UNE EN IEC 63154:2021
Maritime navigation and radiocommunication equipment and systems - Cybersecurity - General requirements, methods of testing and required test results (Endorsed by Asociación Española de Normalización in June of 2021.)
Equipos y sistemas de navegación y radiocomunicaciones marítimas. Ciberseguridad. Requisitos generales, métodos de ensayo y resultados de ensayo requeridos. (Ratificada por la Asociación Española de Normalización en junio de 2021.)
| Standard number: | UNE EN IEC 63154:2021 |
| Pages: | 71 |
| Released: | 2021-06-01 |
| Status: | Standard |
UNE EN IEC 63154:2021
This document specifies requirements, methods of testing and required test results where standards are needed to provide a basic level of protection against cyber incidents (i.e. malicious attempts, which actually or potentially result in adverse consequences to equipment, their networks or the information that they process, store or transmit) for: a) shipborne radio equipment forming part of the global maritime distress and safety system (GMDSS) mentioned in the International Convention for Safety of Life at Sea (SOLAS) as amended, and by the Torremolinos International Convention for the Safety of Fishing Vessels as amended and to other shipborne radio equipment, where appropriate; b) shipborne navigational equipment mentioned in the International Convention for Safety of Life at Sea (SOLAS) as amended, and by the Torremolinos International Convention for the Safety of Fishing Vessels as amended, c) other shipborne navigational aids, and Aids to Navigation (AtoN), where appropriate. The document is organised as a series of Modules dealing with different aspects. The document considers both normal operation of equipment and the maintenance of equipment. For each Module a statement is provided indicating whether the Module applies during normal operation or in maintenance mode. Communication initiated from navigation or radiocommunication equipment outside of ítems a), b) and c) above, for example ship side to other ship or shore side, are outside of the scope of this standard. This standard does not address cyber-hygiene checks, e.g. anti-malware scanning, etc., performed outside of the cases defined in this standard.
