This document provides guidance on how to achieve cyber resilience in the maritime industry.
It covers topics such as risk assessment, security management, access control, incident response, and recovery planning.
The document emphasizes the importance of a risk-based approach and a comprehensive security management program.
It also provides specific requirements for manufacturers of on-board systems and equipment.
By following the guidance provided in the document, maritime entities can better protect themselves against cyber threats and ensure the safety and security of their operations.
This document (UR E27 Rev1 CLN) was published on 1 September 2023 and is to be uniformly implemented by IACS Societies on ships contracted for construction on or after 1 July 2024 and may be used for other ships as nonmandatory guidance.