Cybersecurity for ships under construction
Ensuring cybersecurity from the start
The maritime industry is rapidly becoming more digital and connected with most newbuilds constructed with integrated digital onboard systems. While this transformation enables shipowners and managers to leverage vessel data and improve performance, it also increases the risk for cyber-attacks.
How to implement cybersecurity during ship construction?
To construct ships that are secure by design, Bureau Veritas has developed key rules, guidelines and notations for cybersecurity and safety.
Our team of experts helps clients meet cybersecurity requirements during the design and construction stages and ensure ships under construction are in compliance with the latest guidelines.
-
1. Select cyber-hardened equipment, solutions and services
Our experts support shipowners in protecting their vessels from the design phase by helping them select equipment that has been proven to resist cyber-attacks.
-
2. Ensure that shipyards have implemented all relevant cybersecurity measures during the construction phase
Following the selection of equipment, Bureau Veritas ensures that construction is carried out smoothly, with shipyards following stringent cybersecurity rules for all newbuilds.
-
3. Earn a Bureau Veritas CYBER SECURE class notation
Bureau Veritas’ CYBER SECURE class notation incorporates the “secure by design” aspect of cybersecurity for newbuilds, ensuring shipyards and their suppliers have successfully protected vessels.
-
4. Comply with IACS UR E26 for the cyber protection of newbuilds
For ships under construction and newbuilds, IACS UR E26 for Cyber Resilience defines the cybersecurity requirements for design and construction. Bureau Veritas helps shipyards comply with this recommendation, performing functional, technical and testing verification for interconnected onboard and onshore systems and equipment. We collaborate with cybersecurity experts at Secura to provide additional security penetration testing, audits and training.
Cybersecurity for ships under construction and newbuilds FAQ
-
Why address cybersecurity for ships under construction?
Addressing cybersecurity during ship construction ensures vessels are secure by design, reducing costly retrofits and protecting operational technology from digital threats over the asset's lifespan.
-
Is it enough to comply with IACS UR E26 to operate?
No. IACS UR E26 only verifies the minimum set of requirements for ship cybersecurity intended for the design, construction and operational life of a vessel.
-
What do ship systems need to meet cybersecurity requirements?
All ship safety and operational computer-based systems should be protected from cyber-attacks. This includes:
- Propulsion and steering
- Navigation
- Electrical power generation
- Emergency systems
- Etc.
Following cyber security guidelines for design and construction
For newbuilds, IACS UR E26 for Cyber Resilience defines a set of cyber security requirements for design and construction. Bureau Veritas helps shipyards comply with this recommendation, performing functional, technical and testing verification for interconnected onboard and onshore systems and equipment. We do this by collaborating with cyber security experts from recently acquired company Secura, which can provide security penetration testing, audits and training.