What is IEC 63154 about?
IEC 63154 discusses standards for cybersecurity for maritime navigation and radiocommunication equipment systems. IEC 63154 specifies requirements, methods of testing, and required test results where standards are needed to provide a basic level of protection against cyber incidents (i.e., malicious attempts, which actually or potentially result in adverse consequences to equipment, their networks, or the information that they process, store, or transmit) for:
- Shipborne radio equipment forming part of the global maritime distress and safety system (gmdss) mentioned in the international convention for safety of life at sea (solas) as amended, and by the torremolinos international convention for the safety of fishing vessels as amended, and to other shipborne radio equipment, where appropriate
- Shipborne navigational equipment mentioned in the international convention for safety of life at sea (solas) as amended, and by the torremolinos international convention for the safety of fishing vessels as amended
- Other shipborne navigational aids, and Aids to Navigation (AtoN), where appropriate.
IEC 63154 is organized as a series of modules dealing with different aspects.
IEC 63154 considers both normal operations of equipment and the maintenance of equipment. For each module, a statement is provided indicating whether the module applies during normal operation or in maintenance mode.
IEC 63154 provides mitigation against the remaining cyber vulnerabilities for equipment installed in restricted areas with implemented security and access measures.
Note: BS EN IEC 63154 does not address cyber-hygiene checks, for example, anti-malware scanning, etc., performed outside of the cases defined in BS EN IEC 63154.
Who is IEC 63154 for?
IEC 63154 on maritime navigation and radiocommunication systems is applicable to:
- Maritime cybersecurity service providers
- Shipping and marine industries
- Maritime cybersecurity companies
- Maritime manufacturers
- Maritime navigation and radiocommunication systems
- Design engineers for marine navigation
- Inspection badies that involved in the inspection of cybersecurity of ships and marine systems
Why should you IEC 63154 use?
Cybersecurity in maritime has a huge potential to affect the safety of the crew, vessel, cargo and even ports. Cybersecurity in shipping is concerned with the data protection of IT systems, onboard ships hardware and sensors and data leak from unauthorized access, manipulation and disruption. Shipborne navigation and radiocommunication equipment are generally installed in restricted areas (secure areas) such as electronic locker rooms or in a closed cabinet. IEC 63154 provides you with the cybersecurity requirements for shipborne navigation and radiocommunication equipment falling within that need.
Each module of IEC 63154 describes the methods for achieving authentication and verification. To reflect the difference in cyber security risk, the needs for authentication and verification between secure and non-secure areas are covered by IEC 63154.
IEC 63154 provides you the guidance on implementing virus and malware protection on type approved equipment.
Manufacturers can demonstrate the reliability of their products and build trust in their use throughout the ships and marine supply chain by adhering to IEC 63154.