New Cyber Security Clause from BIMCO
Overview
BIMCO’s Documentary Committee has agreed a new standard Cyber Security Clause that requires the parties to implement cyber security procedures and systems, to help reduce the risk of an incident and mitigate the consequences should a security breach occur.
In the wake of recent costly cyber security incidents involving large shipping companies, cyber security has become a major focus in the maritime industry.
BIMCO has taken a lead position on cyber security issues through its active role at the International Maritime Organization and by co-authoring the “Industry Guidelines on cyber security onboard ships”. The development of the BIMCO Cyber Security Clause has been an important part of this initiative.
The clause has been written by a small drafting team, led by Inga Frøysa of Klaveness, with representatives from shipowners, P&I clubs and a law firm, and will be published towards the end of May.
“I am very pleased to see BIMCO as the first mover on this important topic. Recent years have shown that there is a clear need for a clause addressing the contractual issues that can arise from a cyber security incident,” says Inga Frøysa.
Sharing relevant information
The clause is drafted in broad and generic language which allows for it to be used in a wide range of contracts and in a string of contracts for easy back-to-back application. It is hoped that the clause will assist parties in obtaining affordable insurance for their cyber security exposure, as the clause introduces a cap on the liability for breaches.
“It was very important to the subcommittee to impose an obligation on the parties to keep each other informed if a cyber security incident should occur, and to share any relevant information, which could assist the other party in mitigating and resolving an incident as quickly as possible,” Frøysa says.
This is done through a two-fold notification process. Firstly, through an immediate notification from the party who becomes aware of an incident to the other party. Secondly, through a more detailed notification once the affected party has had the chance to investigate the incident.
The clause also requires the parties to always share subsequent information, which could assist the other party in mitigating or preventing any effects from the incident.
The level of required cyber security will depend on many elements such as the size of the company, its geographical location and nature of business.
The clause takes this into account by stipulating that the parties must implement “appropriate” cyber security. The clause also requires each party to use reasonable endeavors to ensure that any third-party providing services on its behalf in connection with the contract, has appropriate cyber security.
Feedback or a question about this information?
Posted:
22 May 2019
VPS Bunker Alerts
Veritas Petroleum Services (VPS) publish regular Bunker Alerts based entirely on fuel samples and have kindly permitted BIMCO’s Members to access this information.
The Bunker Alerts are not intended to be an evaluation of overall bunker quality in the port or area concerned, but usually highlight a specific parameter within the fuel which has raised a quality issue.
Latest ice reports for members
Latest piracy reports
Latest industry releasable threats
Related event
Somali Piracy Webinar
- 18 November, 2024
Join our webinar on Somali piracy with Jakob Paaske Larsen, BIMCO’s Head of Maritime Safety & Security, and Commander Jesús Leal from the EU Na...
Related publication
Cyber Security Workbook for On Board Ship Use
A practical workbook on identifying cyber risks and how to respond in case of a cyber attack.
ELSEWHERE ON BIMCO
Contracts & Clauses
All of BIMCO's most widely used contracts and clauses as well as advice on managing charters and business partners.
Learn about your cargo
For general guidance and information on cargo-related queries.
BIMCO Publications
Want to buy or download a BIMCO publication? Use the link to get access to the ballast water management guide, the ship master’s security manual and many other publications.
About a new business partner
We can help members check new business partners. We also help to recover millions of USD (undisputed) funds every year.
