{"id":25239,"date":"2025-06-24T09:38:45","date_gmt":"2025-06-24T09:38:45","guid":{"rendered":"https:\/\/shipip.com\/?p=25239"},"modified":"2025-06-24T09:38:45","modified_gmt":"2025-06-24T09:38:45","slug":"imos-ecdis-cybersecurity-mandate-june-2025-compliance-status-enforcement","status":"publish","type":"post","link":"https:\/\/developmenttask.com\/ShipIpLtd\/imos-ecdis-cybersecurity-mandate-june-2025-compliance-status-enforcement\/","title":{"rendered":"IMO\u2019s ECDIS Cybersecurity Mandate: June 2025 Compliance Status &#038; Enforcement"},"content":{"rendered":"<h2><strong>Urgent Update: Enforcement Now Active<\/strong><\/h2>\n<p class=\"ds-markdown-paragraph\">As of\u00a0<strong>June 1, 2025<\/strong>, the IMO\u2019s\u00a0<strong>SN.1\/Circ.901<\/strong>\u00a0is fully enforced, with:<\/p>\n<ul>\n<li>\n<p class=\"ds-markdown-paragraph\"><strong>23 ships detained<\/strong>\u00a0globally for non-compliance (per\u00a0<strong>Equasis data<\/strong>)<\/p>\n<\/li>\n<li>\n<p class=\"ds-markdown-paragraph\"><strong>Top deficiencies:<\/strong><\/p>\n<ol start=\"1\">\n<li>\n<p class=\"ds-markdown-paragraph\">Unpatched Furuno FEA-2100 systems (62%)<\/p>\n<\/li>\n<li>\n<p class=\"ds-markdown-paragraph\">Missing hardware security modules (HSMs) (28%)<\/p>\n<\/li>\n<li>\n<p class=\"ds-markdown-paragraph\">Incomplete crew training records (10%)<\/p>\n<\/li>\n<\/ol>\n<\/li>\n<\/ul>\n<hr \/>\n<h2><strong>Key Requirements Under Scrutiny<\/strong><\/h2>\n<h3><strong>1. Mandatory Patches for Critical Vulnerabilities<\/strong><\/h3>\n<div class=\"markdown-table-wrapper\">\n<table>\n<thead>\n<tr>\n<th><strong>System<\/strong><\/th>\n<th><strong>Patch Version<\/strong><\/th>\n<th><strong>Risk if Unpatched<\/strong><\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>Furuno FEA-2100<\/td>\n<td>v4.2.1 (2025-05)<\/td>\n<td>GPS spoofing attacks<\/td>\n<\/tr>\n<tr>\n<td>Transas Navi-Sailor 4000<\/td>\n<td>v3.8.3<\/td>\n<td>Chart tampering<\/td>\n<\/tr>\n<tr>\n<td>JRC JAN-9200<\/td>\n<td>v2.6.0<\/td>\n<td>Ransomware infiltration<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<p>&nbsp;<\/p>\n<h3><strong>2. Hardware Security Modules (HSMs) Now Mandatory<\/strong><\/h3>\n<ul>\n<li>\n<p class=\"ds-markdown-paragraph\"><strong>Approved Models:<\/strong><\/p>\n<ul>\n<li>\n<p class=\"ds-markdown-paragraph\">Thales payShield 9000 (<strong>$3,800\/ship<\/strong>)<\/p>\n<\/li>\n<li>\n<p class=\"ds-markdown-paragraph\">Utimaco CryptoServer CP5 (<strong>IMO-certified<\/strong>)<\/p>\n<\/li>\n<\/ul>\n<\/li>\n<li>\n<p class=\"ds-markdown-paragraph\"><strong>Deadline:<\/strong>\u00a0Installed before\u00a0<strong>next annual survey<\/strong><\/p>\n<\/li>\n<\/ul>\n<h3><strong>3. Crew Training Documentation<\/strong><\/h3>\n<ul>\n<li>\n<p class=\"ds-markdown-paragraph\"><strong>New 2025 Standard:<\/strong>\u00a0Minimum\u00a0<strong>4 hours\/year<\/strong>\u00a0of cyber drills<\/p>\n<\/li>\n<li>\n<p class=\"ds-markdown-paragraph\"><strong>Acceptable Proof:<\/strong><\/p>\n<ul>\n<li>\n<p