IACS UR E26/27

Introduction

In order to grasp the overall picture of the cyber security requirements for ships, we recommend that you refer to "Chapter 1 Overview" of the "Guidelines for Cyber resilience of ships (UR E26)" published by ClassNK.
”Guidelines for Cyber resilience of ships (UR E26), Chapter 1 Overview”

In April 2022, IACS (International Association of Classification Societies) issued two new URs (Unified Requirements) on cybersecurity (UR E26 and UR E27). These URs specify requirements focused on the capability to reduce the occurrence and mitigate the effects of cyber incidents due to cyber-attacks (hereinafter referred to as “cyber resilience”). UR E26 applies to entire ships while UR E27 applies to on-board systems and equipment. The aim of the two URs is to set a minimum set of requirements for cyber resilience capabilities that a newly built vessel is to be delivered with to support cyber-secure operations.

ClassNK is undertaking various initiatives in response to the UR E26/27. Updates on the Society's initiatives will be posted on this page as needed

IACS Unified Requirement

Latest revision of IACS UR E26/27 and related IACS documentation can be downloaded directly from the following link. “IACS Unified Requirement and Unified Interpretation” users are able to view all the IACS Unified Requirements including UR E26/27 free of charge.

Resolution Revision Adoption
Date
Title Implementation
Date
UR E27 Rev.1 Sep. 2023 Cyber resilience of on-board systems and equipment 1 July 2024
UR E26 Rev.1 Nov. 2023 Cyber resilience of ships 1 July 2024

Rules and Guidance

IACS UR E26/27 was incorporated into "Part X COMPUTER BASED SYSTEMS " and "Guidance for the Approval and Type Approval of Materials and Equipment for Marine Use" on 27 June 2024. Please refer to "Electrical Installations - Cyber Resilience" below for the Rule Amendments of "Part X COMPUTER BASED SYSTEMS" and "Guidance for the Approval and Type Approval of Materials and Equipment for Marine Use" regarding UR E26/27.

Additionally, the application form for the type approval of "Part 7 Ch.10 / Guidance for the approval and type approval of materials and equipment for marine use" (Form-7-10) can be downloaded directly from the following link:

APPLICATION FOR APPLOVAL OF USE OF SYSTEMS AND EQUIPMENT WITH IMPROVED CYBER RESILIENCE (Form-7-10) (ver: 2024.05) PDF(258kb)
Word(31kb)

Guidelines

In addition to the Rules and Guidance as above, ClassNK has published separate guidelines that provide interpretations of the requirements of IACS UR E26/27. These guidelines should be considered as an aid to the stakeholders affected by the URs, in particular compliance managers or persons in charge, in their work towards compliance with UR E26/27. The guidelines also explain the Society's approval process and cybersecurity requirements.

The Guidelines can be downloaded directly from the following link. ClassNK MyPage users are able to view all the ClassNK Guidelines including UR E26/27 Guidelines free of charge.

Additionally, you can view videos explaining compliance with the requirements specified in UR E27 via the following links:
Explanatory video on cyber resilience

Current situation of NK Cyber security rules

Doc Current situation of NK Cyber security rules

Approval process

Doc Approval process

FAQ

We have provided answers in a Q&A format to frequently asked questions regarding compliance with UR E26/27

UR E26, 27 Q&A list

Address and Contact Details

NIPPON KAIJI KYOKAI
Machinery Department
Tel: +81-3-5226-2022, -2023  
Fax: +81-3-5226-2024 
E-Mail: mcd@classnk.or.jp