ISO/DIS 24060

Ships and marine technology -- Software maintenance requirements of shipboard equipment

Titre manque

Standards Content (sample)

DRAFT INTERNATIONAL STANDARD
ISO/DIS 24060
ISO/TC 8/SC 11 Secretariat: KATS
Voting begins on: Voting terminates on:
2020-12-21 2021-03-15
Ships and marine technology — Software maintenance
requirements of shipboard equipment
ICS: 47.020.99; 35.240.60
THIS DOCUMENT IS A DRAFT CIRCULATED
FOR COMMENT AND APPROVAL. IT IS
THEREFORE SUBJECT TO CHANGE AND MAY
NOT BE REFERRED TO AS AN INTERNATIONAL
STANDARD UNTIL PUBLISHED AS SUCH.
IN ADDITION TO THEIR EVALUATION AS
BEING ACCEPTABLE FOR INDUSTRIAL,
This document is circulated as received from the committee secretariat.
TECHNOLOGICAL, COMMERCIAL AND
USER PURPOSES, DRAFT INTERNATIONAL
STANDARDS MAY ON OCCASION HAVE TO
BE CONSIDERED IN THE LIGHT OF THEIR
POTENTIAL TO BECOME STANDARDS TO
WHICH REFERENCE MAY BE MADE IN
Reference number
NATIONAL REGULATIONS.
ISO/DIS 24060:2020(E)
RECIPIENTS OF THIS DRAFT ARE INVITED
TO SUBMIT, WITH THEIR COMMENTS,
NOTIFICATION OF ANY RELEVANT PATENT
RIGHTS OF WHICH THEY ARE AWARE AND TO
PROVIDE SUPPORTING DOCUMENTATION. ISO 2020
---------------------- Page: 1 ----------------------
ISO/DIS 24060:2020(E)
COPYRIGHT PROTECTED DOCUMENT
© ISO 2020

All rights reserved. Unless otherwise specified, or required in the context of its implementation, no part of this publication may

be reproduced or utilized otherwise in any form or by any means, electronic or mechanical, including photocopying, or posting

on the internet or an intranet, without prior written permission. Permission can be requested from either ISO at the address

below or ISO’s member body in the country of the requester.
ISO copyright office
CP 401 • Ch. de Blandonnet 8
CH-1214 Vernier, Geneva
Phone: [phone]
Email: [e-mail]
Website: www.iso.org
Published in Switzerland
ii © ISO 2020 – All rights reserved
---------------------- Page: 2 ----------------------
ISO/DIS 24060:2020(E)
Contents Page

Foreword ........................................................................................................................................................................................................................................iv

Introduction ..................................................................................................................................................................................................................................v

1 Scope ................................................................................................................................................................................................................................. 1

1.1 Application ................................................................................................................................................................................................. 1

1.2 Cyber Risk Management ................................................................................................................................................................. 1

1.3 Technology Design: Ship Software Logging System (SSLS) .............................................................................. 1

1.4 Technology Design: Networks and Hosts ......................................................................................................................... 1

1.5 Technology Design: Equipment ................................................................................................................................................ 1

2 Normative references ...................................................................................................................................................................................... 2

3 Terms and definitions ..................................................................................................................................................................................... 2

4 Technology Design .............................................................................................................................................................................................. 4

4.1 Updateable Equipment Inventory .......................................................................................................................................... 4

4.1.1 Equipment Details .......................................................................................................................................................... 4

4.2 SSLS software and hardware requirements ................................................................................................................... 4

4.2.1 General Requirements ................................................................................................................................................ 4

4.2.2 SSLS Connected Equipment Automatic Logging Requirements ............................................. 5

4.2.3 Log Entry Data Requirements .............................................................................................................................. 5

4.2.4 SSLS Host Computer Requirements ................................................................................................................ 6

4.2.5 Cybersecurity Requirements for SSLS ........................................................................................................... 6

4.2.6 Functionality requirements for SSLS user interface ......................................................................... 7

