Force protection, in its broadest sense, encompasses all measures taken to safeguard personnel, equipment, and facilities from hostile actions. For the military, this includes battlefield tactics, intelligence gathering, logistics security, and the establishment of robust defensive perimeters. For critical infrastructure, it involves physical security, cybersecurity, and contingency planning to mitigate the impact of attacks. Russia’s struggles in both areas are glaringly apparent.

On the battlefield, Russian forces repeatedly demonstrated a lack of effective force protection. From the initial botched attempts to seize Kyiv to the protracted and costly battles in eastern Ukraine, Russian units suffered heavy casualties. This was often due to a combination of poor tactical decisions, inadequate reconnaissance, and a failure to adapt to the evolving battlefield. Ambushes, artillery strikes, and drone attacks took a heavy toll, revealing vulnerabilities in their supply lines and a lack of situational awareness. This inability to protect its forces has not only hampered Russia’s military objectives but also had a cascading effect on the security of its critical infrastructure.

The vulnerability of Russia’s infrastructure, particularly its energy sector, is a direct consequence of these force protection failures. Oil and natural gas fields, pipelines, and processing facilities, often located in remote areas, require robust security to prevent sabotage or attack. However, the demands of the war in Ukraine stretched Russia’s military resources thin, leaving critical infrastructure exposed.

Ukraine’s ability to strike targets deep within Russian territory, including energy facilities, demonstrates this vulnerability. These attacks not only disrupt energy production and supply but also have a significant psychological impact, undermining public confidence in the government’s ability to protect its citizens and vital assets.

Several factors contribute to Russia’s struggles with force protection and the resulting infrastructure vulnerabilities. Firstly, the sheer size of Russia and the length of its borders make it incredibly challenging to secure all potential targets. This geographical challenge is compounded by the fact that many critical infrastructure sites are dispersed and remote, making them difficult to defend effectively. Secondly, there are indications of potential intelligence failures. Russia may have underestimated Ukraine’s resilience and its ability to conduct effective counter-offensives, leading to a misallocation of resources and a lack of preparedness for attacks on its own territory. Thirdly, logistical issues plague the Russian military. Supply-chain disruptions, shortages of essential equipment, and a lack of well-trained personnel have all contributed to the erosion of force protection capabilities.

Furthermore, the potential for internal dissent and sabotage cannot be discounted. The war in Ukraine fuels anti-government sentiment in Russia, and there is a risk that individuals or groups opposed to the regime may seek to exploit the vulnerabilities of critical infrastructure to express their discontent. Such internal threats further complicate the task of ensuring the security of these facilities.

The implications of Russia’s failure to implement effective force protection are far-reaching. The disruption of energy supplies can have a devastating impact on the Russian economy, leading to shortages, price increases, and social unrest. Moreover, the vulnerability of critical infrastructure can undermine Russia’s international standing and its ability to project power. The perception of weakness can embolden adversaries and erode alliances, further isolating Russia on the world stage.

Russia’s ongoing struggles with force protection in the context of the Ukraine conflict have exposed critical vulnerabilities in its infrastructure, particularly its oil and natural gas fields. These vulnerabilities stem from a combination of tactical miscalculations, logistical shortcomings, intelligence failures, and the inherent challenges of securing a vast and geographically dispersed territory. The consequences of these failures are significant, with the potential to destabilize the Russian economy, undermine public confidence, and weaken Russia’s international standing. As the conflict continues, Russia will need to address these shortcomings if it hopes to protect its critical infrastructure and safeguard its national interests. The ability to learn from these failures and adapt its security strategies will be crucial for Russia’s long-term stability and its ability to project power in the region and beyond.

Joshua Thibert is a Contributing Senior Analyst at the National Institute for Deterrence Studies (NIDS) and doctoral student at Missouri State University. His extensive academic and practitioner experience spans strategic intelligence, multiple domains within defense and strategic studies, and critical infrastructure protection. Joshua currently resides in Columbus, Ohio.

Russia’s Vulnerable Underbelly: The Failure of Force Protection on Critical Infrastructure was originally published on Global Security Review.

Maritime ports authorize customs clearance and are involved in regulatory checks, ensuring compliance with national and international law. Ports perform most of these functions digitally. Maritime ports are now under serious threat of malicious cyberattacks that can disrupt and compromise port operations worldwide.

Industry is deeply interconnected, and a cyberattack on one major port can send shockwaves through global trade networks. Consider a scenario where a major port, responsible for handling millions of cargo containers, suddenly halts operations due to a cyberattack. Cranes freeze, logistics systems collapse, and cargo ships are left stranded at sea. This is not a hypothetical scenario; it is a real and escalating threat to global trade.

The maritime industry, long seen as the backbone of international commerce, now faces an urgent cybersecurity crisis. Ports are no longer just about cranes and cargo; they have evolved into digital ecosystems reliant on interconnected networks, automation, and artificial intelligence. As ports become smarter, they are also becoming more vulnerable. Cybercriminals are increasingly exploiting these vulnerabilities, causing financial losses, operational disruptions, and even national security risks.

Maritime cyberattacks are no longer rare occurrences, they are becoming alarmingly frequent. In 2023, a ransomware attack crippled more than 1,000 vessels by targeting a software provider used across the shipping industry. The attack forced the shipping industry to shut down its ShipManager system, affecting global supply chains. A year earlier, the Port of Lisbon suffered a cyberattack that took its website offline for days, with the ransomware group LockBit claiming responsibility and alleging that it had stolen financial reports, contracts, and ship logs.

In Germany, a 2022 cyberattack on two oil companies disrupted fuel shipments, forcing Shell to reroute supplies and exposing the vulnerabilities of critical maritime infrastructure. The 2017 NotPetya ransomware attack, which paralyzed Maersk and caused an estimated $300 million in damage, remains one of the most devastating cyberattacks in shipping history.