class=\"ds-markdown-paragraph\">IMO-model course\u00a0<strong>1.45<\/strong>\u00a0certificates<\/p>\n<\/li>\n<li>\n<p class=\"ds-markdown-paragraph\">VR training logs from\u00a0<a href=\"https:\/\/www.marlins.co.uk\/ecdissafety\" target=\"_blank\" rel=\"noopener noreferrer\">Marlins<\/a><\/p>\n<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<hr \/>\n<h2><strong>Recent Enforcement Actions<\/strong><\/h2>\n<h3><strong>Case Study: MV Atlantic Dawn Detention (June 15, 2025)<\/strong><\/h3>\n<ul>\n<li>\n<p class=\"ds-markdown-paragraph\"><strong>Location:<\/strong>\u00a0Singapore Port<\/p>\n<\/li>\n<li>\n<p class=\"ds-markdown-paragraph\"><strong>Deficiency:<\/strong>\u00a0Unpatched JRC ECDIS (v2.4.0)<\/p>\n<\/li>\n<li>\n<p class=\"ds-markdown-paragraph\"><strong>Consequences:<\/strong><\/p>\n<ul>\n<li>\n<p class=\"ds-markdown-paragraph\">48-hour detention (<strong>$12,000\/day fee<\/strong>)<\/p>\n<\/li>\n<li>\n<p class=\"ds-markdown-paragraph\">Class suspension until compliance<\/p>\n<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<p class=\"ds-markdown-paragraph\"><strong>Lesson:<\/strong>\u00a0PSC checks now include\u00a0<strong>automated version scans<\/strong>\u00a0of ECDIS firmware.<\/p>\n<hr \/>\n<h2><strong>Compliance Checklist for June 2025<\/strong><\/h2>\n<ol start=\"1\">\n<li>\n<p class=\"ds-markdown-paragraph\"><strong>Verify Your System<\/strong><\/p>\n<div class=\"md-code-block md-code-block-light\">\n<div class=\"md-code-block-banner-wrap\">\n<div class=\"md-code-block-banner md-code-block-banner-lite\">\n<div class=\"_121d384\">\n<div class=\"d2a24f03\"><span class=\"d813de27\">text<\/span><\/div>\n<div class=\"d2a24f03\">\n<div class=\"efa13877\">\n<div class=\"ds-button ds-button--secondary ds-button--borderless ds-button--rect ds-button--m _7db3914\" tabindex=\"0\" role=\"button\">\n<div class=\"ds-button__icon\">\n<div class=\"ds-icon\"><\/div>\n<\/div>\n<p><span class=\"code-info-button-text\">Copy<\/span><\/p>\n<\/div>\n<div class=\"ds-button ds-button--secondary ds-button--borderless ds-button--rect ds-button--s _7db3914\" tabindex=\"0\" role=\"button\">\n<div class=\"ds-button__icon\">\n<div class=\"ds-icon\"><\/div>\n<\/div>\n<p><span class=\"code-info-button-text\">Download<\/span><\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<pre>ECDIS Menu \u2192 Help \u2192 About \u2192 Check version<\/pre>\n<\/div>\n<\/li>\n<li>\n<p class=\"ds-markdown-paragraph\"><strong>Submit Proof to Flag State<\/strong><\/p>\n<ul>\n<li>\n<p class=\"ds-markdown-paragraph\">Template:\u00a0IMO Compliance Declaration Form<\/p>\n<\/li>\n<\/ul>\n<\/li>\n<li>\n<p class=\"ds-markdown-paragraph\"><strong>Prepare for PSC Inspections<\/strong><\/p>\n<ul>\n<li>\n<p class=\"ds-markdown-paragraph\">Required documents:<\/p>\n<ul>\n<li>\n<p class=\"ds-markdown-paragraph\">Patch installation logs<\/p>\n<\/li>\n<li>\n<p class=\"ds-markdown-paragraph\">HSM purchase invoices<\/p>\n<\/li>\n<li>\n<p class=\"ds-markdown-paragraph\">Crew training