IMO Maritime Cybersecurity Guidelines (MSC-FAL.1/Circ.3/Rev.4) 3.5.3.1: 3.5.3.1 User credentials, privileged accounts and leavers

Give every user unique credentials, keep ordinary and privileged accounts apart, and when employees or other users leave, recover their security devices and disable their accounts.

Maintained by Gerard BlokdykVerified against the published standard 31 May 2026Control text last updated 21 May 2026

Other controls in Protect – IMO Maritime Cybersecurity Guidelines (MSC-FAL.1/Circ.3/Rev.4)

3.5.3 3.5.3 Protect: risk controls and contingency planning
3.5.3.2 3.5.3.2 Passwords, authentication and secured communications
3.5.3.3 3.5.3.3 Exposure, approvals, logging, segmentation and secure acquisition
3.5.3.4 3.5.3.4 Protection of connected systems and cryptography
3.5.3.5 3.5.3.5 Unauthorized removable media
3.5.3.6 3.5.3.6 Cybersecurity training, familiarization and testing
3.5.3.7 3.5.3.7 Backups, software updates and incident response plans
3.5.3.8 3.5.3.8 Supply chain security policy for critical systems

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All IMO Maritime Cybersecurity Guidelines (MSC-FAL.1/Circ.3/Rev.4) controls