There are already existing standards for Security management in the supply chain (ISO 28000, ISO 28001) especially for seaport operations there are guidelines in ISO 28004 part 2.

All the new issues occurring with security flaws in IoT and other cybersecurity threads need to be described and mitigated within the framework of this standards. You should first check whether and which of this aspects are already covered by existing work. Even if they are described in general somewhere else, it might be worth to elaborate how they can be fitted into the framework of ISO28000ff.

Thanks a lot Ralf Roahring this is very helpful

Clouds are here to stay, and the same holds for cyber-physical systems—not to forget their combination. In light of these changing paradigms, it is of utter importance to reconsider security as both introduce new challenges. Overcoming the concept of zoned networks, clouds make former internal traffic traveling the Internet. Cyber-physical systems include physical parts into computing and make them potential targets for cyber attacks—a dare as a high number of physical parts have originally been developed to be stand-alone. Cyber-physical cloud computing reinforces the need for a thoughtful security concept. Firewalls are among the basic building blocks in network security and are offered by various cloud providers; however, the question on their quality of protection arises. In this paper, we assess firewall offers of five major cloud providers with respect to cyber-physical system integration. Therefore, we study their default configuration, configuration capabilities, documentation, and filtering behavior. We developed an extensible firewall monitoring tool that enables customers to probe their provider’s filtering behavior— an information of interest for risk management or further security consideration. Re-assessing filtering behavior, we found that all offered firewalls have evolved over a time period of more than a year: Configuration possibilities have been enhanced, more illegitimate packets are filtered now, and stateful behavior was discovered at a certain provider.

Port Management: Cyber space need to be secured in all aspect of life. First you should identify all the communication points in ports management. Then have look on the possible sensor, computing and communication devices placed on the ports. And hence onward starts finding vulnerability at each places search or create new technology for fixing these vulnerabilities.

Thanks a lot Ahmed :)