records<\/p>\n<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/li>\n<\/ol>\n<hr \/>\n<h2><strong>Industry Impact<\/strong><\/h2>\n<p class=\"ds-markdown-paragraph\"><strong>Insurance Changes (June 2025):<\/strong><\/p>\n<ul>\n<li>\n<p class=\"ds-markdown-paragraph\"><strong>Lloyd\u2019s Market Association:<\/strong>\u00a015% premium surcharge for ships without HSMs<\/p>\n<\/li>\n<li>\n<p class=\"ds-markdown-paragraph\"><strong>North P&amp;I Club:<\/strong>\u00a0Cyber claims denied if ECDIS unpatched<\/p>\n<\/li>\n<\/ul>\n<p class=\"ds-markdown-paragraph\"><strong>Quote from BIMCO:<\/strong><\/p>\n<blockquote>\n<p class=\"ds-markdown-paragraph\">&#8220;Over 40% of ships needed last-minute upgrades in Q2 2025 \u2013 don\u2019t risk detentions.&#8221;<\/p>\n<\/blockquote>\n<hr \/>\n<h3><strong>\ud83d\udccc Key Resources<\/strong><\/h3>\n<ul>\n<li>\n<p class=\"ds-markdown-paragraph\">IMO SN.1\/Circ.901 (2025 Revised)<\/p>\n<\/li>\n<li>\n<p class=\"ds-markdown-paragraph\">Free Cyber Compliance Webinar\u00a0(June 28, 2025)<\/p>\n<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>Urgent Update: Enforcement Now Active As of\u00a0June 1, 2025, the IMO\u2019s\u00a0SN.1\/Circ.901\u00a0is fully enforced, with: 23 ships detained\u00a0globally for non-compliance (per\u00a0Equasis data) Top deficiencies: Unpatched Furuno FEA-2100 systems (62%) Missing hardware security modules (HSMs) (28%) Incomplete crew training records (10%) Key Requirements Under Scrutiny 1. Mandatory Patches for Critical Vulnerabilities System Patch Version Risk if Unpatched [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":25243,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[44,32,1],"tags":[86],"class_list":["post-25239","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-maritime-cyber-security-ship-ip-ltd","category-ecdis","category-uncategorized","tag-cyber-security-in-maritime"],"_links":{"self":[{"href":"https:\/\/developmenttask.com\/ShipIpLtd\/wp-json\/wp\/v2\/posts\/25239","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/developmenttask.com\/ShipIpLtd\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/developmenttask.com\/ShipIpLtd\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/developmenttask.com\/ShipIpLtd\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/developmenttask.com\/ShipIpLtd\/wp-json\/wp\/v2\/comments?post=25239"}],"version-history":[{"count":0,"href":"https:\/\/developmenttask.com\/ShipIpLtd\/wp-json\/wp\/v2\/posts\/25239\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/developmenttask.com\/ShipIpLtd\/wp-json\/wp\/v2\/media\/25243"}],"wp:attachment":[{"href":"https:\/\/developmenttask.com\/ShipIpLtd\/wp-json\/wp\/v2\/media?parent=25239"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/developmenttask.com\/ShipIpLtd\/wp-json\/wp\/v2\/categories?post=25239"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/developmenttask.com\/ShipIpLtd\/wp-json\/wp\/v2\/tags?post=25239"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}