Posts

[MaritimeCyberTrend] Relationship and prospects between U.S. Chinese maritime operations and maritime cybersecurity

Image
U.S. Sanctions on Chinese Ships & Cybersecurity Compliance The U.S. Trade Representative (USTR)’s sanctions on Chinese shipping and shipbuilding are expected to heighten the importance of cybersecurity regulations in vessel operations. In particular, as the U.S. increasingly frames Chinese-built ships and shipping companies as cybersecurity risks, compliance with maritime cybersecurity standards will become a critical issue for global shipping stakeholders. The United States is increasingly likely to classify Chinese-built vessels as national security and cybersecurity threats, using this as a basis for additional regulations and sanctions. In particular, drawing from past sanctions on Huawei and ZTE, the U.S. may argue that ships built in Chinese shipyards and equipped with Chinese IT systems (navigation, communication, and monitoring equipment) pose risks to the digital maritime infrastructure of the U.S. and its allies. As a result, the U.S. Coast Guard (USCG) is expected to s...

[MaritimeCyberTrend] Navigating Maritime Cybersecurity: IACS UR E26/E27 vs. USCG Final Rule Compliance

Image
Beyond Minimum Regulations for Newbuilds: Strengthened Cybersecurity Rules for Operating Ships   1. As digitalization accelerates in the maritime industry, cybersecurity is becoming a critical factor in ensuring operational resilience and regulatory compliance. 2. Global regulatory bodies such as IMO, IACS, and USCG are strengthening cybersecurity requirements to mitigate cyber risks for vessels and maritime facilities. EY MCH (Maritime Cyber Hub) is closely monitoring the impact of the U.S. Coast Guard (USCG)'s new cybersecurity regulations on the Maritime Transportation System (MTS), following the International Association of Classification Societies (IACS) UR E26/E27. ⚓ Comparison: IACS UR E26/E27 vs. USCG Final Rule Category IACS UR E26/E27 USCG Final Rule (Effective July 16, 2025) Implementation Date July 2024 July 2025 Scope Newbuild ships U.S.-flagged vessels & facilities Key Focus Cybersecurity design & protective measures Cybersecurity training, planning, and inci...

Enhancing cybersecurity in the maritime industry is not a matter of choice—it is an absolute necessity.

Image
Enhancing cybersecurity in the maritime industry is not a matter of choice—it is an absolute necessity. Shipowners and ship management companies must establish owner regulations that include key cybersecurity metrics such as Mean Time to Detect (MTTD), Mean Time to Contain (MTTC), and Mean Time to Recover (MTTR), and present them to shipbuilders. Shipbuilders (system integrators) are responsible for implementing and adhering to these standards. 1. A digitalized ship is essentially a floating data center. 2. Without cybersecurity, the modern shipping industry cannot operate. 'The maritime industry is not exempt from cybersecurity risks.' IACS UR E26/E27 establishes critical cybersecurity requirements, but shipowners must go beyond compliance. Now is the time to safeguard cyber resilience, assess cybersecurity readiness, and take proactive measures against evolving threats." 해시태그 # EYMCH (MaritimeCyberHub) 해시태그 # IACS UR E26/E27 해시태그 # NIST 해시태그 # MaritimeSafety 해시태...