Skip to content

IMO Guidelines on Maritime Cyber Risk Management

The latest IMO Maritime Safety Committee (MSC 98) approved a joint MSC-FAL circular on Guidelines on maritime cyber risk management, based on the Interim guidelines on guidelines on maritime cyber risk management (MSC.1/Circ.1526). Please find a copy of the Guidelines attached for your convenience.

The Guidelines contain high-level recommendations for maritime cyber risk to safeguard shipping. This document defines functional elements that include: identifying, protecting, detecting, responding, and recovering with respect to cyber events. Best practices are also discussed with additional guidance mentioned in standards produced by, inter alia, BIMCO, CLIA, ICS, OCIMF; ISO/IEC 27001 Standard on Information Technology; and United States National Institute of Standards and Technology’s Framework for Improving Critical Infrastructure Cybersecurity (the NIST Framework).

Information Note Details

Published date: 16 August 2017
Information note ID: 1375


IMCA’s store terms and conditions ( apply to all downloads from IMCA’s website, including this document.

IMCA makes every effort to ensure the accuracy and reliability of the data contained in the documents it publishes, but IMCA shall not be liable for any guidance and/or recommendation and/or statement herein contained. The information contained in this document does not fulfil or replace any individual’s or Member's legal, regulatory or other duties or obligations in respect of their operations. Individuals and Members remain solely responsible for the safe, lawful and proper conduct of their operations.