Ensuring cyber resilience to meet new IACS requirements

Vessels are becoming more connected, and increasingly autonomous systems are being introduced onboard. This means that cyber resilience cannot be treated as optional. With two new Unified Requirements (UR), IACS has taken steps to ensure that cyber resilience is given serious consideration from the design phase.

Entering into force on January 1, 2024 and applying to all new builds and contracts on and after this date, the two URs are:

• UR E26, which aims to ensure cyber resilience by design for vessels
• UR E27, which requires cyber resilience by design of all systems and equipment onboard

Compliance with UR E26 may represent a challenge for shipyards, though some have already invested in preparations to gather the necessary knowledge. Yards will be assisted by UR E27 as this will require systems and equipment manufacturers to ensure cyber resilience before these elements are integrated onboard.

Creating value with Navarino

Having played a contributing role in developing the new URs, Bureau Veritas is also looking to bring valuable cyber resilience solutions to end users. In this context, we signed a cooperation agreement with Greek maritime technology company Navarino. Navarino’s team of proven engineers has lengthy experience in the maritime industry, making them ideal partners for the Bureau Veritas cyber team in this venture.

We recently granted type approvals to three Navarino products: Infinity, Spectrum and Angel. This last product supports the intentions of UR E26, as it is dedicated to ensuring network segmentation. It is both itself cyber secure by design, and a cyber security product for connected assets.

Angel’s type approval was granted based on our Rule NR 659, and on compliance with UR E27. This is a newer field in our industry, and our experts’ ability to clarify the regulatory aspects is a valuable asset.

Answering a growing need

Bureau Veritas Marine & Offshore has offered pioneering cyber services thanks to the expertise of our teams. Our experience with both operational and information technology systems expands beyond risk assessment to in-depth technical knowledge. As shipping embraces digitalization, we will continue to mobilize this expertise to aid our clients.

Demand for greater operational efficiency and environmental performance will in turn drive a need for increased connectivity. But with growing connectivity will come both an increase in cyber threats and in the regulations to help protect against them. We are dedicated to ensuring ship owners and operators can embrace the simplification and optimization this new world offers – in complete safety.