
Diploma in Maritime OT Cyber Security: IACS UR E26 and E27
The Diploma in Maritime OT Cyber Security: IACS UR E26 and E27 Specialises you in protecting the operational technology (OT) systems of ships: navigation, propulsion, cargo control and automation. You will learn to apply the IACS
Prior Knowledge Assessment
These are the skills this programme builds. Tick the ones you already have and we will tell you which part of the syllabus is really for you.
What is the Diploma in Maritime OT Cyber Security: IACS UR E26 and E27?
The Diploma in Maritime OT Cyber Security: IACS UR E26 and E27
Specialises you in protecting the operational technology (OT) systems of ships: navigation, propulsion, cargo control and automation. You will learn to apply the IACS unified requirements E26 and E27, mandatory for new builds, to design secure on-board networks, assess vulnerabilities and respond to incidents, with a practical approach designed for shipyards, shipowners and equipment makers.
Key advantages
- OT specialisation: Cyber security for embedded industrial systems, not just office IT.
- IACS requirements: Practical application of E26 and E27 to new builds.
- Life-cycle view: Design, construction, operation and maintenance.
- Real cases: Analysis of incidents in shipping and ports.
- Hands-on lab: Segmentation, inventory and response exercises.
Programme highlights
- Protect the ship: Apply cyber security to the bridge, engine room and cargo systems.
- Comply with IACS: Master the UR E26 and E27 requirements.
- Design secure networks: Apply segmentation and defence in depth.
- Respond to incidents: Prepare response and recovery plans.
- Specialise: A scarce and highly sought-after profile in the naval industry.
- Become a specialist in cyber security for connected ships.
Programme Structure
The programme is structured in 8 modules, listed below in order of study.
Cyber Security in the Maritime Environment
- Digitalisation and connectivity of ships
- Differences between IT and OT
- Threats and actors in shipping
- Notable incidents at shipowners and ports
- IMO guidelines on cyber risk
- Integration into the ISM Code
- The IEC 62443 framework
- Regulatory landscape
Ship Operational Systems
- Integrated navigation systems
- ECDIS, radar, AIS and GNSS
- Propulsion and steering control systems
- Power management and automation
- Cargo and ballast systems
- On-board communications
- Remote access by manufacturers
- Asset and data-flow mapping
IACS UR E26: Cyber Resilience of Ships
- Scope and application of UR E26
- Identifying assets and security zones
- Protecting computer-based systems
- Anomaly detection
- Response and recovery
- Required documentation
- Responsibilities of yard, owner and class
- Testing and verification during construction
IACS UR E27: Equipment and Supplier Security
- Scope and application of UR E27
- System security requirements
- Authentication and access control
- Protecting interfaces and ports
- Logging and auditing
- Update management
- Manufacturer documentation
- Type testing and certification
Network Architecture and Technical Protection
- Defence in depth
- Zones and conduits segmentation
- Industrial firewalls and data diodes
- Satellite links and secure remote access
- Identity and privilege management
- Protecting USB ports and removable media
- Hardening equipment
- OT network monitoring
Secure Operation and Maintenance
- Asset inventory and configuration management
- Patch management in OT environments
- Backup and restore
- Managing suppliers and external technicians
- Crew awareness
- Periodic audits and assessments
- Cyber security indicators
- Continuous improvement
Incident Detection and Response
- Intrusion detection in OT
- GNSS and AIS spoofing
- Ransomware at shipowners and ports
- On-board incident response plan
- Ship-shore coordination
- Degraded operating modes
- Basic forensics
- Incident notification and communication
Case Study: Cyber Resilience Plan for a Ship
- Choosing the ship and its systems
- Asset inventory
- Risk analysis
- Zones and conduits design
- Technical and organisational measures
- Response and recovery plan
- Documentation for the classification society
- Final report
Study Time and Workload
800 hours of study, online and at your own pace. Move the slider to the hours a week you can really put in.
Systems, electronics and automation engineers: at shipyards or equipment makers IT cyber security professionals: who want to specialise in maritime OT Technical superintendents and ETOs: responsible for on-board systems Shipowner security managers: implementing cyber risk management Classification society surveyors and engineers: who verify compliance
Academic direction and faculty
The teaching team at Navalis: working professionals who deliver and oversee the institute's programmes.








Student Reviews
Reviews collected and verified by Opynio, not written by us.
Learning Outcomes
- 01Understand on-board OT risk
- 02Apply IACS UR E26
- 03Apply IACS UR E27
- 04Design secure architectures
- 05Manage secure operation
- 06Respond to incidents
Career Opportunities
Entry Requirements
Admissions Process
No waiting for a phone call. If your documents are complete, you can pay in the same session.
Entry profile: A degree in computer science, telecommunications, electronics, naval or industrial engineering, or professional experience in cyber security, automation or maritime systems. Language: A good working level of English to follow classes and materials. Technical requirements: A computer with a stable internet connection, an up-to-date browser and a webcam for live sessions and project presentations. Admissions process: Online application, profile review and a short interview with the academic team. We confirm your start date when you enquire.
Frequently Asked Questions
Leave your details and admissions will write back. If you already know this is the one, go straight to the application and pay in the same session.
