The modern warship is, underneath the steel, a dense bundle of networks. Navigation, machinery control, weapons, comms, all of it runs on connected systems now. That reality reframed how I think about readiness, because a clever adversary no longer needs a missile to take a ship out of the fight. Training crews to survive a cyber attack at sea has quietly become one of the harder problems in the service, and one of the least understood from the outside.

Why you cannot just hack the real ship

The obvious approach would be to attack a vessel's live systems and watch the crew respond. It does not work that way. Cyber operations on in-service naval networks are effectively forbidden during afloat exercises, for the plain reason that you do not want to brick the propulsion of a deployed warship to prove a point. There is no approval path for it, and frankly there should not be. So the training has to be cleverer than the threat it prepares for.

How the drills actually run

What I have seen, and what the open literature describes, is a workaround built on isolation. Teams bring standalone rigs aboard that mimic real bridge and engineering systems but touch nothing important. During one US exercise, separate bridge and engineering control components were installed on a small test craft, attacked by shore and sea based forces, then removed afterward. Royal Navy teams have run similar work, defending an operational technology network while attackers overloaded it and even spoofed temperature sensors to simulate fires breaking out onboard.

The part outsiders underestimate

The detail that stays with me is how individual each ship is.Shipboard OT and ICS systems drift into unique configurations over years of refits and patches, so a generic playbook rarely fits the hull in front of you. Good training has to account for that, and for the actual skill level of the crew aboard. In practice it means drilling:

• Detection of abnormal behaviour in machinery and sensors
• Isolation of an afected network without losing the ship
• Manual fallback when automated systems cannot be trusted

None of this is glamorous, and it never makes the recruitment posters. But it is why I keep arguing that cybersecurity matters to everyone on board, not just the specialists with the laptops down in a back office.