IMO REGULATIONS FOR MARITIME CYBERSECURITY
MANAGING MARITIME CYBERSECURITY Risks
In response to the growing threat of cybercrime, the International Maritime Organization (IMO) has issued resolution MSC.428(98) resolution MSC.428(98) on maritime cyber risk. The resolution has since been complemented by other guidelines, notably those developed by the Baltic and International Maritime Council (BIMCO) for cyber risk management.
These guidelines lay out high-level recommendations for incorporating cyber risk management into existing safety management system (SMS) processes, enabling shipowners to protect their vessels. As of January 1, 2021, all shipowners must comply with IMO Resolution MSC.428(98) to continue sailing worldwide. Bureau Veritas is well-equipped to guide you in preparing your fleet for cyber threats.
Key Benefits
- We help you understand IMO’s regulatory requirements for ship cybersecurity and safety
- We provide you with expert guidance to develop and implement a maritime cyber risk management plan
- We enable you to achieve compliance with international regulations for maritime cybersecurity and safety
SURVEYING & ASSESSING CYBERSECURITY RESILIENCE
Reliable and useful data on ship systems is in ever-higher demand, propelled by the needs of global decarbonization.
In this context, ship systems increasingly exchange data with the shore. Heightened connectivity increases vulnerability to cyber-attacks, making the maritime industry of interest to malicious actors and increasing the likelihood of cyber incidents.
Bureau Veritas has developed a tool to help vessel owners clearly assess their technical ship cybersecurity ecosystem at any point in its lifecycle. Cyber Health Assessment Report Tool (CHART) by Bureau Veritas is perfect for inspecting the current state of compliance and taking steps toward implementing regulation.
Complying with IMO Resolution MSC.428(98)
On January 1, 2021, IMO Resolution MSC.428(98) came into force. This regulation applies to all vessels, requiring ships to include cyber risk management in their safety management systems in accordance with the International Safety Management (ISM) Code. This resolution further encourages flag administrations to ensure that ship owners and managers are properly addressing cyber risks.
To help ship owners achieve compliance, BIMCO and other organizations have developed general guidelines that offer a blueprint for a cyber risk management plan. Though IMO’s existing guidelines are not marine-specific, vessel owners can use them to help identify and assess risks, protect their assets and respond to and recover from cyberattacks.
Bureau Veritas helps shipowners and managers implement customized, effective maritime cyber risk management strategies onboard. Our comprehensive framework for ship cybersecurity is based on our NR 659 Rules. This framework enables Bureau Veritas to identify critical equipment on board and propose organizational, technical and procedural mitigation measures to reduce residual cyber risk to an acceptable level.
