Posts

Latest Posts
Maritime Transformation · Insight Captain Paul The Next Maritime Transformation: A Call to the Global Consulting Industry Maritime is changing. Consulting must change. Talent must change. Maritime Transformation Maritime Consulting AI · Data · Cyber Resilience IACS UR E26/E27 📚 In This Article Part I — Maritime Is Changing · Sections 1–4 Part II — Consulting Must Change. Talent Must Change. · Sections 5–10 Part III — Let's Build It Together · Sections 11–22 Maritime is changing. Consulting must change. Talent must change. The maritime industry is entering a transformation unlike anything we have seen before.
💡 Insight Article 8 IACS UR E27 Marine Equipment Suppliers How Can a Functional Description in a Manual Be Converted into a Reproducible Test Procedure? Article 8 of a 12-Part Series on UR E27 Strategies for Marine Equipment Suppliers ※ The product examples, Test Case IDs, setting values, and file names described in this article are illustrative examples created to explain how a reproducible UR E27 Test Procedure can be structured. Blue Horizonist (Lew) Maritime & Cyber Security Consultant · ISP Consultant The previous article examined how a statement that a function has been implemented in a product can be converted into verifiable Evidence by linking the applicable requirement, product design, Configuration, and test results. Among these elements, the Test Procedure is one of the ...
💡 Practitioner's Guide EU Cyber Resilience Act Shipbuilding Contracts Reporting live since Sep 2026 Does CRA Vulnerability Reporting Reach the Shipowner? The Gaps Shipbuilding and Equipment Contracts Must Close Equipment makers now report to EU authorities. Whether that information ever reaches the shipowner, and the ship, depends on the contracts in between. Julius Shin Maritime Technical Consultant · Shipboard Cybersecurity & Compliance - LinkedIn :  https://www.linkedin.com/in/abysstoinfinity The EU Cyber Resilience Act now requires manufacturers to report actively exploited vulnerabilities to EU authorities and to inform their users. On a ship, the "user" is hard to pin down, part of the equipment sits outside the Act, and the timelines do not match a ship's life. This post looks at those three gaps fr...
💡 Practitioner's Guide NIS2 Directive Shipping Governance Framework Overview NIS2 for Shipping Companies: Essential or Important Entity? From Status Assessment to Governance Design Questions every shipping company should settle before NIS2 settles them for it: scope, classification, the owner–manager split, and the governance that has to sit behind the answer. Julius Shin Maritime Technical Consultant · Shipboard Cybersecurity & Compliance - LinkedIn :  https://www.linkedin.com/in/abysstoinfinity NIS2 adds a layer on top of the IMO and IACS cyber requirements that shipping companies already know, and that layer is aimed at the company rather than the ship. This post sets out how to think about NIS2 status, what really separates essential from important entities, and why the more useful question is not "are we in sc...
💡 Insight AI Security Cyber Resilience Maritime OT From Cybersecurity to the Era of Cyber Resilience The question now isn't "how do we block it" — it's "how do we survive it." Richard Principal Maritime Engineering Leader · Digital Ship Innovation & Cyber Security On August 12, I attended the Maritime Cybersecurity Conference 2026 (co-hosted by CYTUR and SecurityNews, held concurrently with ISEC 2026) at the COEX ASEM Ballroom in Seoul. Listening to Hanwha Ocean's presentation, "AI-Era Vessels' New Challenges and Responses," I realized the industry's front line is wrestling with exactly the same questions. This article is a write-up of what that talk left me thinking about. Artificial intelligence (AI) is accelerating digital transformation acros...
💡 Insight Field Notes · Part 1 IACS UR E26 · 5.1.3 Newbuilding in China Three Pages for an Entire Ship: Why I Rejected a Shipyard's E26 Vessel Asset Inventory First : Vessel Asset Inventory [E26, 5.1.3] ※ The shipyard and SI company names are anonymized (H*, M*). Jack Superintendent · M**  (M** Shipping Company) I want to share some of the problems I have experienced with cyber security documents for ships being built in China. The first document I want to talk about is the Vessel Asset Inventory under E26, Section 5.1.3. I have a strong message for Chinese shipyards and shipowners: Hire a competent cyber security SI company of Korea.
Assessing the USCG's Unmanned Systems Test Area Policy: Three Reasons to Add Cybersecurity Julius Shin Maritime Technical Consultant · Shipboard Cybersecurity & Compliance - LinkedIn :  https://www.linkedin.com/in/abysstoinfinity Summary. The U.S. Coast Guard's policy on designated test areas for unmanned systems (WWM 26-05) is a timely measure that pursues innovation support and maritime safety management together. Centered on physical navigation safety, it lays the foundation for a risk assessment and management framework. Extending that framework to cybersecurity, in light of the distinctive characteristics of unmanned systems, would make the policy considerably more effective. This article sets out three reasons to add cybersecurity to the policy: for unmanned systems, a cyber incident is an operationally fatal event; their cyber resilience and recoverability can be verified o...
📅 Event Preview MATS 2026 · Busan Maritime AI Cybersecurity Maritime AI & Tech Summit 2026 Why I'm Heading to Busan on 28 October An innovation advisor's preview — what I expect, and what I'll be asking in every session Iaan 伊恩 Head of Maritime Innovation Division · ShipPaulJobs Technical Advisor 📍 Hyatt Place Busan Yeonsan · Oct 28, 2026 For years my work has been about moving smart-ship architecture, digital twins and autonomy off the slide deck and onto real ships and ports across the Asia-Pacific. Every one of those projects eventually hits the same wall: the ship becomes a node on a network, and the question is no longer whether AI comes aboard but how we keep it safe, accountable and compliant once it does . That is exactly the question the Maritime AI & Tech Summit 2026 (MATS2026) ...
💡 Insight IACS UR E27 Cryptography HSM & KMS The Missing Layer in IACS UR E26/E27 — Why Maritime Cyber Resilience Needs HSM and KMS Protecting the cryptographic keys behind ship identity, secure communications and software integrity — before AI and quantum computing meet. Kevin CK Lee President & Co-Founder, Keypair, Inc. · PKI · HSM/KMS · Secure Elements A recent article on this site by a class surveyor summarised the first two years of UR E26/E27 as a shift in the centre of gravity of class survey — from verifying physical objects to verifying system behaviour. Reviewers now ask whether a security capability described in a CSDD (Cyber Security Design Description) is a catalogue phrase or an actually configured setting. I would like to add one question that remains after the zones and conduit...
📢 Announcements & Updates View All →
🔗 Community 2026.08.30
LinkedIn Maritime Cyber Community is Live!
Connect with professionals worldwide. Share insights on IACS E26, OT security & beyond.
Join →
✍ Platform 2026.08.01
Author Applications Open
Share your expertise with a global maritime audience. Join the crew!
Apply →
Completed Series
Fully completed multi-part posts — read the full story from start to finish.
Loading…
Introduction to Ship Systems
Learn the fundamentals of modern ship systems and digital vessel technologies.
Loading…
Introduction to Marine Solutions
Explore practical maritime AI, cybersecurity and digital transformation solutions.
Loading…
Explore All Posts
Browse our complete collection of maritime technology, cybersecurity, AI and digital shipping articles.
Loading…
Top Ranked · All Posts

