Staying ahead of the curve – Understanding IACS UR E26 & E27

In July 2024, two new international cybersecurity requirements, IACS UR E26 and E27, came into force. These standards define how shipowners, yards and suppliers should approach cyber resilience both at the vessel level and across onboard systems. Together they establish a new global baseline for secure digital integration at sea.

At Sea IT we view these developments as an important step toward a more structured and transparent way of working with cybersecurity in the maritime industry. We have had security as a central part of our design philosophy for many years, especially within OT where we have worked with clear separation and controlled data flows long before these requirements were introduced.

With that experience we also see a responsibility to support the industry in understanding what E26 and E27 actually mean in practice. Many shipowners describe these standards as complex and wide ranging. They touch areas such as logical segmentation, physical segmentation, secure remote access, risk management and system documentation, all of which require coordination between shipyards, integrators and suppliers.

Our role is to make this easier to understand. By sharing knowledge built from years of working with secure maritime infrastructures we aim to guide customers and partners through the new regulatory landscape and help translate theory into practical solutions.

Cyber resilience is not a one time check but a way of working that strengthens safety, continuity and trust across the entire fleet. Sea IT will continue to support the industry through education, clear communication and real world examples of how the principles behind E26 and E27 can be applied in daily operations.

As the industry adapts to these new requirements, what do you want to learn more about and how can we support you on that journey?

Sea IT Office
Arntorpgatan 11
SE-442 45
Kungälv
Sweden
Follow Us
Copyright © 2026 SEA IT
chevron-down