IN 1414 – IMCA Security Bulletin 01/18

The IMCA Security Committee is determined to raise awareness of security issues that can potentially harm member companies. Information provided in this regular Security Bulletin is intended to be used by Members to either directly pass on to employees or use the material it contains as part of an existing company security awareness programme.

Feedback from IMCA Members suggests the following cyber security concerns:

• Unclear on how to meet IMO ISM Code cyber security risk management guidelines.
• Potentially poor cyber security capability in the supply chain.
• Retrofitting cyber security to existing ship systems not designed for this.
• Interconnection of control systems to other networks (e.g. IT network, internet).
• Risks posed by USB drives.
• Ability to better inventory, log and monitor industrial automation & control systems.
• Compliance with general data protection regulations (GDPR) standards and practices.
• Controlling remote access to vessels.
• Alignment with classification societies.

The Be Cyber Aware at Sea website is recognised as a useful tool to assist in raising awareness.  Each of the first eight IMCA security bulletins will refer the reader to one of the Be Cyber Aware at Sea poster and video campaigns, the first being Be wise to what lies inside. Download poster.

A recent initiative has seen the publication of a Global Counter Piracy Guidance for Companies, Masters and Seafarers, supported by numerous organisations including IMCA.

Oil Companies International Marine Forum (OCIMF) has published version five of Best Management Practices to Deter Piracy and Enhance Maritime Security in the Red Sea, Gulf of Aden, Indian Ocean and Arabian Sea, BMP5.

In addition, a new industry website has launched. The website is supported by a number of shipping industry associations and is intended to serve as a one-stop shop for companies and mariners seeking guidance on a wide range of Maritime security issues.

Members may wish to view the below recently published security articles: