scope:

General

This Guide for ABS CyberSafety™ has been developed so as to reduce cybersecurity-related conditions or incidents that may negatively affect systems, ships, offshore assets, safety, or the performance of cyberenabled systems. ABS recognizes the positive impact that sound cybersecurity management practices have in reducing losses to the maritime industry due to unauthorized access into control systems from criminal or unintended activity. This Guide provides a model for implementing cybersecurity programs.

This Guide presents criteria for compliance with ABS CyberSafety™ requirements. These requirements will be used by ABS in the cybersecurity reviews and surveys of information technology (IT) systems; operational technology (OT) control systems; and their system interfaces and software on ships, offshore assets and the management systems of the associated shoreside facilities.

This Guide emphasizes implementation and verification of organizational processes and business rules (i.e., controls) through review and audit methods, and technical verification of system protective mechanisms and technical controls through system testing.

Criteria for the hardware and software integrity of computer-based control systems are given in other ABS Rules and Guides, such as the ABS Rules for Building and Classing Steel Vessels (Steel Vessel Rules), the ABS Guidance Notes on Failure Mode and Effects Analysis (FMEA) for Classification, the ABS Guide for Integrated Software Quality Management (ISQM), and other applicable national and international standards.