DP World is the reference. Nagoya is the benchmark. Cyber is now unlawful interference.
As a port operator, shipping line, or maritime service provider, you face layered regulation — the SOCI Act, MTOFSA (which since 27 March 2026 treats cyber security incidents as unlawful interference) and, for ships under the ISM Code, IMO MSC.428(98). DP World Australia's 2023 incident and the 2023 LockBit attack on the Port of Nagoya are the peer references.
Your specific challenges
Layered regulation, one environment
The SOCI Act plus MTOFSA plus IMO plus the Cyber Security Act — applied to the same terminal operating systems, port community systems, vessel traffic services, and shore-side networks. Each framework expects evidence on its own terms.
IT compromise stops port operations
DP World Australia, the Port of Nagoya and Maersk (NotPetya, 2017) all began as IT compromises that halted port or shipping operations. The boundary between corporate IT and port or shipboard OT decides how far an attacker can go.
Legacy systems and long refresh cycles
Ships and port infrastructure run for decades. Terminal operating systems, AIS feeds, ship-to-shore links and VTS systems often predate modern security assumptions, and aren't easily replaced.
Built for your situation
IT/OT boundary validation
Segmentation testing and internal pentesting show whether the corporate-to-OT boundary holds under attack, and what an attacker who got into corporate IT could reach. NodeZero tests the IT layer and the boundary; it does not test inside OT networks.
Rapid Response for edge devices
Citrix, NetScaler, SonicWall, Fortinet — internet-facing appliances are a recurring entry point. When a critical CVE or CISA KEV is disclosed, Rapid Response runs a production-safe exploit test, often within hours of disclosure, to show whether yours are exploitable.
Input to the SMS cyber risk assessment
For ship operators, internal and external pentesting of shore-side IT, and segmentation testing of the boundary to vessel and terminal systems, give factual input to the cyber risk assessment in your Safety Management System under MSC.428(98). NodeZero does not test shipboard OT.
Test your SOCI and MTOFSA cyber posture
See what an attacker could reach across your port and maritime systems