Recommendations on ISM and cyber security - support for DOC holders

Cyber security is a key challenge in the maritime industry. This news contains practical recommendations from DNV experts for maritime advice in the field of cyber security. They aim to support DOC holders handling the cyber challenge through their safety management system (SMS), as mandated by the ISM Code.

Recommendations on ISM and cyber security

Relevant for ship owners and managers.

In Resolution MSC.428(98), the IMO, “AFFIRMES that an approved SMS should take into account cyber risk management in accordance with objectives and functional requirements of the ISM Code”, and encourages enforcement starting with the Document of Compliance (DOC) audits from 1 January 2021

The recommendations available in the pdf version of this news (page 2 - 8) were developed by our cyber security experts from the maritime advisory division. They are based on extensive experience supporting companies around the world in handling cyber security and the ISM Code requirements across all vessel segments. It is important to note that the management system measures must fit the needs of the individual DOC holder and that the DOC holder remains responsible for the measures to meet objectives and to ensure ongoing compliance with requirements in the ISM Code.

For companies with an existing SMS, we advise using the recommendations in the Appendix as support when performing a gap analysis, keeping the existing measures and systematics whenever possible and updating them whenever necessary.

For companies that do not have an existing SMS, we advise using the recommendations in the Appendix in support of handling cyber security in the safety management system, while noting the objectives and functional requirements of the ISM Code.


Recommendations on the ISM Code and Cyber Security available in pdf version of this news, page 2 – 8.



10 June 2022

IMO update: Marine Environment Protection Committee (MEPC 78)

The 78th session of the IMO’s Marine Environment Protection Committee (MEPC 78) was held remotely from 6 to 10 June 2022. Highlights included the finalization of technical guidelines for the upcoming EEXI, CII and SEEMP regulations; approval of a proposal for a sulphur emission control area (SECA) in the Mediterranean Sea; and further discussions on the revision of the IMO GHG Strategy scheduled for 2023, and future technical and market-based measures.

  • Maritime
29 April 2022

IMO maritime safety committee (MSC 105)

The 105th session of the IMO’s Maritime Safety Committee (MSC) was held remotely from 20 to 29 April. A wide range of topics was on the agenda, including the safety of ships carrying industrial personnel, the safety of ships relating to the use of fuel oil, and the consideration of a regulatory framework for maritime autonomous surface ships. Requirements reflecting modern systems for maritime distress and safety communication were adopted and interim guidelines for the safety of ships using fuel cell power installations were approved. The development of interim guidelines for ships using ammonia as fuel were initiated.

  • Maritime
11 April 2022

IMO sub-committee on pollution prevention and response (PPR9)

The 9th session of the IMO’s Sub-Committee on Pollution Prevention and Response (PPR 9) was held remotely from 4 to 8 April 2022. A wide range of topics was on the agenda, including biofouling, ballast water management, black carbon, sewage treatment and marine plastic litter. PPR agreed on draft guidelines on risk and impact assessments of the discharge water from exhaust gas cleaning systems when considering local or regional regulations.

  • Maritime
24 March 2022

SEEMP Part III and the upcoming SEEMP Generator from DNV

Since 2019 ships of 5,000 GT and above have been reporting their fuel oil consumption data mandated by the IMO DCS. From 2023, cargo, cruise and RoPax ships must calculate CII with a required rating of C or better. This means some ships will have to improve their carbon intensity. A verified Ship Operational Carbon Intensity Plan, or SEEMP Part III, is to be kept on board from 1 January 2023 to document how you plan to achieve your CII targets. This statutory news provides an update on the SEEMP Part III and recommends next steps.

  • Maritime
View all