Skip to main content
Maritime cybersecurity
IACS UR E26/E27 Compliance Services in Chennai, India

IACS UR E26/E27 and IMO Cybersecurity Compliance Services for Indian Shipping

Codesecure Solutions provides specialized IACS UR E26/E27 compliance services in Chennai, India, supporting shipowners, ship managers, and shipyards in achieving and maintaining compliance with IMO Resolution MSC.428(98) and IACS Unified Requirements E26 and E27. Mandatory since July 2024 for vessels with build contracts signed after that date, IACS UR E26 addresses cyber resilience of ships as a whole while UR E27 applies to individual computer-based systems onboard. Non-compliance exposes operators to classification society non-conformities, port state control detentions, and increased insurance premiums.

Our compliance services provide a structured pathway from initial gap assessment through remediation planning, policy development, system hardening, and documentation preparation for class society verification. We work with all major classification societies including DNV, Bureau Veritas, ClassNK, ABS, and Lloyd's Register, and ensure your Safety Management System integrates cyber risk management as required under IMO MSC.428(98) for existing vessels.

Projects completed

4500+

Global Projects
Clients protected

150+

Clients Protect
Service guarantee

100%

Service Guarantee
Expert team

20+

Experts Team

IACS and IMO Compliance Services We Provide

  • Gap Assessment: Comprehensive gap assessment measuring your current cybersecurity posture against all IACS UR E26 ship-level and UR E27 system-level requirements, producing a prioritised compliance roadmap.
  • Network Architecture Review: Review and improvement of vessel network architecture to meet UR E26 requirements for secure IT/OT integration, zone segmentation, and conduit controls aligned to IEC 62443.
  • System Hardening (UR E27): Hardening of individual computer-based systems including ECDIS, AIS, engine management, and power systems to meet UR E27 configuration, authentication, and patch management requirements.
  • SMS Cyber Integration: Integration of cyber risk management procedures into your vessel Safety Management System as required by IMO MSC.428(98), including incident response, access control, and maintenance procedures.
  • Class Society Documentation: Preparation of complete evidence packages for DNV, Bureau Veritas, ClassNK, ABS, and Lloyd's Register verification audits, including risk assessments, system inventories, and test records.
  • Annual Review Support: Ongoing compliance support including annual SMS review assistance, compliance monitoring, and update guidance as classification society interpretations evolve.
IACS UR E26/E27 Compliance Services in Chennai, India

Our IACS UR E26/E27 Compliance Process

A structured approach designed for the maritime environment

Phase 1: Gap Assessment

Systematic assessment of vessel systems and procedures against all UR E26 and UR E27 requirements, identifying gaps and assigning risk ratings to each non-conformity.

Phase 2: Remediation Planning

Development of a prioritised remediation roadmap mapping compliance gaps to specific technical, procedural, and documentary actions with implementation timelines aligned to operational schedules.

Phase 3: Technical Remediation

Implementation of network segmentation improvements, system hardening, patch management programmes, and access control enhancements on IT and OT systems to close identified gaps.

Phase 4: Documentation

Preparation of all required documentation including cyber risk management plans, system inventories, test records, and SMS procedures needed for class society verification.

Phase 5: Verification Support

Support during class society audit or verification survey including preparation of objective evidence, demonstration of controls, and resolution of any findings raised by the surveyor.

Why Choose Codesecure for IACS UR E26/E27 Compliance

  • All Classification Societies: Experience working with all major classification societies and their specific interpretation of UR E26 and E27 requirements, ensuring your documentation meets surveyor expectations.
  • Newbuild and Existing Fleet: Services covering both newbuild vessels requiring UR E26/E27 compliance at build stage and existing fleet vessels requiring SMS cyber integration under IMO MSC.428(98).
  • Chennai Maritime Hub: Located in Chennai, a major centre of Indian shipping activity, with direct access to shipping companies, ship management firms, and port operators across South India.
  • Technical and Legal Understanding: Combined technical and regulatory expertise ensuring compliance solutions are both technically sound and legally defensible under Indian DG Shipping requirements.
  • IEC 62443 Alignment: Network architecture and OT system hardening aligned to IEC 62443 industrial cybersecurity standards referenced in IACS UR E26 requirements.
  • End-to-End Support: Full-service compliance from initial gap assessment through technical implementation, documentation, and class society verification in a single engagement.

Maritime Sectors We Serve

  • Container Shipping Lines
  • Tanker and Bulk Carrier Operators
  • Shipyards and Newbuild Contractors
  • Ship Management Companies
  • Offshore Platform Operators
  • Flag State Administrations
  • Marine Insurance Underwriters

Frequently Asked Questions About IACS UR E26/E27 Compliance

IACS UR E26 and E27 apply to commercial vessels of 500 GT or more where the design and build contract was signed after July 1, 2024. All vessels subject to the ISM Code are required to address cyber risks in their Safety Management System under IMO MSC.428(98) regardless of build date.

IACS UR E26 applies to the ship as a whole, covering network architecture, IT/OT integration, zone and conduit design, and the overall cyber resilience programme. IACS UR E27 applies to individual computer-based systems onboard, requiring each system to meet specific hardening, authentication, and patch management requirements.

We prepare documentation aligned to the requirements of all IACS member classification societies including DNV, Bureau Veritas, ClassNK, ABS, Lloyd's Register, and Indian Register of Shipping.

A typical compliance project for a single vessel takes 6 to 16 weeks depending on the current maturity level and number of computer-based systems to be assessed. Fleet programmes for multiple vessels are structured with parallel workstreams to accelerate delivery.

IACS UR E26/E27 is currently mandatory only for newbuilds contracted after July 2024. However, all existing vessels must address cyber risk through their SMS under IMO MSC.428(98). Many classification societies and charterers are also beginning to require voluntary compliance for existing vessels.

Secure Your Maritime Operations Today

Get expert iacs ur e26/e27 compliance from Codesecure Solutions, Chennai's trusted maritime cybersecurity partner