IMO Resolution on Maritime Cyber Risk Management - Compliance date 1 January 2021

Ship owners and operators will need to comply with Resolution MSC.428(98) from 1 January 2021.

The International Maritime Organization (IMO) adopted Resolution MSC.428(98) Maritime Cyber Risk Management in Safety Management Systems on 16 June, 2017 and issued MSC-FAL.1/Circ.3 Guidelines on Maritime Cyber Risk Management on 5 July, 2017.

Whilst recognising that cyber technologies had become essential to the operation and management of numerous systems critical to the safety and security of shipping and the protection of the marine environment, the IMO acknowledged the vulnerabilities of these technologies to cyber risks and cyber threats. Noting that the rapidly changing technologies and threats made it difficult to address these risks only through technical standards, the IMO recommended that cyber risks are addressed in existing safety management systems required by the International Safety Management (ISM) Code. Ship owners and operators will need to comply with Resolution MSC.428(98) from 1 January 2021 (and no later than the first annual verification of the company’s DOC after this date).

MSC-FAL.1/Circ.3 provides guidance on how to conduct an assessment of the cyber risks for complying with the Resolution. Additional guidance is available from publications including The Guidelines on Cyber Security Onboard Ships by BIMCO, CLIA, ICS, INTERCARGO, INTERTANKO, OCIMF and IUMI, the US National Institute of Standards and Technology’s (NIST) Framework and from Members’ Classification Societies. BIMCO has also just issued its Cyber Security Workbook for On Board Ship Use which uses detailed, step by step checklists, providing a ship’s crew with, “ the practical skills to identify cyber risks and to protect vulnerable onboard systems. It also gives guidance on how best to detect, respond and recover in the event of a cyber attack.

If Members have any questions on this IMO Resolution, your usual contact at the Club will be pleased to assist you. 

Downloads

  • MSC-FAL.1-Circ.3 - Guidelines On Maritime Cyber Risk Management (Secretariat) (94 KB)

    28/07/2017

    Download PDF

Jacqueline Tan

Legal Services Manager

Date13/11/2020

Tags

You may also be interested in:

Articles

The International Maritime Organization is requiring Shipowners and Managers to include cyber security management procedures in their Safety Management System by 2021.

Opinion

Last week saw the UK Parliament hit by a ‘sustained’ cyber-attack, which centred on identifying weak passwords and exploiting them. This in addition to the recent ransomware attack on several NHS trusts, causing problems in many hospitals in England, highlights how easily seemingly secure systems can be hacked.

Articles

In Part I  of this article, the authors introduced the three new eBL providers whose blockchain based systems were recently approved by the International Group (IG), and provided an overview on how their systems work.  Here in Part II, we take a look at the recent products and initiatives of Bolero and essDOCS, two of the first generation eBL providers. We also take a look at cyber risks again and at whether the paper BL, as a tool, is still fit for purpose in today’s international trade.

News

Alan Dainty, Cyber Risk Director at Thomas Miller Specialty, asks the question.