Popular Posts

🧭 What We Cover

ShipPaulJobs is an independent, practitioner-led platform covering maritime cybersecurity, smart ship systems, and regulatory compliance. Content is based on field experience and ongoing research by maritime professionals.

IACS UR E26 / E27

IACS Unified Requirements E26 and E27 mandate cyber resilience from contract signing after 1 July 2024. UR E26 defines minimum requirements for network architecture, access control, software update procedures, and incident response. UR E27 covers supply chain cyber security documentation per equipment supplier. Coverage includes clause-by-clause IEC 62443 cross-references and deliverable guidance for class surveyors and flag state inspectors.

Maritime OT Security

Operational Technology on modern vessels — integrated bridge systems, propulsion control, ballast management, cargo handling automation, dynamic positioning — is increasingly networked and cyber-exposed. Unlike IT, maritime OT has long lifecycles and safety-critical real-time constraints. This platform provides OT-specific guidance on asset inventory, vulnerability analysis, and defence-in-depth strategy aligned with IMO MSC-FAL.1/Circ.3 and BIMCO recommendations.

AI in Maritime Operations

AI is reshaping fleet management, predictive maintenance, port logistics, and compliance monitoring. This platform examines how LLMs, autonomous agents, and structured maritime data — AIS feeds, class records, inspection histories — reduce compliance burden and increase operational visibility. Coverage targets ship operators, class surveyors, shipyard project managers, and flag state administrators who need AI insight without vendor-driven hype.

Industry Trends, Talent & Careers

The maritime industry is undergoing structural transformation driven by decarbonisation, digitalisation, and tightening cyber regulation. This platform discusses the evolving competency requirements for seafarers, shore-based engineers, compliance officers, and surveyors — and how the hiring market is responding. Topics include cross-disciplinary skills at the intersection of OT engineering and cyber security, the emergence of maritime cyber roles at flag states and classification societies, salary benchmarks, and practical pathways for professionals transitioning into this space. A community-oriented space where industry practitioners share insights and shape the conversation on maritime's digital future.