Cybersecurity and resilience in the maritime sector Digital systems have become critical to core operations across the maritime sector. Ports, terminals, shipping companies and logistics operators increasingly rely on interconnected systems for navigation, cargo handling, communication, fleet management and operational coordination. “Maritime businesses are facing growing regulatory requirements relating to cybersecurity and operational resilience.” Maritime businesses are facing growing regulatory requirements relating to cybersecurity and operational resilience. In particular, the EU Network and Information Systems Directive (“NIS2 Directive”) and the Critical Entities Resilience Directive (“CER Directive”) establish comprehensive obligations for organisations operating critical infrastructure and essential services. Whilst the NIS2 Directive primarily focusses on cybersecurity, including risk management, incident reporting and supply chain security, the CER Directive takes a broader resilience perspective, covering physical security, operational continuity, crisis management and recovery capabilities. Together, these frameworks require organisations to adopt a holistic approach to operational risk management. Whilst these instruments establish a harmonised European framework, their implementation across member states will lead to variations in detail. Maritime businesses operating cross-border must therefore be prepared for a multi-layered and evolving regulatory landscape. For many organisations, the key question is no longer whether these frameworks apply. Increasingly, the challenge lies in translating regulatory requirements into practical governance structures, operational procedures, contractual arrangements and incident response frameworks. The focus is therefore shifting towards the effective implementation of these requirements at an organisational and operational level. “Systems that were previously isolated are increasingly connected to wider IT environments and external service providers.” This article outlines the key cybersecurity and resilience expectations arising from these frameworks and highlights the practical challenges maritime businesses face when implementing them in day-to-day operations. DIGITALISATION IS RESHAPING OPERATIONAL RISK STRUCTURES The maritime sector today depends heavily on digital and interconnected systems. Terminal operating systems, crane controls, fleet management platforms, cloud-based