From June 10-13, the U.S. Department of Homeland Security (DHS) partnered with the Government of Indonesia under U.S. Department of State International Narcotics and Law Enforcement and U.S. Department of Defense Threat Reduction Agency programs to enhance the security and resilience of the international maritime transportation system. This reflects a joint commitment by both nations to strengthen cybersecurity collaboration and protect maritime critical infrastructure from malicious cyber intrusions and cyber-attacks under an upgraded Comprehensive Strategic Partnership.
In partnership with U.S. Embassy Jakarta, the Government of Indonesia, and various Indonesian maritime port authorities, DHS conducted a successful tabletop exercise and workshop focused on enhancing maritime cybersecurity and incident response capabilities in Indonesia and the Indo-Pacific region.
The collaboration built upon Secretary Mayorkas’s priority to enhance close cooperation with partners in the Indo-Pacific region with focused discussions on protocols for incident response, information sharing, and identifying future bilateral cooperation to mitigate current and emerging cyber threats to critical maritime infrastructure. Held in Surabaya, this was the first comprehensive port-focused cybersecurity tabletop exercise held with Indonesian counterparts.
The exercise allowed DHS and Indonesian cybersecurity officials to enhance response capabilities through a series of simulations, including a major cyber incident impacting port operations with cascading impacts from exploited vulnerabilities in ship-to-shore cranes and ransomware attacks that disabled critical systems and exfiltrated proprietary and personal information. Throughout the exercise, Indonesian public and private sector participants discussed mitigation techniques and worked to operationalize lessons learned, enhancing maritime cyber resilience.
"The maritime transportation system is a vital lifeline for global trade and commerce," said Under Secretary for Policy Rob Silvers. "This exercise allowed us to stress test cyber incident response plans with Indonesian counterparts, as well as identify areas where we can collaborate more closely to secure the maritime domain from cyber threats."
“By sharing information, technology, and know-how, the United States and Indonesia will be able to successfully address marine and cyber challenges,” Consul General Jonathan Alan stated. “Exercises like this help not only strengthen our technical capabilities but forge invaluable future partnerships; the United States looks forward to building on these important exchanges.”
Following the tabletop exercise, the U.S. Coast Guard facilitated a maritime cybersecurity workshop for public- and private-sector Indonesian maritime counterparts to share U.S. Coast Guard policies and best practices related to maritime cyber incident prevention and response. In particular, they outlined efforts related to President Biden’s February 2024 Executive Order on Amending Regulations Relating to Safeguarding Vessels, Harbors, Ports, and Waterfront Facilities of the United States.
"Cyber threats in the maritime environment continue to grow more sophisticated," said Jon Kennedi, Director of the Indonesian Directorate of Sea Transportation (KPLP). "Confronting these threats requires a comprehensive approach that integrates operational coordination, capacity building, risk information sharing across governments."
“The Cybersecurity & Infrastructure Security Agency (CISA) was honored collaborating during this week’s joint exercise,” said CISA’s Deputy Executive Assistant Director for Infrastructure Security Steven Harris. “This underscores international planning importance strengthening defenses ensuring infrastructure resilience.”
The three days were coordinated by DHS Office Policy U.S Embassy Jakarta led by CISA USCG Subject matter inputs other entities including Customs Border Protection Intelligence Analysis Supply Chain Resilience Center Experts attended Ministry Sea Transportation Harbormaster Port Authority Customs National Cyber Crypto Agency Ministry Defense Police Intelligence Surabaya Container Terminal Tanjung Priok Taluk Lamong Pertamina Patra Niaga Meratus Shipping International AKR Tanto Intim Recognized Security Organization.
