Cybersecurity for ships in operation
Improving ship cyber resilience through organizational and technical measures
Ships in operation are prime targets for cyberattacks due to increasing digitalization and connectivity. By implementing cybersecurity and safety measures, shipowners can protect their vessels.
Why is cybersecurity for ships important?
As shipping continues to modernize and the adoption of autonomous vessels grows, investing in maritime cyber risk management is essential to safeguard systems against digital threats.
The benefits of strong cybersecurity for ships include:
Safety of navigation and communication systems, reducing the risk of collisions or groundings
Data protection for confidential cargo details and other sensitive information
Safeguarding against operational disruptions that can impact the supply chain
Compliance with mandatory International Maritime Organization (IMO) regulations related to cyber risk management for ships in operation
How can I develop a cybersecurity plan for my ships?
To help shipowners protect their vessels and comply with IMO regulations, Bureau Veritas has developed a comprehensive cybersecurity framework.
Our experts are available to guide shipowners step-by-step through the development, implementation and assessment of a customized cybersecurity management system.
-
Complete an inventory of connected onboard and onshore systems, networks and equipment
This inventory covers all onboard and some onshore Operational Technology (OT) and Information Technology (IT) systems and equipment. Our experts support shipowners in mapping a holistic overview of connected systems to gain a better understanding of the potential for a cyberattack.
-
Undergo a cyber risk analysis to identify systems and equipment vulnerable to cyberattacks
Following the mapping of IT and OT systems, ships in operation need to undergo a cyber risk analysis that assesses threats and vulnerable areas. Our experts can help shipowners evaluate how critical their equipment is and assess the mitigation measures to be applied.
-
Develop and implement a cyber risk management policy and procedures
Our experts support shipowners in creating a cyber policy for their whole fleet in operation that addresses onboard cybersecurity risks, roles and responsibilities, in line with the International Safety Management (ISM) code.
-
Earn a Bureau Veritas CYBER MANAGED class notation
This notation proves that ships in operation are compliant with IMO regulations and can continue sailing safely worldwide.
-
Comply with IMO regulations for cybersecurity
Ships in operation must comply with IMO Resolution MSC.428(98), which requires ships to include cyber risk management in their safety management systems. Bureau Veritas helps shipowners of in-service vessels verify compliance with this resolution, ensuring that all aspects of their cyber risk management policy have been implemented.
CHART BY BUREAU VERITAS - GAIN VISIBILITY ON ACTUAL CYBER RISKS
Cycbersecurity for ships in operation FAQs
-
What is the difference between IT and OT onboard?
Both Information Technology (IT) and Operational Technology (OT) systems onboard a ship comprise a range of hardware and software. IT systems are designed to protect data and prevent unauthorized access, as well as manage databases and maintenance systems. OT systems are focused on the physical operation of the ship, including propulsion and steering.
-
How often should a ship’s cybersecurity risk assessment be updated?
A ship’s cybersecurity risk assessment should be formally reviewed and updated at least annually, as well as following any significant operational changes, major software or hardware modifications, or cybersecurity incidents.
-
Is the CYBER MANAGED class notation mandatory?
The CYBER MANAGED class notation is not mandatory. However, it is a useful tool that serves as proof of compliance with other regulatory requirements.
Learn more about cybersecurity for ships in operation
- Image
- Image
- Image
- Image
- Image
- Image
- Image
- Image
