UR E26 requires class society survey and approval at initial construction + periodic + post-modification. Initial construction survey: class society reviews + approves Ship Cyber Resilience Plan (SCRP) + CBS inventory + network architecture + risk assessment + control implementations + IRP + recovery procedures + training + supplier management; certifies vessel meets UR E26 requirements at delivery. Periodic survey: typically annual or per Member Society Rules; verifies continued compliance + tests representative controls + reviews changes + lessons learned + training updates + incident history. Post-modification survey: re-assessment after major CBS modification + retrofit + network changes + new supplier; updated documentation + reapproval. Owner documentation handover: complete documentation package received from shipyard + suppliers + OEMs + class society approval + survey reports; ongoing maintenance of documentation by owner; documentation provided to crew + IT/ETO + shore IT + insurer + auditor + flag administration on request. Class society auditor / surveyor competency in cyber required + supported by IACS training programmes + accreditation. Class Society Member responsibilities: ABS + BV + CCS + ClassNK + CRS + DNV + IRS + KR + LR + PRS + RINA + RS each issue their own Rules implementing UR E26 + E27 with possible additional requirements. IACS UR E26 + survey + approval + documentation + periodic + class society competency applies.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.