Urgent Update: Enforcement Now Active

As of June 1, 2025, the IMO’s SN.1/Circ.901 is fully enforced, with:

• 23 ships detained globally for non-compliance (per Equasis data)

• Top deficiencies:

  1. Unpatched Furuno FEA-2100 systems (62%)

  2. Missing hardware security modules (HSMs) (28%)

  3. Incomplete crew training records (10%)

---

Key Requirements Under Scrutiny

1. Mandatory Patches for Critical Vulnerabilities

 

2. Hardware Security Modules (HSMs) Now Mandatory

• Approved Models:

  • Thales payShield 9000 ($3,800/ship)

  • Utimaco CryptoServer CP5 (IMO-certified)

• Deadline: Installed before next annual survey

3. Crew Training Documentation

• New 2025 Standard: Minimum 4 hours/year of cyber drills

• Acceptable Proof:

  • IMO-model course 1.45 certificates

  • VR training logs from Marlins

---

Recent Enforcement Actions

Case Study: MV Atlantic Dawn Detention (June 15, 2025)

• Location: Singapore Port

• Deficiency: Unpatched JRC ECDIS (v2.4.0)

• Consequences:

  • 48-hour detention ($12,000/day fee)

  • Class suspension until compliance

Lesson: PSC checks now include automated version scans of ECDIS firmware.

---

Compliance Checklist for June 2025

1. Verify Your System

   text

   Copy

   Download

   ECDIS Menu → Help → About → Check version

2. Submit Proof to Flag State

   • Template: IMO Compliance Declaration Form

3. Prepare for PSC Inspections

   • Required documents:

     • Patch installation logs

     • HSM purchase invoices

     • Crew training records

---

Industry Impact

Insurance Changes (June 2025):

• Lloyd’s Market Association: 15% premium surcharge for ships without HSMs

• North P&I Club: Cyber claims denied if ECDIS unpatched

Quote from BIMCO:

“Over 40% of ships needed last-minute upgrades in Q2 2025 – don’t risk detentions.”

---

📌 Key Resources

• IMO SN.1/Circ.901 (2025 Revised)

• Free Cyber Compliance Webinar (June 28, 2025)