ClassNK Revises Ship Cyber Security Guidelines to Match Vetting Schemes

ClassNK has published the second edition of its Guidelines for Cyber Security Management System for Ships. The new edition maps its audit criteria to four major maritime vetting and assessment schemes. The Japanese classification society says it has also clarified its certification requirements, so shipowners and ship managers can use one framework to prepare for several industry assessments.

The revision matters to tanker and dry bulk operators, who face cyber security questions from more than one vetting regime. That includes the large ship management community serving Indian and international fleets.

The guidelines now keep management requirements separate from the evidence needed to show they have been implemented. They are split into two parts:

The framework covers management commitment, responsibilities ashore and onboard, risk assessment, operational controls and incident preparedness. ClassNK has restructured it with reference to the international information security standards ISO/IEC 27001 and ISO/IEC 27002.

This story was originally published by Maritime Gateway. Read the full story at Maritime Gateway →