4.2.7 Connected Equipment Monitoring Requirements .............................................................................. 7

Bibliography ................................................................................................................................................................................................................................ 9

© ISO 2020 – All rights reserved iii
---------------------- Page: 3 ----------------------
ISO/DIS 24060:2020(E)
Foreword

ISO (the International Organization for Standardization) is a worldwide federation of national standards

bodies (ISO member bodies). The work of preparing International Standards is normally carried out

through ISO technical committees. Each member body interested in a subject for which a technical

committee has been established has the right to be represented on that committee. International

organizations, governmental and non-governmental, in liaison with ISO, also take part in the work.

ISO collaborates closely with the International Electrotechnical Commission (IEC) on all matters of

electrotechnical standardization.

The procedures used to develop this document and those intended for its further maintenance are

described in the ISO/IEC Directives, Part 1. In particular, the different approval criteria needed for the

different types of ISO documents should be noted. This document was drafted in accordance with the

editorial rules of the ISO/IEC Directives, Part 2 (see www .iso .org/ directives).

Attention is drawn to the possibility that some of the elements of this document may be the subject of

patent rights. ISO shall not be held responsible for identifying any or all such patent rights. Details of

any patent rights identified during the development of the document will be in the Introduction and/or

on the ISO list of patent declarations received (see www .iso .org/ patents).

Any trade name used in this document is information given for the convenience of users and does not

constitute an endorsement.

For an explanation of the voluntary nature of standards, the meaning of ISO specific terms and

expressions related to conformity assessment, as well as information about ISO's adherence to the

World Trade Organization (WTO) principles in the Technical Barriers to Trade (TBT), see www .iso .org/

iso/ foreword .html.

This document was prepared by Technical Committee ISO/TC 8 [Ships and Marine Technonlogy],

Subcommittee SC 11 [Intermodal and Short Sea Shipping].

Any feedback or questions on this document should be directed to the user’s national standards body. A

complete listing of these bodies can be found at www .iso .org/ members .html.
iv © ISO 2020 – All rights reserved
---------------------- Page: 4 ----------------------
ISO/DIS 24060:2020(E)
Introduction

Ships have more and more equipment with updateable software on-board. Current unified requirements

for on-board use of computer-based systems require a software registry for such equipment (IACS

URE22rev2), but these registries are not defined in detail, may be difficult to understand and use, and

information within is often not updated. Some of this situation is caused by the increasing quantity of

covered equipment combined with the increasing regulations requiring various administrative tasks

for crew, shipping companies and other stakeholders. This situation makes staying current on software

updates more difficult, which also introduces increased risks of equipment problems. This standard

began development based on a 2017 CIRM-BIMCO industry standard for software maintenance

procedures.

This standard defines a Ship Software Logging System (SSLS) for shipboard equipment software.

Recognizing that maintenance of shipboard software is a major undertaking this standard initially

sets base characteristics. The SSLS may be used by various users and log data from various types of

equipment. It is expected that this standard will evolve over time together with related regulations and

when experience on the use of the introduced concept accumulates.
© ISO 2020 – All rights reserved v
---------------------- Page: 5 ----------------------
DRAFT INTERNATIONAL STANDARD ISO/DIS 24060:2020(E)
Ships and marine technology — Software maintenance
requirements of shipboard equipment
1 Scope
The scope of this standard addresses five issues:
1.1 Application

This document defines a Ship Software Logging System (SSLS) for logging and retrieving software

version information and current operational status to enable software maintenance for ship operational

technology equipment and associated integrated systems, including but not limited to:

— Control and alarm systems;
— Fire and water mist systems;
— Navigation and communication systems;
— Steering control systems;
— Propulsion systems;
— Power generation systems;
— Performance monitoring systems;
— Auxiliary systems.
1.2 Cyber Risk Management

This document stipulates cyber risk management be incorporated into design and use of SSLS.

