ISO 23799:2024
(Main)Ships and marine technology — Assessment of onboard cyber safety
Ships and marine technology — Assessment of onboard cyber safety
This document establishes the elements of onboard cyber risk assessment and specifies requirements for the assessment process, assessment preparation, risk identification, risk analysis and risk evaluation. This document applies to the risk assessment of onboard cyber systems based on network technologies which mainly include bridge systems, cargo management systems, propulsion and machinery management and power control systems, access control systems, passenger or visitor servicing and management systems, passenger-facing networks, core infrastructure systems, administrative and crew welfare systems and communication systems.
Titre manque
General Information
Buy Standard
Standards Content (Sample)
INTERNATIONAL ISO
STANDARD 23799
First edition
Ships and marine technology —
Assessment of onboard cyber safety
PROOF/ÉPREUVE
Reference number
ISO 23799:2023(E)
© ISO 2023
---------------------- Page: 1 ----------------------
ISO 23799:2023(E)
COPYRIGHT PROTECTED DOCUMENT
© ISO 2023
All rights reserved. Unless otherwise specified, or required in the context of its implementation, no part of this publication may
be reproduced or utilized otherwise in any form or by any means, electronic or mechanical, including photocopying, or posting on
the internet or an intranet, without prior written permission. Permission can be requested from either ISO at the address below
or ISO’s member body in the country of the requester.
ISO copyright office
CP 401 • Ch. de Blandonnet 8
CH-1214 Vernier, Geneva
Phone: +41 22 749 01 11
Email: copyright@iso.org
Website: www.iso.org
Published in Switzerland
ii
PROOF/ÉPREUVE © ISO 2023 – All rights reserved
---------------------- Page: 2 ----------------------
ISO 23799:2023(E)
Contents Page
Foreword .iv
Introduction .v
1 Scope . 1
2 Normative references . 1
3 Terms and definitions . 1
4 Elements and process of risk assessment . 2
4.1 Relationship of elements . . 2
4.2 Process of risk assessment . 3
5 A s s e s s ment pr ep a r at ion . 5
6 Risk identification .5
6.1 Identification of asset . 5
6.2 Identification of threat . 8
6.3 Identification of vulnerability . 10
6.4 Identification of existing control measures . 11
7 Risk analysis .12
7.1 Risk analysis process .12
7.2 Risk calculation method . .12
7.3 Impact loss of consequences of incident scenarios .12
7.4 Likelihood of incident scenarios . 13
7.5 Risk calculation of onboard cyber security .
...
ISO/DIS 23799: 2023(E)
Style Definition: Heading 2: Tab stops: Not at 0.63 cm
Style Definition: Heading 3: Tab stops: 1.27 cm, List
ISO TC 8/WG 4
tab
Style Definition: Heading 4: Tab stops: 1.9 cm, List tab
Date: 2023-12-2211-07
+ Not at 1.27 cm
Ships and marine technology — Assessment of onboard cyber safety
Style Definition: Heading 5: Tab stops: 1.9 cm, List tab
+ Not at 1.27 cm
Style Definition: Heading 6: Tab stops: 2.54 cm, List
tab + Not at 1.27 cm + 1.9 cm
Style Definition: Heading 8: Font color: Text 1
Style Definition: Heading 9: Font color: Text 1
Style Definition: Default Paragraph Font
Style Definition: List Number 2: Tab stops: Not at 0.7
cm + 1.4 cm + 2.1 cm + 2.8 cm + 3.5 cm + 4.2 cm +
4.9 cm + 5.6 cm + 6.3 cm + 7 cm
Style Definition
...
Style Definition: Caption
Style Definition: Block Text
Style Definition: TOC 3
Style Definition: TOC 2
Style Definition: Subtitle: Font color: Text 1
Style Definition: List
Style Definition: a2: Tab stops: 0.63 cm, List tab
Style Definition: a3: Tab stops: 1.27 cm, List tab
Style Definition: a4: Tab stops: 1.9 cm, List tab
Style Definition: a5: Tab stops: 1.9 cm, List tab
Style Definition: a6: Tab stops: 2.54 cm, List tab
Style Definition: zzCopyright
Style Definition: Figure Title
Style Definition: Annex Figure Title
Style Definition: Annex Table Title
Style Definition: 段
Style Definition: Hashtag1
Style Definition: Intense Quote
Style Definition: Mention1
Style Definition: Quote: Font color: Text 1
Style Definition: Smart Hyperlink1
Style Definition: Subtle Emphasis1: Font color: Text 1
Style Definition: Subtle Reference1: Font color: Text 1
Style Definition: Unresolved Mention1
Style Definition
...
Style Definition
...
Style Definition: ISO_Secret_Observations
---------------------- Page: 1 ----------------------
ISO/DIS 23799:2023(E)
© ISO 2023
Formatted: Default Paragraph Font
Formatted: Indent: Left: 0 cm, Right: 0 cm, Space
All rights reserved. Unless otherwise specified, or required in the context of its implementation, no
Before: 0 pt, No page break before, Adjust space
part of this publication may be reproduced or utilized otherwise in any form or by any means,
between Latin and Asian text, Adjust space between
electronic or mechanical, including photocopying, or posting on the internet or an intranet, without
Asian text and numbers
prior written permission. Permission can be requested from either ISO at the address below or
Formatted: Default Paragraph Font
ISO’sISO's member body in the country of the requester.
ISO copyright officeCopyright Office
CP 401 • Ch. de Blandonnet 8
CH-1214 Vernier, Geneva
Formatted: Indent: Left: 0 cm, First line: 0 cm, Right: 0
cm, Adjust space between Latin and Asian text, Adjust
Phone: + 41 22 749 01 11 space between Asian text and numbers
Email: copyright@iso.org
Email: copyright@iso.org
Website: www.iso.orgwww.iso.org
Formatted: Indent: Left: 0 cm, First line: 0 cm, Right: 0
cm, Adjust space between Latin and Asian text, Adjust
Published in Switzerland. space between Asian text and numbers
ii © ISO 2023 – All rights reserved
---------------------- Page: 2 ----------------------
ISO/DIS 23799:2023(E)
Contents Page
Foreword . iv
Introduction . v
1 Scope . 1
2 Normative references . 1
3 Terms and definitions. 1
4 Elements and process of risk assessment . 2
5 Assessment preparation . 4
6 Risk identification . 4
7 Risk analysis . 10
8 Risk evaluation . 13
Annex A .
...
Questions, Comments and Discussion
Ask us and Technical Secretary will try to provide an answer. You can facilitate discussion about the standard in here.