The fourth edition of the industry cyber risk management guidelines, Guidelines on Cyber Security Onboard Ships is now available (see attached) and lays the foundation for further improvements and refinement of companies’ cyber security risk assessments.
Read here: pdf 2021 Cyber Security Guidelines (3.43 MB)
The version 4 of the cyber security guidelines is published at a time when shipowners and ship managers are faced with a requirement to implement cyber risk management in their safety management systems (SMS) by the time of their first Document of Compliance audit after 1 January 2021. While the previous version (version 3 dated November 2018) offered the necessary guidance for the initial work of implementing cyber risk management in the SMS, the new version contains several improvements.
The fourth version contain general updates to best practises in the field of cyber risk management, and as a key feature, includes a section with improved guidance on the concept of risk and risk management. The improved risk model takes into consideration the threat as the product of capability, opportunity, and intent, and explains the likelihood of a cyber incident as the product of vulnerability and threat. Thus, the improved risk model offers explanation as to why still relatively few safety-related incidents have unfolded in the maritime industry, but also why this should not be misinterpreted and make shipping companies lower their guard.
The following organisations produced the fourth edition: BIMCO, Chamber of Shipping of America, Digital Containership Association, International Association of Dry Cargo Shipowners (INTERCARGO), Interferry, International Chamber of Shipping (ICS), INTERMANAGER, International Association of Independent Tanker Owners (INTERTANKO), International Marine Contractors’ Association (IMCA), International Union of Marine Insurance (IUMI), Oil Companies International Marine Forum (OCIMF), Superyacht Builders Association (Sybass), and World Shipping Council (WSC).
For further information please contact OCIMF’s Security Adviser, Russell Pegg at This email address is being protected from spambots. You need JavaScript enabled to view it.
