ABS Dropped Object Prevention

Program and Cybersecurity

Unni Nair| 09 October 2017
Dubai, UAE

2017 American Bureau of Shipping. All rights reserved

Topics

Dropped Object Prevention On Offshore Units And

Installations.
Maritime Cybersecurity

2 | Agenda
Research Findings Upstream Oil and Gas
Dropped Object Incidents 2003-2014
- 1,221 fatalities in the upstream industry

- Think about it
An 8-pound wrench dropped from
200 feet has an impact load of 2,833
psi

Dropsonline.org

Source: US Department of Health and Human Services Centers for Disease Control and Prevention, National Institute for Occupational Safety and Health

6 |ABS Dropped Object Prevention Program

Research Findings Offshore Industry
Direct Costs of a Fatality
- Costs associated with family support and legal settlements
- Costs associated with handling the deceaseds remains
- Hazmat-associated expenses
- Loss of day rate, loss of hire and consequential costs associated
with keeping the rig / unit active
- Investigation costs
- Costs of emergency management resources
- Cost of corrective actions required prior to returning to work
Indirect Costs of a Fatality
- Emotional distress of crew
- Company loss of reputation
- Investigative resources and management of internal process
changes

4 | ABS Dropped Object Prevention Program

ABS Dropped Object Prevention Program

The traditional approach to managing

dropped objects in the offshore work
environment has been to apply best practices
for existing equipment. ABS has raised the
bar on best practice by publishing the first-
of-its-kind class standard.

The ABS standard formalizes the dropped

object prevention management process for
the first time.

5 | Title of Presentation Goes Here

Research Findings Dropped Objects
Dropped Object Safety - Brief History
- Safety culture has matured over past 40 years
- Dropped Object Prevention focus in last 7 to 10 years
- Best practices and training centered under Dropsonline.org
- No separate international standards for management programs
- Not included in equipment design standards
Dropped Object Safety - Current Status
- Focus is on existing equipment at height
- Company-specific processes and procedures
- Lack of data-sharing on dropped object incidents
- Limited focus on equipment design factors
- Dropped object forums promoting attention

6 | ABS Dropped Object Prevention Program

ABS Guide for Dropped
Object Prevention on
Offshore Units and
Installations
Providing Solutions as a Trusted Advisor

7 | ABS Dropped Object Prevention Program

ABS Class Solutions Asset Owner
ABS DOPP Guide Chapter 1
- Introduces Dropped Object Prevention into the classification arena
- Describes available class notations
- Establishes criteria for maintaining class
ABS DOPP Guide Chapter 2
- Focuses on existing equipment at height
- Establishes requirements for management program
- Incorporates and expands upon best practices

8 | ABS Dropped Object Prevention Program

ABS Class Solutions Equipment
Manufacturer
ABS DOPP Guide Chapter 3

- Introduces equipment design

requirements
- Establishes the philosophy of
inherently safe design

9 | ABS Dropped Object Prevention Program

ABS Class Solutions - Surveyor

ABS DOPP Guide Chapter 4

- Survey requirements for class
initiation
- Periodic survey requirements for
maintaining class
- Sets requirements for an
External Specialist

10 | ABS Dropped Object Prevention Program

ABS External Specialist
Service suppliers
Provide highly specialized service at the
request of equipment manufacturer,
shipyard, vessel owner or other clients
Offer supporting information in
connection with dropped object surveys
Guiding Document: Chapter 4 Appendix
1: Procedural Requirements for ABS
Recognized Dropped Object Prevention
Specialists

11 | ABS Dropped Object Prevention Program

ABS Guide for Dropped Object Prevention on
Offshore Units and Installations: Class Choices

Class DOPP Class DOPP+ Optional

Approval of the on- Approval of the on- Owners option to
board drops board drops expand zone
prevention prevention coverage
management program management program
to the ABS Guide. May include below
to the ABS Guide,
deck work areas +
including certification
accommodations
of equipment for
drops-resistant
elements.

12 | ABS Dropped Object Prevention Program

Potential Benefits
For Owners
- Safety makes for excellent business
- Cost savings from reduced incidents and injuries
- Improvements to an operations productivity
- Enhanced company safety culture
- Reduced potential damage to equipment
- Recognition and publicity
- Class designations symbol of highest safety standards compliance

For Equipment Manufacturers

- Promotes product design improvement
Inherently safe design principles
- Products reviewed against more stringent sets of rules and
standards
- Marketing edge Type Approval seal
- Recognition and publicity

13 | ABS Dropped Object Prevention Program

Maritime Cybersecurity
Maritime Cybersecurity

14 | Maritime Cybersecurity
Petya and NotPetya: Real Effects
27 June malware
attack against
Maersk Line caused Source:
global IT and https://www.maritimeprofessional.
com/news/cyber-attack-hits-
communications to container-terminals-306770
go dark
- Over 600 offices, 17
ports impacted
- Data lost in many Source:
https://www.maritimeprofessional.
locations com/news/maersk-says-
breakdown-could-global-306761

Source: https://phys.org/news/2017-08-moller-maersk-
cyberattack-million.html

15 | Are Your Systems CyberSafe?

