IACS Unified Requirements E26/E27 - Cyber Resilience of Ships and On-Board Systems

UR E27 section 4: security capabilities – IACS Unified Requirements E26/E27 - Cyber Resilience of Ships and On-Board Systems

IACS Unified Requirements E26/E27 - Cyber Resilience of Ships and On-Board Systems E27-4.1-08: E27 item 8: Authorization enforcement

The CBS shall on every interface give human users only the authorisations that least privilege and separation of duties allow. (from SR 2.1 of IEC 62443-3-3)

Maintained by Gerard BlokdykVerified against the published standard 31 May 2026Control text last updated 21 May 2026

Other controls in UR E27 section 4: security capabilities – IACS Unified Requirements E26/E27 - Cyber Resilience of Ships and On-Board Systems

E27-4.1-01 E27 item 1: Human user identification and authentication
E27-4.1-02 E27 item 2: Account management
E27-4.1-03 E27 item 3: Identifier management
E27-4.1-04 E27 item 4: Authenticator management
E27-4.1-05 E27 item 5: Wireless access management
E27-4.1-06 E27 item 6: Strength of password-based authentication
E27-4.1-07 E27 item 7: Authenticator feedback
E27-4.1-09 E27 item 9: Wireless use control

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All IACS Unified Requirements E26/E27 - Cyber Resilience of Ships and On-Board Systems controls