Posts

Featured Posts
Latest Posts
EU CRA for Marine Equipment Makers · Part 5 of 5 A CRA Roadmap for Marine Equipment Suppliers From scoping to a running vulnerability desk: six steps, the right kind of help, and a checklist Captain Paul Maritime Cybersecurity Consultant · IACS UR E26/E27 The first four parts explained what the EU Cyber Resilience Act is, what it costs to get wrong, what E27 evidence still lacks and how to prove behaviour by test. This last part puts it in order: six steps a marine equipment supplier can follow between now and 11 December 2027, how to choose the kind of outside help that fits, and a checklist to measure progress.
From Cybersecurity to the Era of Cyber Resilience The question now isn't "how do we block it" — it's "how do we survive it." Richard Principal Maritime Engineering Leader · Digital Ship Innovation & Cyber Security On August 12, I attended the Maritime Cybersecurity Conference 2026 (co-hosted by CYTUR and SecurityNews, held concurrently with ISEC 2026) at the COEX ASEM Ballroom in Seoul. Listening to Hanwha Ocean's presentation, "AI-Era Vessels' New Challenges and Responses," I realized the industry's front line is wrestling with exactly the same questions. This article is a write-up of what that talk left me thinking about. Artificial intelligence (AI) is accelerating digital transformation across the shipbuilding and shipping industries. Smart ships, digital twins, remote maintenance...
Three Pages for an Entire Ship: Why I Rejected a Shipyard's E26 Vessel Asset Inventory First : Vessel Asset Inventory [E26, 5.1.3] ※ The shipyard and SI company names are anonymized (H*, M*). Jack Superintendent · M**  (M** Shipping Company) I want to share some of the problems I have experienced with cyber security documents for ships being built in China. The first document I want to talk about is the Vessel Asset Inventory under E26, Section 5.1.3. I have a strong message for Chinese shipyards and shipowners: Hire a competent cyber security SI company of Korea.
ShipPaulJobs Weekly Cyber Brief, November Week 1, 2026: A Terminal Down at Le Havre, n0n's Exposed Server, and a US Deadline for Cyber Plans The incidents, CVEs and threat intelligence that matter to ships, ports and shipping companies, as of 2 November 2026 Captain Paul Maritime 4.0 · AI, Data & Cyber Security · LinkedIn This week's brief has one new event, one unverified claim added on 3 November, and two useful updates. The common thread: the hard questions are about recovery and basic access, not exotic attacks. A container terminal in Le Havre stopped handling boxes for reasons nobody has publicly established, new research suggests the n0n group got in with weak or stolen passwords, and US-regulated operators now have a dated requirement to put their cyber plans on paper.
How Can a Functional Description in a Manual Be Converted into a Reproducible Test Procedure? Article 8 of a 12-Part Series on UR E27 Strategies for Marine Equipment Suppliers ※ The product examples, Test Case IDs, setting values, and file names described in this article are illustrative examples created to explain how a reproducible UR E27 Test Procedure can be structured. Blue Horizonist (Lew) Maritime & Cyber Security Consultant · ISP Consultant The previous article examined how a statement that a function has been implemented in a product can be converted into verifiable Evidence by linking the applicable requirement, product design, Configuration, and test results. Among these elements, the Test Procedure is one of the areas that generates the most rework in actual projects.
ClassNK Puts GNSS Interference Detection on the Class Certificate — What It Means Beside IACS UR E26/E27 A new notation for ships that can detect jamming and spoofing — the gap it fills, what it does not promise, and why other class societies are likely to follow Captain Paul Maritime 4.0 · AI, Data & Cyber Security · LinkedIn Japan's ClassNK has added a class notation for ships fitted with systems that detect the effects of GNSS interference and alert the bridge . It is a small line in a rulebook, but it is the first time a major class society has put GPS jamming and spoofing on the class certificate itself. For anyone working with IACS UR E26 and E27 , it is also a clear signal: the cyber-resilience rules we are all implementing do not cover attacks that arrive through the antenna instead of the network.
Agentic Software: How AI Agents Are Restructuring the Software Paradigm Paper review · Zhenfeng Cao · arXiv preprint, June 2026 Captain Paul Maritime 4.0 · AI, Data & Cyber Security Most articles about AI coding tools ask how much faster programmers can work. This paper asks something bigger: if an AI can decide what to do while it runs, is it still the kind of software we have known for fifty years? The answer is interesting, but the most useful part for our industry is a warning buried in the evidence. AI agents that do well on a single task become much less reliable when the work carries on over time, and ship systems stay in service for decades.
EU CRA for Marine Equipment Makers · Part 4 of 5 Proving Security, Function and Recovery by Test Turning CRA requirements into test conditions, pass criteria and evidence for marine equipment Captain Paul Maritime Cybersecurity Consultant · IACS UR E26/E27 For a marine equipment maker, the hardest CRA question is not "does the product have a password?" but "when someone attacks it, does it refuse, keep doing its job, and come back cleanly?" Answering that needs tests built for each product, with conditions, pass criteria and records that hold up in front of an authority. This part sets out five test groups, a step-by-step test flow using a networked monitoring panel as the example, and what it takes to run such tests repeatedly.
EU CRA for Marine Equipment Makers · Part 3 of 5 From E27 Evidence to CRA Evidence: What Marine Equipment Suppliers Must Add Reusing what UR E27 already asked for, and closing the gaps the CRA opens Captain Paul Maritime Cybersecurity Consultant · IACS UR E26/E27 A supplier that has prepared for IACS UR E27 already holds much of what the EU Cyber Resilience Act asks for: an asset inventory, security-function tests, a secure development lifecycle, update procedures. But E27 evidence was built to show a class surveyor that a system is secure at delivery. The CRA asks the maker to prove a product stays secure for its whole support period, for every version it sells. This part maps E27 evidence onto the CRA requirements, area by area, and sets out what has to be added.
Completed Series
Fully completed multi-part posts — read the full story from start to finish.
Loading…
📋 Latest Orders View All →
Loading…
🛡️ Cyber Threat Trends & Intelligence View All →
Loading…
⬡ Current Sea Conditions View All →
Loading…
⬡ Visit Context View All →
Loading…
🚢 Vessel Information View All →
Representative vessels (non-live)
Vessel NameTypeFlagMMSIGT
Loading…
📢 Announcements & Updates View All →
🔗 Community 2026.08.30
LinkedIn Maritime Cyber Community is Live!
Connect with professionals worldwide. Share insights on IACS E26, OT security & beyond.
Join →
✍ Platform 2026.08.01
Author Applications Open
Share your expertise with a global maritime audience. Join the crew!
Apply →
Introduction to Ship Systems
Learn the fundamentals of modern ship systems and digital vessel technologies.
Loading…
Introduction to Marine Solutions
Explore practical maritime AI, cybersecurity and digital transformation solutions.
Loading…
Explore All Posts
Browse our complete collection of maritime technology, cybersecurity, AI and digital shipping articles.
Loading…
Top Ranked · All Posts

