Professional Diploma in Maritime OT Cybersecurity: IACS UR E26 and E27
This professional diploma specialises you in protecting the operational technology (OT) systems of ships: navigation, propulsion and cargo control. You will work with the requirements of IACS UR E26 and E27, network segmentation and risk analysis, along with incident response and documentation.
Prior knowledge check
These are the skills this programme gives you. Tick the ones you already master and we will tell you which part of the syllabus is for you.
You are starting from scratch in this subject. The programme is designed precisely for that.
What is the Professional Diploma in Maritime OT Cybersecurity: IACS UR E26 and E27?
This professional diploma focuses on protecting the operational technology (OT) systems of ships: navigation, propulsion, cargo control and automation. You will learn to apply the IACS unified requirements UR E26 and E27, which are mandatory for new builds, to design secure networks on board, to assess vulnerabilities and to respond to incidents. It is aimed at shipyards, shipping companies and equipment manufacturers.
What makes it different: OT specialisation (cybersecurity of industrial systems on board, not just office IT); practical application of the IACS requirements E26 and E27 in new builds; full life-cycle coverage from design and construction to operation and maintenance; analysis of real incidents in the maritime and port sector; and hands-on exercises in segmentation, asset inventory and incident response.
Programme highlights
- Applies cybersecurity to the bridge, engine room and cargo systems.
- Covers the requirements of IACS UR E26 and E27.
- Teaches segmentation and defence in depth.
- Prepares response and recovery plans.
- A scarce and highly demanded profile in the shipbuilding industry.
- Trains specialists in the cybersecurity of connected ships.
Syllabus of the Professional Diploma in Maritime OT Cybersecurity: IACS UR E26 and E27
8 modules. Select a module to see its content.
Cybersecurity in the Maritime Environment
- 1.1. Digitalisation and connectivity of ships
- 1.2. Differences between IT and OT
- 1.3. Threats and threat actors in the maritime sector
- 1.4. Significant incidents in shipping companies and ports
- 1.5. IMO guidelines on cyber risk
- 1.6. Integration into the ISM Code
- 1.7. IEC 62443 framework
- 1.8. Regulatory landscape
Shipboard Operational Systems
- 2.1. Integrated navigation systems
- 2.2. ECDIS, radar, AIS and GNSS
- 2.3. Propulsion and steering control systems
- 2.4. Power management and automation
- 2.5. Cargo and ballast systems
- 2.6. Onboard communications
- 2.7. Remote access by manufacturers
- 2.8. Asset map and data flows
IACS UR E26: Cyber Resilience of Ships
- 3.1. Scope and application of UR E26
- 3.2. Identification of assets and security zones
- 3.3. Protection of computer-based systems
- 3.4. Anomaly detection
- 3.5. Response and recovery
- 3.6. Required documentation
- 3.7. Responsibilities of shipyard, shipowner and classification society
- 3.8. Testing and verification during construction
IACS UR E27: Security of Equipment and Suppliers
- 4.1. Scope and application of UR E27
- 4.2. System security requirements
- 4.3. Authentication and access control
- 4.4. Protection of interfaces and ports
- 4.5. Logging and auditing
- 4.6. Update management
- 4.7. Manufacturer documentation
- 4.8. Type testing and certification
Network Architecture and Technical Protection
- 5.1. Defence in depth
- 5.2. Segmentation into zones and conduits
- 5.3. Industrial firewalls and data diodes
- 5.4. Satellite connections and secure remote access
- 5.5. Identity and privilege management
- 5.6. Protection of USB ports and removable media
- 5.7. Equipment hardening
- 5.8. OT network monitoring
Secure Operation and Maintenance
- 6.1. Asset inventory and configuration management
- 6.2. Patch management in OT environments
- 6.3. Backup and restoration
- 6.4. Management of suppliers and external technicians
- 6.5. Crew awareness
- 6.6. Periodic audits and assessments
- 6.7. Cybersecurity indicators
- 6.8. Continual improvement
Incident Detection and Response
- 7.1. Intrusion detection in OT
- 7.2. GNSS and AIS spoofing
- 7.3. Ransomware in shipping companies and ports
- 7.4. Onboard incident response plan
- 7.5. Ship–shore coordination
- 7.6. Degraded operating modes
- 7.7. Basic forensic analysis
- 7.8. Incident notification and communication
Case Study: Cyber Resilience Plan for a Ship
- 8.1. Selection of the ship and its systems
- 8.2. Asset inventory
- 8.3. Risk analysis
- 8.4. Design of zones and conduits
- 8.5. Technical and organisational measures
- 8.6. Response and recovery plan
- 8.7. Documentation for the classification society
- 8.8. Final report
Duration and format of the Professional Diploma in Maritime OT Cybersecurity: IACS UR E26 and E27
It is 800 hours. Tell us how many you can study each week and we will tell you when you will really finish.
