Which practice helps protect shipboard systems from cyber-attacks by maintaining segmentation and recoverability?

Which practice helps protect shipboard systems from cyber-attacks by maintaining segmentation and recoverability?

• A. Regular software rebooting and password changes.
• B. Installing antivirus on every device.
• C. Network segmentation and backups.
• D. Isolating the crew from any network activity.

Answer: (C)

Network segmentation and backups build resilience by containing breaches and enabling rapid recovery. Segmenting the ship’s networks into isolated zones—such as navigation, propulsion, and combat systems—with controlled gateways means an attack in one area can’t automatically reach other critical systems. This containment limits the blast radius and helps operations continue in others while the issue is addressed. Backups provide recoverability: regular, tested copies of essential data and system images, stored offline or in a protected vault, allow you to restore services quickly after a breach, ransomware, or data corruption, minimizing downtime. Other options offer useful hygiene or defense measures but don’t achieve both containment and rapid recoverability. Regular rebooting and password changes help with routine maintenance and credential hygiene but don’t stop lateral movement or ensure recovery if a breach occurs. Antivirus on every device can aid detection, but threats can bypass it and it doesn’t guarantee the ship can be restored to full operations. Isolating crew from networks is impractical for regular operations and still doesn’t establish the necessary segmentation and recoverability mechanisms across critical systems.

Network segmentation and backups build resilience by containing breaches and enabling rapid recovery. Segmenting the ship’s networks into isolated zones—such as navigation, propulsion, and combat systems—with controlled gateways means an attack in one area can’t automatically reach other critical systems. This containment limits the blast radius and helps operations continue in others while the issue is addressed. Backups provide recoverability: regular, tested copies of essential data and system images, stored offline or in a protected vault, allow you to restore services quickly after a breach, ransomware, or data corruption, minimizing downtime.

Other options offer useful hygiene or defense measures but don’t achieve both containment and rapid recoverability. Regular rebooting and password changes help with routine maintenance and credential hygiene but don’t stop lateral movement or ensure recovery if a breach occurs. Antivirus on every device can aid detection, but threats can bypass it and it doesn’t guarantee the ship can be restored to full operations. Isolating crew from networks is impractical for regular operations and still doesn’t establish the necessary segmentation and recoverability mechanisms across critical systems.