Abstract:

The energy sector constitutes one of the most important elements of critical infrastructure, and its uninterrupted operation is essential for ensuring national security and economic stability. A key component of Poland’s energy infrastructure is Naftoport in Gdańsk, which serves as the country’s primary maritime terminal for crude oil imports. The strategic importance of the facility increased significantly following the cessation of crude oil imports from the Russian Federation and the diversification of energy supply routes. The aim of this paper is to analyze the cybersecurity of Naftoport as an element of critical energy infrastructure and to assess its significance for ensuring Poland’s energy security in the context of contemporary cyber threats. The study applies the dogmatic-legal method based on an analysis of legal regulations concerning cybersecurity and critical infrastructure protection, including the NIS2 Directive and the Act on the National Cybersecurity System. The research is supplemented by a review of the relevant literature and an expert interview conducted with a cybersecurity specialist involved in the operation of Naftoport. The findings indicate that the implementation of NIS2 has contributed to the increased formalization of cybersecurity risk management, documentation requirements, and cooperation with national CSIRT teams. The study also identifies ransomware attacks, attacks on SCADA systems, AI-assisted phishing campaigns, and supply chain vulnerabilities as the most significant threats to fuel infrastructure operators. Furthermore, the paper proposes several de lege ferenda recommendations, including the development of sector-specific cybersecurity standards, the establishment of a centralized information system on high-risk suppliers, and the introduction of financial support mechanisms for critical infrastructure operators. The implementation of these measures could strengthen the resilience of Poland’s energy infrastructure and enhance national energy security.