The US Coast Guard (USCG) has issued guidance to inspectors on how to enforce the IMO Cyber Risk Management Guidelines that come into force on 1st January 2021 for all ships trading to the United States. The Guidance CVC-WI-027(1)[WE1] [1] can be found here.
What you need to know…
In conclusion…
This instruction has real teeth. Owners should ensure that every ship has clear documentation, standards and processes in place to ensure that Marine Inspector (“MI”)/Port State Control Officer (“PCSO”) has confidence in their approach to cybersecurity risk management. Even the smallest failure in a critical system requires urgent and professional remediation. If you arrive in the US port with a malfunctioning critical system, you will be required to fix it there and then, be audited, and be able to reassure the PSCO on your next visit that the issue has been rectified. If you cannot do this your vessel will be detained. As the saying goes, you have been warned.
[1] https://www.dco.uscg.mil/Portals/9/DCO%20Documents/5p/CG-5PC/CG-CVC/CVC_MMS/CVC-WI-003(series).pdf