IMO MSC.428(98)

IMO Resolution MSC.428(98), adopted in June 2017, affirms that an approved safety management system should account for cyber risk management under the objectives of the ISM Code, and encourages administrations to ensure cyber risks are addressed in safety management systems no later than the first annual verification of the company’s Document of Compliance after 1 January 2021. It works alongside MSC-FAL.1/Circ.3 guidelines on maritime cyber risk management. It does not amend SOLAS; it directs how the existing ISM Code applies to cyber threats to shipboard operational and information technology.