The International Association of Classification Societies (IACS) Unified Requirements E26 (cyber resilience of ships) and E27 (cyber resilience of onboard systems and equipment) now apply to new ships contracted for construction on or after today.
Key points
- E26 sets cyber resilience requirements for the ship as a whole, across its lifecycle.
- E27 sets security requirements for onboard systems and equipment supplied by manufacturers.
- Classification societies will verify compliance during design, construction and commissioning.
- Requirements draw on industrial control system security standards such as IEC 62443.
- Application was deferred from January 2024 to give the industry more time.
UK shipyards and suppliers of navigation, propulsion and other onboard systems will need to demonstrate secure design and documented security capabilities for their products.
Source: UR E26 and E27 cyber resilience of ships (IACS)
Need help understanding what this change means for your organisation? Get in touch for a pragmatic, no-obligation conversation.