Ports are among the most attractive targets for cybercriminals. The motives behind these attacks vary as some hackers seek financial gain, while others aim to steal sensitive trade-related data, and some may even use cyberattacks as part of hybrid warfare.

The economic consequences are staggering, from ransom payments and insurance hikes to delays that can ripple across global supply chains. Beyond financial losses, cyber threats to ports pose serious security risks. For example, a well-coordinated cyberattack on a major port could disrupt military logistics, cripple trade networks, or even manipulate cargo data to facilitate smuggling and illicit trade.

Hackers carry the potential for unauthorized intrusion into ports’ digital networks and interrupt ports’ routine operation through malicious software attacks. The workforce involved in port management may be trapped into revealing sensitive data by clicking on malicious links. The hackers can also disrupt digital networks that regulate critical port infrastructure, such as cranes, pumps, and valves. Supervisory control and data acquisition (SCADA) systems can come under cyber threats disrupting routine functions. Nonstandard computing hardware like sensors, actuators, or appliances that transmit data from the network wirelessly are vulnerable to data theft.

Hackers can steal data such as cargo manifests, crew information, and financial records. They can also manipulate data, such as altering cargo manifests, or manipulate navigation systems. Hackers can also steal intellectual property, such as trade secrets or proprietary software.

Another pressing issue is supply-chain security. Ports rely on a complex web of third-party vendors for logistics, software, and cargo management. If one vendor is compromised, the entire port system could be at risk.

Hackers can also use unmanned aerial vehicles (UAVs) for surveillance means or to attack port infrastructure, such as damaging equipment or disrupting power supplies. Ports may be exposed to cyberattacks through third-party suppliers, such as logistics providers or maintenance contractors. Ports may be exposed to cyberattacks through cargo and containers, which may contain malicious devices or software.

Cybersecurity in the maritime sector is often treated as an afterthought. Many ports still operate with outdated software and weak security protocols, making them easy targets. Given the critical role of ports in the global economy, the widening cybersecurity gap is a growing challenge. Strengthening port security necessitates urgent regulatory mechanisms, some of which are proposed below.

Regulatory Mechanisms

To mitigate the growing cyber threat, ports should adopt internationally recognized cybersecurity frameworks. First, ports should adhere to the rules and protocols of the International Maritime Organization’s (IMO) Maritime Cyber Risk Management Guidelines, the National Institute of Standards and Technology (NIST) Cybersecurity Framework, and ISO 27001 standards. Implementing these frameworks will help establish clear security protocols and ensure that ports are prepared to defend against cyberattacks.

Second, network security should be reinforced by segmenting information technology (IT) and operational technology (OT) systems, preventing malware from spreading across critical infrastructure. Regular penetration testing and vulnerability assessments can further identify weak points before attackers do.

Third, investing in cybersecurity training for port workers is equally crucial. Many cyberattacks exploit human error—phishing e-mails, weak passwords, and social engineering attacks remain among the most common entry points for hackers. A well-trained workforce can serve as the first line of defense against these threats.

Fourth, leveraging artificial intelligence and machine learning for threat detection can enhance ports’ ability to identify cyber risks before they escalate into full-scale attacks. Artificial intelligence (AI)–led systems can monitor network activity in real time, flagging suspicious behavior and predicting potential breaches before they happen. In this regard, the strict security assessments of third-party vendors and blockchain-based cargo tracking can enhance transparency and reduce the risk of supply-chain cyberattacks.

Fifth, beyond prevention, ports should also be prepared to respond effectively to cyber incidents. For this, establishing cyber incident response teams (CIRT) can ensure that ports have trained professionals ready to mitigate and recover from cyberattacks swiftly.

Sixth, regular cyber drills and crisis simulations should be conducted to test response plans. This ensures that when an attack occurs, the damage is minimized, and recovery is swift.

Seventh, international collaboration to deal with these threats is essential. Governments, port authorities, and private stakeholders should work together to share intelligence, standardize security protocols, and invest in collective defense mechanisms.

Public-private partnerships can play a key role in funding advanced cybersecurity infrastructure, while international regulatory bodies like the IMO must enforce stricter cybersecurity mandates across the industry. Finally, as ports transition into smart ports, powered by the internet of things (IoT), AI, and automation, cybersecurity should be at the forefront of maritime security strategies. Emerging technologies like quantum computing and zero trust architecture will play a crucial role in strengthening digital defenses, but ports should remain vigilant. The very technologies designed to enhance security could also introduce new vulnerabilities if not properly managed.

Cybersecurity is no longer just a technical issue; it is a fundamental pillar of modern port management. If cybersecurity continues to be treated as an afterthought, the next major cyberattack could bring global trade to a standstill. Ports are the lifelines of the world economy, and securing them is not just about protecting data, it is about safeguarding the stability of international commerce and national security.

Maryyum Masood is working as a Research Officer & Associate Editor at the Center for International Strategic Studies (CISS) Islamabad. She is an MPhil scholar in the Department of Strategic Studies at the National Defense University (NDU) Islamabad.

Rizwana Abbasi is an Associate Professor of Security Studies at the National University of Modern Languages, Islamabad, a non-resident Fellow of the Center for International Strategic Studies (CISS), Islamabad, and a Visiting Fellow at the Central European University of Austria.

Cybersecurity Framework for Maritime Port Management was originally published on Global Security Review.

For NATO to improve its deterrence strategy it must prioritize cybersecurity, enhance space asset resilience, address hypersonic threats, improve missile defense systems, adapt to drone warfare, deter conventional-nuclear integration, monitor China’s nuclear capabilities, and strengthen political unity.

​

The Evolving Context for Deterrence was originally published on Global Security Review.