Creating Operational Resilience: Engineering during a Cyberattack

In August 2024, the Port of Seattle experienced a ransomware cyberattack that necessitated a complete shutdown of its information systems. Refusing to pay the ransom, the Port initiated a months-long process of rebuilding its systems, significantly impacting the engineering team’s routine facility support, project development, construction project support, and incident response capabilities. Despite these challenges, the Port’s existing emergency preparedness measures, coupled with creative post-attack adaptations and strong coordination with internal and external partners, effectively mitigated long-term operational and capital investment impacts. An examination of the Port’s experience, including the effectiveness of its preparations, adaptive strategies, and recovery framework employed, yields valuable lessons and recommendations for others seeking to enhance their resilience against cyberattacks and system outages.