Security & recovery · 2 min
Keep a way back
Good security considers what happens after a device, account or familiar recovery method is lost.
✓Security & recovery
Protect access. Keep a way back.
No lessons match. Try another word or clear your filters.
Security & recovery · 2 min
One secret should not open every door
Reusing a password lets a breach at one service create risk at another.
✓Security & recovery · 2 min
More than a password
MFA asks for more than one kind of proof. Passkeys use cryptographic keys tied to a service.
✓Security & recovery · 2 min
Pause before urgency wins
A convincing message can still lead to a false login page or a request you did not expect.
✓Security & recovery · 2 min
A backup earns its name when it restores
A backup is a recoverable copy from another point in time. Synchronisation alone may also copy mistakes.
✓Security & recovery · 2 min
Start with what matters
Risk management starts with what you value, what could happen and how you would respond.
✓Security & recovery · 3 min
Three questions for a safer system
Confidentiality, integrity and availability describe different things that can go wrong. On a ship, the consequences may be physical.
✓Security & recovery · 3 min
Know what depends on what
An asset list becomes useful when it records function, ownership and dependencies, not just serial numbers.
✓Security & recovery · 3 min
Separate networks, control the crossings
Crew Internet, office IT and operational systems need deliberate boundaries. A different Wi-Fi name alone does not create one.
✓Security & recovery · 3 min
A small USB can cross a large boundary
A removable drive can move files between networks that are otherwise separate. Its origin and handling matter.
✓Security & recovery · 3 min
A maintenance window should close
Remote support is useful when access has a known person, a specific purpose and a defined end.
✓Security & recovery · 3 min
An update is a controlled change
A security patch may improve protection while changing operational behaviour. OT maintenance needs both security and engineering judgement.
✓Security & recovery · 3 min
The first report can preserve the next choice
A useful first response limits further interaction, protects safe operation and preserves observations for the responsible team.
✓Security & recovery · 3 min
Keep a clean route to recovery
Ransomware may encrypt data and steal it. Recovery needs a trusted source, a controlled environment and a check that the service works.
✓Security & recovery · 3 min
Two screens may share one wrong position
Agreement between displays is not independent confirmation when both depend on the same input.
✓Security & recovery · 3 min
Cyber risk belongs in daily ship management
Cyber risk management connects people, systems and safe operation. It needs responsibilities and exercises as well as technical controls.
✓Security & recovery · 3 min
The ship and the equipment: E26 / E27
IACS E26 considers the ship’s cyber resilience; E27 addresses onboard systems and equipment. Their scopes complement each other.
✓Security & recovery · 3 min
42% is a survey result, not your attack probability
The Allianz Risk Barometer 2026 ranks business concerns. Reading the denominator prevents a striking number from becoming a misleading claim.
✓A few seconds before the next click.
Four shipboard situations. Choose an action, then read why. These exercises support learning; follow your vessel’s approved procedures at work.
A new bank account on an agent’s invoice
An urgent email asks you to use new payment details. The sender name looks familiar.
Verify the change independently through an established contact and the company’s payment approval process. Replying or using contact details from the same message may reach the attacker.
A USB beside the shared computer
A drive labelled “Chart update” is left near an office PC.
A label is not evidence of origin. Keep the device unconnected; the responsible team can arrange an approved examination and transfer process.
Remote maintenance has finished
A verified technician has completed an approved support session.
Temporary access should end with its purpose. Record the changes and verify the agreed operational checks before handing the system back.
The engine control screen behaves strangely
You suspect a cyber incident on an operational system.
The first priority is safe operation. Report the observed behaviour; isolation and fallback decisions require the vessel’s procedures and appropriate authority.