Leveraging advanced technologies and strategies for port cyber resilience: Strengthening incident response and recovery

Abstract

This study assesses incident response and recovery (IRR) tasks and their integration with smart technologies in port cybersecurity, with a focus on Laem Chabang Port (LCP), Thailand. Using the Delphi method, expert consensus was gathered to identify essential IRR tasks, challenges in their implementation, and smart technologies for improvement. The findings emphasize three key components for effective IRR: well-structured tasks, enhanced communication mechanisms, and the integration of emerging technologies such as the Internet of Things (IoT), artificial intelligence (AI), and blockchain. These technologies facilitate real-time monitoring, incident classification, and recovery coordination, thus enhancing both proactive and reactive cybersecurity measures. While the study focuses on LCP, its findings are applicable to ports globally, offering actionable insights for improving IRR frameworks, enhancing system integrity, and optimizing recovery efficiency. The study also highlights the need for transparent communication strategies and suggests the adoption of smart technologies to align with the global digital transformation of port operations. Future research should explore broader stakeholder involvement, comparative studies across ports, and empirical validation of smart technology effectiveness in real-world cybersecurity incidents.