Risk and Automated What are acceptable risks?
Systems What are unacceptable
risks?
RISK FACTORS What is the organizations
Can Point To risk appetite?

RISK CONDITIONS
Which Are Found By

RISK ANALYSIS
That Points To

ORGANIZATIONAL RISKS Pressmaster / Shutterstock

16 | Are Your Systems CyberSafe?

What We Want But Our Starting
from Cybersecurity Conditions Are Often
Not Ideal
Safe and reliable
operation of automated Outdated
and cyber-enabled infrastructure
systems
Understandable and Insufficient systems
workable cybersecurity knowledge or
guidance process knowledge
Uniformly practical
policies and procedures Application
Minimal implementation vulnerabilities
impact mostly unknown
Confidence in our
systems
Compromised
credentials
17 | Are Your Systems CyberSafe?
 ABS Cybersafety

Cyber threats and attacks are happening around the world.

Do you know how to protect your valuable assets?
The leading cause of cybersecurity breaches are
unintentional acts via common points of vulnerability:
Fortunately, most cyber issues are preventable.
ABS can help.

18 | Are Your Systems CyberSafe?

ABS Cybersafety

The ABS CyberSafety program provides asset owners,

shipyards, designers, vendors and ship managers with
tools and knowledge to understand, manage and help
mitigate the risks connected to cybersecurity, software
quality and data integrity.

19 | Are Your Systems CyberSafe?

Common Points Of Vulnerability:
Web browsers
USB ports
Wireless routers
Mobile telephones
Remotely operated systems and remote access to
shipboard components
Navigation/GPS systems (chart updates)
Personal devices
Entertainment systems/WiFi Internet/Satellite systems

20 | Are Your Systems CyberSafe?

Cybersecurity

When these common points of vulnerability are breached,

critical activities can be compromised, including:
Propulsion plant control
Navigation/ship control
Drilling system control
Ballast system control
Crew management

21 | Are Your Systems CyberSafe?

Cybersecurity

The ABS Guide for The Implementation of Cybersecurity for

Marine and Offshore Operations provides a model for
implementing cybersecurity programs.
The ABS Guidance Notes for the Application of
Cybersecurity Principles to Marine and Offshore Operations
describes industry best practices for protecting
organizations from cyber threats.
These Guidance Notes apply to cybersecurity
implementations for ships, platforms, vessels of any type.

22 | Are Your Systems CyberSafe?

CyberSafety program

The multifaceted ABS CyberSafety program comprises:

Onboard Operational Technologies (OT) and Information
Technologies (IT) assessments
A review of owner/operator cyber capabilities
Cyber risk assessments
Cybersecurity management system assessments
Verification and validation of software quality engineering
practices

23 | Are Your Systems CyberSafe?

ABS CyberSafety Engagement Options

ABS issues a Cyber Certificate for compliance with ABS

criteria. The notation indicates the level of cyber
preparedness of the owners/operators, people, processes,
procedures and assets.
CS1 Informed CyberSafety Implementation
Informal management of risks, policies and procedures.
Informal management of the OT and/or IT cybersecurity
threats and technology landscape.
OT - Operational Technologies
IT - Information Technologies

24 | Are Your Systems CyberSafe?

ABS CyberSafety Engagement Options

CS2 Rigorous CyberSafety Implementation

Formal systematic risk management via global enterprise
policies and procedures. The organization is fully resourced
to manage the OT and/or IT cybersecurity threats and
technology landscape and can effectively respond to
changes in risk.

25 | Are Your Systems CyberSafe?

ABS CyberSafety Engagement Options
CS3 Adaptive CyberSafety Implementation
Highest level of Readiness
Formal systematic risk management via global enterprise
policies and procedures with demonstrable continuous
improvement processes. Fully resourced to manage the OT
and/or IT cybersecurity threats and technology landscape.
Effective proactive responses to changes in risk.

26 | Are Your Systems CyberSafe?

ABS CyberSafety Engagement Options
A plus appended to the notation, e.g. CS1+, indicates the
shore side facility complies with the ABS Cyber Guide in
addition to the asset.

27 | Are Your Systems CyberSafe?

 Thank You
www.eagle.org

2017 American Bureau of Shipping. All rights reserved