The International Association of Classification Societies (IACS) has updated its Cybersecurity uniform requirements (URs) to address the need for improved cyber resilience in ships. Last year, IACS published UR E26 and UR E27, which focused on cyber resilience of ships and on-board systems and devices. These requirements applied to new ships from January 1, 2024. However, as cybersecurity monitoring in the maritime sector has grown, there has been a recognized need for a standardized approach to survey requirements and further improvements based on industry feedback.
To address these challenges, IACS has made extensive changes to the two URs. The scope of the requirements has been categorized into mandatory and non-mandatory compliance depending on the vessel type and size, in order to accommodate smaller and non-conventional vessels. As a result, the original versions of the URs have been withdrawn and the revised versions are now being applied to new ships, with a construction commissioning date from July 1, 2024.
The updated URs are aimed at improving the cyber resilience of ships and on-board systems, reflecting new survey requirements and industry feedback. The revised version of UR E27 is already available on the IACS website, while the revised version of UR E26 is currently being finalized and will be released before the end of the year.