In July 2024, two new international cybersecurity requirements, IACS UR E26 and E27, came into force. These standards define how shipowners, yards and suppliers should approach cyber resilience both at the vessel level and across onboard systems. Together they establish a new global baseline for secure digital integration at sea.
At Sea IT we view these developments as an important step toward a more structured and transparent way of working with cybersecurity in the maritime industry. We have had security as a central part of our design philosophy for many years, especially within OT where we have worked with clear separation and controlled data flows long before these requirements were introduced.

With that experience we also see a responsibility to support the industry in understanding what E26 and E27 actually mean in practice. Many shipowners describe these standards as complex and wide ranging. They touch areas such as logical segmentation, physical segmentation, secure remote access, risk management and system documentation, all of which require coordination between shipyards, integrators and suppliers.
Our role is to make this easier to understand. By sharing knowledge built from years of working with secure maritime infrastructures we aim to guide customers and partners through the new regulatory landscape and help translate theory into practical solutions.

Cyber resilience is not a one time check but a way of working that strengthens safety, continuity and trust across the entire fleet. Sea IT will continue to support the industry through education, clear communication and real world examples of how the principles behind E26 and E27 can be applied in daily operations.
As the industry adapts to these new requirements, what do you want to learn more about and how can we support you on that journey?