Regulatory Challenges in Maritime Cybersecurity: Evidence from Expert Workshops

Authors

DOI:

https://doi.org/10.34190/iccws.21.1.4424

Keywords:

Maritime cybersecurity, Regulations, Standards, Frameworks, Qualitative data analysis, Expert elicitation, Cyber resilience

Abstract

The maritime transportation sector is crucial for nations worldwide, as the Maritime Transportation System (MTS) facilitates over 90% of international trade through an extensive network of ships and ports. As digitized maritime operations become increasingly prevalent, advanced technologies are being integrated into these systems. MTS’s critical importance, along with its dependence on interconnected systems and new digital technologies, renders it vulnerable to cyberattacks at ports and other key points. Consequently, implementing cybersecurity regulations in the maritime sector is essential to ensure operational safety and security. However, organizations within this sector encounter significant challenges in adopting and adapting to these regulations, highlighting the need for robust, clear, and enforceable standards. Previous studies have identified various gaps and challenges in maritime cybersecurity regulations, including fragmented, outdated, and inconsistent enforcement. To address these issues, this paper employs a qualitative analysis through expert workshops to evaluate whether the findings effectively reflect real-world experiences with operational and regulatory applications. The study aims to identify and analyze gaps and challenges in existing regulations, policy standards, and frameworks for maritime cybersecurity.

Author Biographies

Bilge Karabacak, University of North Carolina Wilmington

Bilge Karabacak is an assistant professor in the Cameron School of Business at the University of North Carolina Wilmington. He received his PhD in Information Systems with a focus on cybersecurity from the Middle East Technical University in 2015. He serves as the Co-PI of the Maritime Cybersecurity Applied Research, Technology & Education Center project.

Kasey Miller, University of North Carolina Wilmington

Kasey Miller is an assistant professor in the Cameron School of Business at the University of North Carolina Wilmington. He received his PhD in Information Sciences from the Naval Postgraduate School in 2024. He serves as the Co-PI of the Maritime Cybersecurity Applied Research, Technology & Education Center project.

Ulku Clark, University of North Carolina Wilmington

Ulku Clark is a professor in the Cameron School of Business at the University of North Carolina Wilmington. She received her PhD in Management Information Systems from the Naveen Jindal School of Management at UT Dallas in 2005. She serves as the PI of the Maritime Cybersecurity Applied Research, Technology & Education Center project.

Jeff Cummings, University of North Carolina Wilmington

Jeff Cummings is a professor in the Cameron School of Business at the University of North Carolina Wilmington. He received his PhD in Information Systems from the Kelley School of Business at Indiana University. He serves as the Co-PI Investigator of the Maritime Cybersecurity Applied Research, Technology & Education Center project.

Edwin Garces, University of North Carolina Wilmington

Edwin Garces, Ph.D., is a researcher in the Maritime Cybersecurity Applied Research, Technology, and Education Center (MCARTEC) at the University of North Carolina Wilmington. He received his doctorate in Engineering and Technology Management from Portland State University in 2011. 

Geoff Stoker, University of North Carolina Wilmington

Geoff Stoker is an associate professor of information systems in the Cameron School of Business at the University of North Carolina Wilmington.  He received his PhD in computer science from the University of Maryland, College Park, in 2014. He serves as the Co-PI of the Maritime Cybersecurity Applied Research, Technology & Education Center project.

Downloads

Published

19-02-2026