Conformité maritime 12 points
Maritime Cyber Risk Management Inspection
Cette liste de contrôle est en anglais.
Evaluates cyber risk management integration into the Safety Management System under IMO Resolution MSC.428(98) and MSC-FAL.1/Circ.3.
ISM CodeIMO MSC.428(98)
PDF ou Word gratuit · saisissez votre e-mail pour le télécharger.
Governance and SMS Integration
- Are cyber risks addressed within the ship's Safety Management System? *
- Are roles and responsibilities for cyber risk management defined ashore and on board? *
- Has a cyber risk assessment identified critical OT and IT systems and their vulnerabilities? *
Technical and Access Controls
- Are critical systems (ECDIS, radar, engine/OT networks) segregated or protected from uncontrolled network access? *
- Are software and antivirus/security updates managed and applied for shipboard systems? *
- Is use of removable media and personal devices controlled by procedure? *
- Are user accounts, passwords, and administrator privileges managed and default credentials changed? *
Awareness and Training
- Have crew received cyber awareness training relevant to their duties? *
- Are personnel aware of phishing, social engineering, and safe use of shore/vendor connections? *
Detection, Response and Recovery
- Are procedures in place to detect and report cyber incidents affecting safety-critical systems? *
- Are backups of critical system data and configurations maintained and tested for recovery? *
- Is there a contingency plan for operating navigation and machinery if key systems are compromised? *
Téléchargez la liste de contrôle Maritime Cyber Risk Management Inspection complète
Obtenez-la gratuitement en PDF propre et imprimable, ou en document Word modifiable.