The ship and the equipment: E26 / E27
IACS E26 considers the ship’s cyber resilience; E27 addresses onboard systems and equipment. Their scopes complement each other.
In 30 seconds
- E26 covers integration and resilience across the vessel and its lifecycle.
- E27 includes security capabilities and product development requirements for onboard systems and equipment.
- Revised requirements apply to relevant new ships contracted from 1 July 2024; verify vessel scope, exclusions and current class rules before deciding applicability.
Make it concrete
A supplier provides a secure device. Explain why cabling, access rules and maintenance on the complete ship still need review.
- 01E27 / equipment
- 02Integration
- 03E26 / ship
Check your understanding
Does one secure device automatically establish the whole ship’s cyber resilience?
- E26 covers integration and resilience across the vessel and its lifecycle.
- E27 includes security capabilities and product development requirements for onboard systems and equipment.
- Revised requirements apply to relevant new ships contracted from 1 July 2024; verify vessel scope, exclusions and current class rules before deciding applicability.
Go to the source
- Course notes · Nguyễn Văn Thư · An ninh mạng và khả năng chống chịu an ninh mạng trên tàu biển ↗
- IACS · Cyber resilience of ships and equipment ↗
- IACS · Revised E26 / E27 application date ↗
Sources reviewed: 13.09.2026