TÜV Rheinland Blog - Insights from Asia and Africa

Case Study: Cybersecurity Management System for Ships (CSMS) – ClassNK & NYK Shipping

Posted by TUV Rheinland on Jul 11, 2019 12:00:00 PM
TUV Rheinland


The past decade or so has seen an exponential rise in Industrial Control System and Operational Technology (OT) vulnerabilities around the globe. The top 5 industries that have seen their operations affected are manufacturing, power & utilities, transportation, telecommunications, and oil & gas.

These vulnerabilities have risen due to the adoption of digitization and inter-connectivity, as industries seek to continually optimize their processes and remain cost-efficient.

ClassNK or Nippon Kaiji Kyokai, is a ship classification society that holds over 23% of market share. It has actively engaged with a growing range of ship-related activities and services aimed at contributing/promoting the protection of human life and property at sea, as well as the marine environment at large.

Client Situation

With ClassNK supporting the transformation of the maritime industry in addressing its cybersecurity/OT needs, it has taken on the responsibility of developing the Cybersecurity Management Systems for Ships (CSMS) guidelines per International Maritime Organization (IMO) requirements.

It needed assistance in the review of said guidelines and in developing a cybersecurity assessment plan to perform onboard vessel assessments for cybersecurity risks. One of the subjects of this cybersecurity assessment is NYK Shipping, which is one of the oldest and largest shipping companies in the world.

Proposed Solution

With the guidelines and the assessment plan in mind, TÜV Rheinland developed a 2-phase approach for ClassNK:

Phase 1 – develop a cybersecurity assessment plan for performing the onboard assessments

Phase 2 – perform the assessment on behalf of ClassNK for NYK Shipping.

Both phases would run for a period of 12-16 weeks.

How TÜV Rheinland added value to ClassNK + plus points

Based on the framework above, we can perform cybersecurity assessments for vessels under the classification of ClassNK. TÜV Rheinland will continue to collaborate with ClassNK to offer cybersecurity-centric certification services to ships under its class, as per IMO circular.

The outcome of this project will enable ClassNK to issue a certificate to NYK Shipping.

For more information, or to contact one of our experts, click below:

Contact us now

Topics: OT Security