Maritime cyber security

Published: 20/01/2022

Have you assessed the cyber risks to your company and vessels? Are you familiar with the threat assessments carried out by the Norwegian National Security Authority, the Norwegian Police Security Service and the National Criminal Investigation Service, as well as the cyber threats they have identified for the maritime industry? Have you considered or introduced necessary measures to protect the digital infrastructure on board?

Increased use of digital solutions, communication and automation on vessels leads to a higher risk of cyber attacks and incidents. Cooperation and sharing of experiences are key to avoiding unwanted consequenses.

The NMA is dedicated to facilitating the best possible cyber security in the maritime industry. In order to achieve this, we are dependent on close cooperation with partners like you, operating in the market. We have a dedicated department whose goal is to provide you with all the support and practical guidance you need to become more robust against cyber attacks and in dealing with these threats.

Reporting cyber incidents

If your company or vessel has experienced cyber incidents, please fill out our report form. If you are unsure whether an incident should be reported, or you simply would like to discuss something, please don't hesitate to get in touch.

Cyber security as a part of ISM

Since 1 January 2021, cyber security has been a mandatory part of the safety management for ships and shipping companies. A useful tool in the implementation of cyber security as part of ISM is The Guidelines on Cyber Security Onboard Ships, developet by BIMCO and others.

Anyone undergoing an ISM audit in the future will discover that cyber security is now part of the audit.

Draft maritime cyber security strategy

In 2020 a draft maritime cyber security strategy was developed by the Norwegian Maritime Authority in cooperation with the Norwegian Coastal Administration and representatives from the Norwegian National Security Authority. It adresses goals, risks and potential threats and outlines specific measures to achieve good digital safety in the maritime industry. The strategy goals are:

To make the digitalisation in the maritime industry safe and trustworthy
To have the maritime industry suppported by a reliable and secure digital infrastructure
Strengthened cooperation and exchange of experiences equipping the maritime industry to identify, handle and prevent cyber attacks
To enable individual players in the maritime industry to protect themselves against cyber attacks
To provide crew and personnell with the necessary cyber security skills

Useful links:

Nasjonal Sikkerhetsmyndighet har utarbeidet et sett med grunnprinsipper for IKT-sikkerhet, som det er anbefalt å ta en titt på.

The Guidelines on Cyber Security Onboard Ships