Inmarsat Maritime, in collaboration with classification society ClassNK, has published a white paper exploring the impact of the International Association of Classification Societies’ (IACS) new unified requirements (URs) for cyber security on the shipping sector.
The publication outlines processes for shipping companies to demonstrate compliance with the forthcoming IACS URs E26 And E27, which come into force on 1 July 2024 and establish minimum requirements for the cyber-resilience capabilities of newbuild vessels and their connected systems, respectively.
While the paper reports that their implementation should provide “full visibility of a vessel’s computer assets and network infrastructure”, it also acknowledges the URs’ limitations, and the opportunities that exist for a more in-depth risk-assessment process and for organisations to apply additional attention to cyber-security policy and associated procedures.
“Best practice in addressing cyber-security requirements is to take a risk-based approach, where cyber-risk controls are implemented following a thorough risk assessment, and consider people, process, and technology in a balanced manner,” said Makiko Tani, Deputy Manager, Cyber Security, ClassNK.
“Among these, the human aspect is an important link, fostering cyber hygiene through training, while defining clear roles and responsibilities within an organisation. Furthermore, cyber-risk controls should be governed by the organisation’s established cybersecurity policy.”
IACS Unified Requirements E26 And E27 – Beyond Compliance can be accessed here.
