IMO Maritime Cybersecurity Guidelines (MSC-FAL.1/Circ.3/Rev.4) 3.5.3.9: 3.5.3.9 Assessing effectiveness and reviewing measures

Set policies and procedures for judging how well the cyber risk management measures work, for example through audits, and for reviewing and updating the measures at intervals.

Maintained by Gerard BlokdykVerified against the published standard 31 May 2026Control text last updated 21 May 2026

Other controls in Protect – IMO Maritime Cybersecurity Guidelines (MSC-FAL.1/Circ.3/Rev.4)

3.5.3 3.5.3 Protect: risk controls and contingency planning
3.5.3.1 3.5.3.1 User credentials, privileged accounts and leavers
3.5.3.2 3.5.3.2 Passwords, authentication and secured communications
3.5.3.3 3.5.3.3 Exposure, approvals, logging, segmentation and secure acquisition
3.5.3.4 3.5.3.4 Protection of connected systems and cryptography
3.5.3.5 3.5.3.5 Unauthorized removable media
3.5.3.6 3.5.3.6 Cybersecurity training, familiarization and testing
3.5.3.7 3.5.3.7 Backups, software updates and incident response plans

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All IMO Maritime Cybersecurity Guidelines (MSC-FAL.1/Circ.3/Rev.4) controls