Solid numbers for an ephemeral threat

Some ports might be tempted to characterise cybercrime as an unseen threat, absorbing unlimited costs to fix, with an unquantifiable result.

"The 'perfect plan' simply doesn't survive contact with reality," Dan Solomon, Optimal Risk

But there are ways to firm up the parameters: Dan Solomon of Optimal Risk says a professionally set exercise “will give the port or terminal the top ten issues it really needs to address, rather than scaring everyone silly with the 70 or so items an audit will throw up” and even better, will get people out from behind the departmental boundaries.

Mr Solomon adds an advanced penetration test wakes people up from the belief that you can work out a plan and leave it on the shelf: “The ‘perfect plan’ simply doesn’t survive contact with reality. You’ve actually got to have something that you are familiar enough with to adapt and flexible enough to work with on the fly.”