A06B-6160-H004 DNV, the Norwegian classification society, awarded ABB the Cyber Secure Essential SP1 certification, recognizing the full integration of its ship automation, propulsion and power systems with remote access systems

This is the industry’s first cybersecurity foundation-level SP1 certification for integrated systems

A06B-6160-H004 This certification demonstrates that ABB’s network security solutions meet the DNV “Network Security SP1” level in accordance with IEC62443, the internationally recognized network security standard for control systems. The certification meets or even exceeds the requirements of International Maritime Organization (IMO) resolution MSC.428(98) to protect the confidentiality and integrity of power, propulsion and automation systems and remote connections on board ships. This certification is another major step forward after ABB received SP0 certification for both the scope and level of security controls in 2021.

A06B-6160-H004 

ABB’s integrated ship operation system is certified by DNV for Critical Cyber security

A06B-6160-H004 From January 2021, the IMO will require every ship’s safety management system to incorporate a cybersecurity risk assessment. Since its entry into force, the resolution has been further supplemented by other guidelines. However, the IMO risk assessment’s compliance requirements do not specify ways to protect offshore systems and networks, allowing shipowners to take their own cybersecurity measures. DNV’s cybersecurity rules and IEC62443 standard fill this important gap by clarifying specific requirements.

“There is a growing awareness of cybersecurity in the maritime industry,” commented Jarle Coll Blomhoff, head of cybersecurity and security at DNV. “However, shipowners alone cannot shoulder all the responsibility. Only a broad combination of shipyards, suppliers, and classification societies can create the right conditions for them to respond to cyber threats on board and ashore. ABB’s built-in security is a strong indication that the entire maritime industry has A06B-6160-H004 realized the importance of embedding cybersecurity into the supply chain.”

The new certification confirms that ABB’s cybersecurity solutions not only provide the necessary protection for shipboard systems, but also restore systems to their pre-attack state by automatically troubleshooting faults to find the source of the breach. It treats the crew as the sole administrator of remote access and supports only active acceptance and encrypted connection methods. In addition, ABB provides continuous technical support to help customers reduce the burden of network operations.

A06B-6160-H004 “The SP1 certification marks a significant upgrade in the level of cybersecurity for ships,” Ahmed Hassan, head of cyber security at ABB’s Marine and Ports division, said: “While secure communication between the ship and the cloud is critical, it is equally important to embed cyber security mechanisms into the underlying operational systems, while isolating them from non-core systems. This will allow the concept of ‘defence in depth’ to be built into the ship design – a multiple security control mechanism where, if one measure fails, another is activated to protect the asset, thereby raising the level of cybersecurity protection to a level not seen before the maritime industry.”