Connected systems support navigation, machinery operation, communication and shore-based management. Maritime cyber risk management considers how disruption or compromise of those systems could affect safe operations. The IMO framework places cyber risk within the broader management of maritime safety and security.
Understand the systems and responsibilities
Aegean Lloyd’s planned assessment approach starts with the systems in scope, their operational purpose and the people responsible for them. Asset information, access arrangements and dependencies help establish a meaningful review boundary. Shipboard operational technology and office information systems may call for different assessment methods.
Review preparedness and recovery
The proposed document-based review considers how cyber-related responsibilities, incidents, recovery arrangements and training are recorded. Findings should identify the system and evidence concerned, together with the action needed. A review of documentation is not a guarantee that a system is free from vulnerabilities.
Agree the assessment boundaries
Any technical testing would need a separate written scope, system-owner authorization and operational precautions. A certification claim must identify the applicable scheme and recognized competence. The service described here is a development framework; no specific cyber certification or blanket assurance is currently offered.
SERVICE AVAILABILITY
This page describes the service framework being developed. Acceptance of any assignment depends on a confirmed technical scope, suitable personnel and the required approvals or authorizations. It does not claim flag recognition, IACS membership or accredited verifier status.
Official references
Consult the issuing authority for the applicable text and current requirements.
IMO — Maritime cyber risk(opens in a new tab)