Regulations and Management for Cyber Security

As you may already know, in 2017 IMO regulation for Cyber Security Guidelines adopted.

According to IMO guidelines, ship owners and ship managers are required to address cyber risks appropriately in the Safety Management System (SMS) no later than the first annual verification of the Company’s Document of Compliance after 1 January 2021.

Who : Manager (DOC Holder)

When : no later than the first annual verification of the Company’s Document of Compliance after 1 January 2021

Please kindly note

• IMO recommended but Singapore is compulsory/Panama is recommended. (as of 31st Dec. 2021) 
• USA have individual regulation for Cyber Security (CVC-Work Instuvtion-027(I)), if any deficiency was pointed out, an ISM deficiency should be issued with an action code 17 (Rectify prior to departure) or an action code 30 (Ship detained depending of its seriousness). 
• Cyber security which is recommended by IMO is one of the inspection items of SIRE by oil majors. 

Sorry, attached  file is in Japanese only but please refer below English JPI loss prevention URL.

Cyber_Risk_Management.pdf

Please refer link below for more detail 

IMO / Maritime Cyber Risk 

https://www.imo.org/en/OurWork/Security/Pages/Cyber-security.aspx 

USCG CVC-WI-027(1) / Vessel Cyber Risk Management Work Instruction 

https://www.dco.uscg.mil/Portals/9/DCO%20Documents/5p/CG-5PC/CG-CVC/CVC_MMS/CVC-WI-027(series).pdf 

Japan P&I  

P&I Loss Prevention Bulletin Vol. 42 / Cyber rist and Cyber security contermeasures 

https://www.piclub.or.jp/wp-content/uploads/2018/05/Loss-Prevention-Bulletin-Vol.42-Full.pdf 

P&I Loss Prevention Bulletin Vol. 48 / Cyber risk and Cyber security countermeasures Supplement 

https://www.piclub.or.jp/wp-content/uploads/2020/05/Loss-Prevention-Bulletin-Vol.48_Full.pdf 

※ The Panama Government has established a "Cyber Incident Voluntary Reporting System" and recommends that all Panama-flagged vessels be reported to the Panama Government regarding cyber incidents detected. 
Panama Maritime Authority MMN-22/2021-VOLUNTARY CYBER INCIDENT REPORTING SCHEME 

https://panamashipregistry.com/marine-notices/voluntary-cyber-incident-reporting-scheme/