QHSE Management System Number SMMS8-2

Issue date 07.17

Revision date 06.20
Safety Management Manual
Page 1 of 1

Risk Assessment 52North Ship Management B.V. Date: 27 Jan 2021

Ship Breadbox Viper Location Port Konta
Assessment team members Captain Martijn Mobach Captain Andrey Degtyarev Job Id if apliccable
Risk description situation or task Cyber security - Risk assesment

Likelihood / Risk Residual Risk

Hazard Consequence Risk Reduction Measures
severity H/M/L H/M/L
Cyber attack on vessel’s primary systems 2 A Low None: just be vigilant Low
Redundancy by three desktop computers and
Cyber attack on administratrive computer systems 3 B Low Low
Googel chrome book
Back up communication by FBB phone and IMC-
Cyber attack on communication systems 3 B Low Low
telex / email

In case residual risk is high, consider alternative ways or methods to perform the task or change the situation and make a separate RA for this. If the residual risk level is still high, this Risk
Assessment must be forwarded to the office for additional evaluation and approval by DPA, Fleet manager or Superintendent before performing the task.

Existing controls Doc Ref / job Id

The ships primary systems are: Main engine, Auxiliary Engine, Steering gear, GYRO Compass, GPS, autopilot, ECDIS. All primary systems are all NOT Low
connected to the administrative computer system and NOT connected to any communication device. Therefore there is no direct connectivity
between CYBER and the primary systems of the ship
The ships administrative system is not connected to the ships primary systems.
The ships administratrive computer system is connected to FBB, which is not always open and is not online continuously.
The ships e-mail system is connected also by Cellphone to the ships administrative computer system.
The ships administrative computer system is connected by UTP cables. There is redundancy of 3 desktop computers and 1 ACER Chromebook. There
are two paper printers on board.

Name team leader Captain Andrey Degtyarev Signature team leader

To be stored in Radiantfleet

The lay out of the Risk Assessment form may not be changed without permission of the management