Maritime Cybersecurity Risk Management: Protecting Vessel Navigation and Communication Systems in Indonesian Merchant Shipping

The accelerating digitalization of vessel navigation and communication systems has introduced unprecedented cybersecurity vulnerabilities into maritime operations, threatening the safety, security, and commercial continuity of global and Indonesian shipping. This study investigates maritime cybersecurity risk management practices aboard Indonesian merchant vessels, proposing a cyber-resilience maturity model specifically designed for bridge system protection and crew cyber-awareness development. Employing a qualitative research design with thematic analysis, the study engaged maritime cybersecurity specialists, vessel masters, shipping company IT security officers, and maritime safety academics as primary respondents. Findings demonstrate an overall cybersecurity readiness composite score of 4.09 out of 5.00, with crew cyber-awareness and incident response protocol deficiencies identified as the most critical vulnerability domains. The research demonstrates that Indonesian merchant vessels face elevated cybersecurity exposure attributable to inadequate cyber hygiene protocols, insufficient crew training, and the absence of vessel-specific cyber risk management frameworks. The study contributes a cyber-resilience maturity model and audit framework adaptable for integration into STIP Jakarta's maritime safety training curriculum and industry application across Indonesian shipping companies.