This is the pace at which most students finish. It fits well with the instalment plan.
Academic leadership and faculty
The Navalis teaching team: working professionals who teach and supervise the programmes.
Dra. Marina AlcoverAcademic Director and Head of Quality Assurance
Ing. Diego CifuentesSenior Lecturer in Naval Welding and Non-Destructive Testing; Head of QA/QC for Welded Joints
Cap. Javier Abaroa (MCA)Senior Lecturer in Ship Handling, Electronic Navigation (ECDIS/Radar/ARPA) and GMDSS; STCW Compliance and Bridge Resource Management Coordinator
Dr. Pau FerrerSenior Lecturer in Naval Architecture and Simulation; Director of the Hydrodynamics and CFD Laboratory
Dra. Nuria LlobregatSenior Lecturer in Marine Meteorology, SAR and Operational Safety; Navigation Risk Management Coordinator
Ing. Javier BañulsSenior Lecturer in Electrical Engineering, Automation and ETO Engineering; Electronic Integration and Engine Alarms Coordinator
Ing. Sofía MarquinaSenior Lecturer in Materials, Composites and Corrosion Protection; Coordinator of the Advanced Paints and Coatings Line
Ing. Tomás RieraSenior Lecturer in Propulsion, Alternative Energy and Hybrid Systems; Energy Performance and Vibration CoordinatorObjectives of the Professional Diploma in Maritime OT Cybersecurity: IACS UR E26 and E27
Career opportunities after the Professional Diploma in Maritime OT Cybersecurity: IACS UR E26 and E27
Questions about the Professional Diploma in Maritime OT Cybersecurity: IACS UR E26 and E27
They are unified requirements of the classification societies on the cyber resilience of ships and the security of equipment installed on board, applicable to newbuildings.
For both. Ship systems are explained to IT profiles and cybersecurity concepts to maritime profiles.
This one focuses on operational systems and on technical compliance with E26 and E27 during construction and operation.
Yes. Participants work with inventories, network segmentation and incident simulations.
A complete cyber resilience plan for a ship, ready to be submitted to the classification society.
100% online, with a virtual campus available 24/7, live sessions that are recorded, and tutorials with the teaching staff.
The programme has a workload of 120 hours. You can progress at your own pace within the timetable we give you when you enrol.
Each programme has its own start date, which is shown on this page and confirmed by the admissions team when you request information.
More programmes in Innovation and startups
Admission process
No waiting for a call back. If your documents are in order, you can enrol in the same session.
- Profile: a degree in Computer Science, Telecommunications, Electronics, Naval or Industrial Engineering, or professional experience in cybersecurity, automation or maritime systems.
- Language: sufficient command of the language of instruction to follow classes and materials; basic technical English recommended.
- Technical resources: a computer with a stable connection, an up-to-date browser and a camera for live sessions.
- Admission: online application, profile review and a short interview with the academic team.
- 01ApplicationYour details, background and documents.
- 02Instant reviewWe check that everything is complete and in order.
- 03EnrolmentChoose full payment or instalments and reserve your place.
Admission is provisional until the committee validates the documents provided. If you do not meet the requirements, the full amount is refunded.
Ask us before you enrol
Leave your details and admissions will write to you to answer any questions. If you are already sure, you can apply and pay in the same session.