Popular Posts

🧭 What We Cover

ShipPaulJobs is an independent, practitioner-led platform covering maritime cybersecurity, smart ship systems, and regulatory compliance, with more than 240 articles and free tools. Content is based on field experience and ongoing research by maritime professionals.

IACS UR E26 / E27

Our largest topic. UR E26 and E27 set cyber resilience requirements for ships contracted from 1 July 2024. Coverage runs clause by clause through CBS inventory, zones and conduits, the integrator's role, type approval, and supplier documentation, with IEC 62443 cross-references and complete guides.

Next: continuing the UR E27 supplier series, and moving from what the rule says to how it holds up in operation.

Maritime Compliance · Completed Series · Class Guidelines

Maritime OT & Ship Systems

Bridge, propulsion, power, cargo and safety systems are increasingly networked, with long lifecycles and real-time constraints that IT practice does not cover. We explain how each system works, then how to secure it: asset inventory, vulnerability handling, secure remote access and evaluating security products.

Next: filling in the remaining ship system groups and adding practical evaluation guides for solutions.

Ship Systems · Marine Solutions

Cyber Threats & Incidents

Incidents, CVEs and threat intelligence affecting ships, ports and shipyards, read for what they mean on board. Reported facts are kept apart from unverified claims, and an incident timeline shows how events connect.

Next: a regular Maritime Cyber Threat Brief, and updating incident posts as findings are published.

Threat Trends & Intelligence · Maritime Weekly

AI in Maritime Operations

How LLMs, RAG and AI agents apply to class rules, safety manuals, fleet data and compliance work, including their failure modes and governance. Learning series and research paper reviews help operators, surveyors and yard teams judge AI without vendor hype.

Next: more paper reviews, and giving ShipJobs AI answers grounded in this blog's own articles.

Publications · ShipJobs Bot

Industry Trends, Talent & Careers

Regulation, digitalisation and decarbonisation are changing what the industry needs from people. We analyse industry news and newbuilding orders, map the roles and skills emerging across OT and cyber security, and share field notes from practitioners on building a career in this space.

Next: clearer role-by-role career guidance, and more contributing authors from across the industry.

Industry Insights · Smart Jobs · Ship Orders

Free Tools & Community

Working tools for daily practice: a compliance assistant, vessel tracking, sea conditions, and live news, jobs and order feeds, plus reference documents. Articles come from a growing group of contributing practitioners, published under our editorial policy.

Next: linking tools and articles more closely, and growing the practitioner community around them.

Maritime Tools · Editorial Policy · Write for Us