Conceptual approaches to cyber risk management in maritime infrastructure in the context of digitalization

The article examines the evolution of security management models for maritime critical infrastructure in the context of increasing digitalization, cyber threats, and hybrid warfare. Drawing on the analysis of legal definitions and strategic documents from Australia, Canada, the United States, the European Union, and Ukraine, the study identifies key commonalities in the treatment of maritime transport as a component of national critical infrastructure. The research focuses on the shift from a traditional risk-based approach (RBA), which emphasizes risk identification and mitigation, to a resilience-based management (RBM) model that integrates adaptive capabilities, system redundancy, and recovery mechanisms. The article analyzes international regulatory frameworks, including the ISPS Code, the U.S. Maritime Transportation Security Act, and the Network and Information Security Directive 2, which require port and shipping operators to implement systematic risk assessments and protective measures. The study also highlights advanced digital tools such as the Port Community System «PortNet», AIS monitoring systems, and digital twins, which are increasingly used to model, predict, and prevent infrastructure disruptions, improve situational awareness, and support rapid response. In addition, recent reports by organizations such as the European Union Agency for Cybersecurity (ENISA) and the Atlantic Council confirm the importance of building cross-sector cooperation and proactive threat intelligence sharing mechanisms. The findings indicate that Ukraine lacks institutional coordination, sector-specific Computer Emergency Response Team (CERT) units for maritime cybersecurity, and a unified interagency strategy for cyber risk management. The fragmentation of responsibilities and the limited integration of ports into national cybersecurity systems create vulnerabilities in the maritime domain. The results can be applicable in policy formulation, institutional reform, regulatory harmonization, capacity-building programs, and the development of national maritime cybersecurity frameworks.