ClassNK has released the second edition of its Guidelines for Cyber Security Management System for Ships, introducing clearer audit requirements and closer alignment with international cyber security standards.
The updated guidelines aim to help shipowners and ship management companies manage cyber risks across their fleets. They also provide a common framework for addressing requirements from different maritime assessment schemes.
The revised framework covers both shore-based management and onboard operations. It includes cyber security policies, responsibilities, risk assessments, technical controls and incident response procedures.
Updated guidelines strengthen cyber security management
ClassNK has restructured the guidelines with reference to ISO/IEC 27001 and ISO/IEC 27002. These international standards provide frameworks for information security management and related security controls.
The second edition now consists of two parts. The first outlines the requirements for a Cyber Security Management System (CSMS), while the second specifies audit criteria and the supporting evidence required for certification.
As a result, shipping companies can better understand what ClassNK ...