IACS UR E26/27

In order to grasp the overall picture of the cyber security requirements for ships, we recommend that you refer to "Chapter 1 Overview" of the "Guidelines for Cyber resilience of ships (UR E26)" published by ClassNK.

• ”Guidelines for Cyber resilience of ships (UR E26), Chapter 1 Overview”

In April 2022, the International Association of Classification Societies (IACS) issued two new Unified Requirements (URs) on cybersecurity: UR E26 and UR E27. These URs specify requirements focused on cyber resilience—the capability to reduce the occurrence of, and mitigate the effects of, cyber incidents. UR E26 applies to ships as a whole, while UR E27 applies to on-board systems and equipment. The aim of these URs is to establish minimum requirements for the cyber resilience of newly built vessels.

ClassNK is undertaking various initiatives in response to the UR E26/27. Updates on the Society's initiatives will be posted on this page as they become available.

Latest revision of IACS UR E26/27 and related IACS documentation can be downloaded directly from the following link. “IACS Unified Requirement and Unified Interpretation” users are able to view all the IACS Unified Requirements including UR E26/27 free of charge.

IACS UR E26/27 have been incorporated into "Part X COMPUTER BASED SYSTEMS " and "Guidance for the Approval and Type Approval of Materials and Equipment for Marine Use" , which apply to ships contracted for construction on or after 1 July 2024. These publications can be downloaded from the following link:

• Part X COMPUTER BASED SYSTEMS
• Guidance for the Approval and Type Approval of Materials and Equipment for Marine Use

Additionally, the application form for the type approval regarding UR E27, specified in "Part 7 Ch.10 / Guidance for the approval and type approval of materials and equipment for marine use" (Form-7-10), can be downloaded from the following link:

• UR E26, 27 Q&A list： ClassNK provides answers in a Q&A format to frequently asked questions regarding compliance with UR E26/27.
• UR E26/27 document samples: Samples of documents for submission under UR E26/27 are available here.
  • Vessel asset inventory
  • Risk Assessment for the exclusion of computer-based systems
  *Note: Please be sure to understand the contents of each "Information" sheet before use.
• List of issued SOF regarding UR E26/27 exemptions:
  This is a list of Statements of Fact (SOF) issued by ClassNK, which confirmed that the intended purposes and specifications of computer-based systems are eligible for exemption from the application of UR E26/27.
• List of issued SOF regarding non-mandatory application of UR E26/27:
  This is a list of Statements of Fact (SOF) issued by ClassNK, which confirmed that the application of UR E26/27 is not mandatory for computer-based systems with the intended purposes and specifications.
*Note: The issuance of Statement of Fact is non-mandatory. For an overview of each list and the validity of the SOF, please be sure to understand the contents of the respective Information" sheets.

Additionally, you can view videos explaining compliance with the requirements specified in UR E26/27 via the following links:
Explanatory video on cyber resilience

Address and Contact Details