In 2017, the International Maritime Organization (IMO) adopted resolution MSC.428(98) on Maritime Cyber Risk Management in Safety Management System (SMS). The Resolution stated that an approved SMS should take into account cyber risk management in accordance with the objectives and functional requirements of the ISM Code. It further encourages administrations to ensure that cyber risks are appropriately addressed in safety management systems no later than the first annual verification of the company’s Document of Compliance after 1 January 2021. The same year, IMO developed MSC-FAL.1/Circ.3 Guidelines that provide high-level recommendations on maritime cyber risk management to safeguard shipping from current and emerging cyber threats and vulnerabilities.
We the document provides guidance on how to conduct an assessment of the cyber risks for complying with the Resolution. Additional guidance is available from publications including The Guidelines on Cyber Security Onboard Ships by BIMCO, CLIA, ICS, INTERCARGO, INTERTANKO, OCIMF and IUMI, the US National Institute of Standards and Technology’s (NIST) Framework and from Members’ Classification Societies.
Cyber Risk Management Approach
* Courtesy of The Guidelines on Cyber Security Onboard Ships version 3.