Cyber security for system suppliers
Solutions and services to protect against cybersecurity risks
To manage cybersecurity risks, shipowners must ensure that the connected equipment and systems onboard are protected before design and construction begin. This means selecting products designed in accordance with the highest cybersecurity standards from verified cyber solution and services manufacturers and providers.
Bureau Veritas supports shipowners’ due diligence by offering type approval certifications for onboard connected systems, equipment, solutions and services.
Key benefits of type approval certifications for system suppliers
- Demonstrate that design of onboard equipment, solutions and services have been carried out in accordance with cybersecurity requirements
- Assure that technology meets the latest standards for cyber safety and security
- Show recognition from a trusted classification society
How can I earn a type approval certificate for ship cybersecurity?
Bureau Veritas provides type approval certificates to manufacturers and solutions providers whose technologies meet stringent cybersecurity requirements.
To obtain a type approval certificate, suppliers must show that their products are secure by design and compliant with Bureau Veritas’ NR 659 Rules on cybersecurity.
With this certification, clients of manufacturers and solutions providers are reassured that their onboard equipment, solutions and services are truly cyber resilient and compliant with IACS UR E27.
Cybersecurity for system suppliers FAQs
-
How can shipowners locate verified cyber solution and service manufacturers and providers?
Bureau Veritas’ Approval Explorer helps shipowners identify, locate and contact approved product manufacturers and service suppliers worldwide.
-
Is an IACS UR E27 certificate sufficient for operation?
IACS UR E27 addresses the cyber resilience of onboard systems and equipment only. It does not, by itself, establish compliance with all applicable vessel-level requirements for operation. The vessel must also meet applicable cybersecurity requirements of IACS UR E26.
-
What cybersecurity requirements must onboard equipment meet?
Onboard computer-based systems and equipment should be designed to meet the cybersecurity requirements applicable to the vessel. For newbuild vessels subject to IACS UR E26, onboard systems and equipment within the scope of IACS UR E27 must also comply with its requirements. Bureau Veritas supports suppliers in demonstrating compliance with applicable cybersecurity requirements through its type approval process.
-
Is compliance with BV’s NR 659 Rules sufficient for operation?
Rule Note NR 659 addresses cybersecurity across multiple phases, including the design, construction, commissioning and maintenance of computer-based systems. Compliance can demonstrate that the assessed system or equipment meets applicable Bureau Veritas and IACS cyber requirements. However, vessel operation remains subject to other applicable requirements.
Cyber resilience during operation is the shipowner’s responsibility and requires appropriate governance, maintenance, monitoring and cyber risk management processes.
