CYBER SECURITY Industry guidelines for use on- board ships Mr Angus Frew, Secretary General

Risks on board Insiders introducing malware by storage devices etc. Outdated (Microsoft) software Remote attacks by criminals Lack of software and system monitoring Lack of access-control for computers and networks Unprotected hardware

Background At MSC 94 USA and Canada recommended development of voluntary guidelines for ports, ships, and other parts of maritime transportation system BIMCO already working on guidance for shipowners and crew on operational aspects of cyber security on-board ships since CMA Update supported by RT submitted to MSC 95 Intention to present finalized guidelines to MSC 96

Cyber Security On-Board Ships Industry guidelines will cover: Building awareness and educating owners and seafarers on necessity for cyber security Risk management based approach Guidelines on the safekeeping and transmitting of key information Development of contingency plans Continued review - new threats emerging all the time

Related work Maintenance and update of programmable electronic systems: Working with CIRM since 2013 on a draft industry standard Draft text to be sent to RT members for comment shortly Version 1.0 to be completed by August 2015 Aligned with IACS work on updating E 22 on Programmable Electronic Systems

Thank you