1.3 Technology Design: Ship Software Logging System (SSLS)

This document sets requirements for the design and usability of Ship Software Logging System (SSLS)

software that:

— Records software versions for equipment with updateable software (hereinafter “equipment”)

— Sets an initial log entry when equipment is first installed or detected by SSLS

— Includes a repository of electronic service reports associated with log entries

— Automatically logs reports sent by equipment
1.4 Technology Design: Networks and Hosts

This document specifies that equipment messages pass from equipment to SSLS automatically when

possible.
1.5 Technology Design: Equipment

This document specifies that equipment sends standard version messages with software version

information on appropriate time intervals.
© ISO 2020 – All rights reserved 1
---------------------- Page: 6 ----------------------
ISO/DIS 24060:2020(E)
2 Normative references

The following documents are referred to in the text in such a way that some or all of their content

constitutes requirements of this document. For dated references, only the edition cited applies. For

undated references, the latest edition of the referenced document (including any amendments) applies.

ISO 19847:2018, Ships and marine technology — Shipboard data servers to share field data at sea

ISO 19848:2018, Ships and marine technology — Standard data for shipboard machinery and equipment

IEC 61162-1:2016, Maritime navigation and radiocommunication equipment and systems — Digital

interfaces — Part 1: Single talker and multiple listeners

IEC 61162-450, Maritime navigation and radiocommunication equipment and systems — Digital

interfaces — Part 450: Multiple talkers and multiple listeners — Ethernet interconnection

3 Terms and definitions
For the purposes of this document, the following terms and definitions apply.
3.1
category of update

classification assigned to a software update based upon the reason for undertaking the update, which

may be any one of the below or some combination:
— Initial State
— Bug Fix (resolving software bugs);
— Compliance Update (maintaining conformity with regulations);

— Critical Update (critical to restoring proper performance of the shipboard equipment);

— Feature Release (adding additional functionality);

— Obsolescence Update (addressing software and/or hardware that is no longer supported);

— Security Update (protecting against cyber threats);
— Other (requires explanation).
3.2
controlled network

shipboard network that has been designed to operate such that it does not pose any unacceptable safety

and security risks to any connected network nodes
3.3
critical update

software update identified as critical to restoring proper performance of the shipboard equipment

3.4
data

the quantities, characters, or symbols on which operations are performed by computers of shipboard

equipment
3.5
equipment

devices involved in the operation of a ship. See shipboard equipment and operational technology

3.6
integrated system
interconnected system combining a number of different shipboard equipment
2 © ISO 2020 – All rights reserved
---------------------- Page: 7 ----------------------
ISO/DIS 24060:2020(E)
3.7
method of update

method by which a software update is undertaken, which may be manually or automatically

3.8
operational technology

operational technology (OT) includes devices, sensors, software and associated networking that

monitor and control onboard systems
3.9
removable external data source (REDS)

user removable non-network data source, including, but not limited to, compact discs, memory sticks

and Bluetooth™ devices
3.10
ship software logging system (SSLS)
software maintenance logging system for onboard equipment software
3.11
shipboard equipment

system comprising a combination of hardware, software and data, performing a specific function on

board a ship. See operational technology
3.12
shipowner (a.k.a. shipping company)

the owner of the ship or any other organization or person such as the Manager, or the Bareboat

Charterer who has assumed responsibility for operation of the ship and who is responsible for initiating

software maintenance of the shipboard equipment. This term is synonymous with Shipping Company

in this document.
3.13
software

programs and operating instructions used in shipboard operational technology equipment, including

any updatable firmware and configuration.
3.14
software maintenance

checking, updating, re-configuring, or upgrading the software of shipboard equipment in order to

prevent or correct faults, maintain regulatory compliance, and/or improve performance.

3.15
system integrator
the stakeholder that combines shipboard equipment into an integrated system.
3.16
uncontrolled equipment
device that is not part of a controlled network.
3.17
uncontrolled network

shipboard data network that does not meet the definition of a controlled network.

3.18
version message
a message automatically sent by connected equipment containing an indication of
...