unique aspects of an organization that influence decision-making. The reviewed papers highlight this through various perspectives. They underscore the need for comprehensive governance, importance of international legal reform, vital role of secure transactions, impact of evolving international laws and significance of technological dependencies all within each organization’s context. These emphasize the importance of the Organizational Context in formulating effective cybersecurity risk management strategies. \\ \hline Risk Management Strategy & [PERSON] et al. (2021) [14], [PERSON] et al. (2022) [29], [PERSON] et al. (2011) [30], [PERSON] et al. (2022) [31], [PERSON] et al. (2023) [32], [PERSON] et al. (2022) [33] & The role of strategic risk management is indispensable in establishing an effective cybersecurity posture. The studies explored highlight the holistic technical and human-centric approach needed in this rapidly evolving digital landscape. It becomes clear that understanding, assessing, and implementing tailored mitigation techniques across industries such as maritime and defense are imperative. Ultimately, robust risk management strategy fosters awareness, preparedness, and resilience, paving the way for secure digital operations. \\ \hline Cybersecurity Supply Chain Risk Management & [PERSON] et al. (2021) [34], [PERSON] et al. (2022) [35] & The studies collectively advocate for an integrated risk management strategy in the supply chain, utilizing both ISO 28001 standards [37] and innovative tools for threat assessment and anomaly detection, to bolster security and resilience in the face of evolving digital threats in industries such as maritime and defense. \\ \hline \hline \end{tabular}
\end{table} 
Table 1: Govern. European Security Strategy (ESS) since 2003; however, since 2016, the EU Global Strategy (EUGS) has taken center stage.