Recap – Cyber Security Event 

Last Thursday, RMSC members gathered at the Heineken Gebouw in Rotterdam for a Cyber Security Event.

Albert Veenstra (RSM) shared the results of his research into cyber resilience. Among other things, he discussed the various responsibilities and hierarchies within the port and the role of public-private partnerships in cyber security. He also noted that vulnerability increases as systems become more integrated and digitised, and that AI can lead to more low-level attacks.

Robert Mackay (FDR) and Jeroen de Korte (Schuberg Philis) used a case study to demonstrate that risk management involves more than simply taking out insurance. They emphasised the importance of identifying a company’s ‘crown jewels’ in advance: which activities are mission-critical and must not fail? They also discussed who is authorised to make decisions during an attack, the consequences for the entire supply chain, and practical issues such as falling back on paper-based protocols in the event of an IT failure.

Max Spiering (Eye Security) addressed residual risks and discussed the Odido case. In his view, cyber risk is not a static risk, but one that is constantly changing. He emphasised the importance of sound policy and training, and noted that insurance can ultimately cover residual risk.