The International Association of Classification Societies (IACS) published its Recommendation on Cyber Resilience, which applies to the use of computer-based systems which provide control, alarm, monitoring, safety or internal communication functions which are subject to the requirements of a classification society.
The newly launched Recommendation applies to all the networks onboard a system that make use of digital communication to interconnect systems within the ship and ship systems which can be accessed by equipment or networks off the ship.
Being cyber resilient in a fully-digitalized era is a hard thing to do; Therefore, the Regulation provides information about guidelines and standards, terms and definitions, goals for design and construction, functional requirements, technical requirements and verification testing.
Also, the purpose of this recommendation is to provide technical requirements to stakeholders which would lead to delivery of cyber resilient ships, whose resilience can be maintained throughout their service life. Resilience, in this context, is meant as a characteristic that provides crew and ships the capabilities to effectively cope with cyber incidents occurring on computer-based systems onboard which contribute to operate and maintain the ship in a safe condition.
In light of the Regulation, Robert Ashdown, IACS Secretary General, commented that
The network design forms the basis for a reliable and robust network. Issues such as compatibility of various devices, communication between devices, communication from various systems and sub systems, need due consideration during design phase. This Recommendation is an important step in addressing cyber resilience from the earliest stages of a vessel’s life.
Moreover, the Regulation supports IMO’s Resolution MSC.428(98), which which requires cyber risks to be addressed in safety management systems by 1 January 2021.
Concluding, to learn more about the “Recommendation on Cyber Resilience” click herebelow