Cydome has launched a third-party vendor compliance and risk management platform designed to help users manage cybersecurity certifications and approvals.
The web-based system provides a central repository for vendor documentation and dashboards showing compliance status across vessels, sites, vendors and systems. It also identifies missing or unverified information and certificates approaching expiry.
The platform initially focuses on IACS Unified Requirement E27, which covers the cyber resilience of computer-based systems deployed on board vessels. Vendor documentation can be updated through the platform and reflected across customer dashboards, while automated reminders can request updated information as certificates approach expiry.
“E27 introduced important rules for mandatory supply-chain cyber resilience,” said Cydome VP R&D and co-founder, Alon Ayalon.
“However, this also brings an operational complexity for managing the compliance process. Shipowners may rely on dozens or even hundreds of vendors across a fleet, each with its own devices, certificates, and sub-suppliers.”
“Until now, most of this has been tracked manually using spreadsheets and emails to different stakeholders. Our solution replaces that administrative complexity with a single, structured system that automates the process and reduces overhead for shipping companies, vendors and class societies.”
Cydome said the platform can provide an overall compliance score and details of vendor equipment and certification status, including items that are missing, unverified or nearing expiry.
The company plans to extend the platform beyond E27 to support additional frameworks including ISO and national standards.
