Part of the PROTECT Playbook ← Return to Hub
Phase 2: Protect All vessels
Satisfies: E26 §4.2.6 E27 §4.2 IMO MSC-FAL.1 All vessels

Remote Access: The Digital Gangway

Regulatory Context: IACS UR E26 (Section 4.2.6) requires that remote access to critical systems be controlled, logged, and restricted to authorized personnel only. This module focuses on eliminating “Always-On” backdoors.

On a modern vessel, OEMs and shore-side technicians often require access to HMIs for troubleshooting. However, an unsecured VPN or a forgotten TeamViewer session is a permanent invitation for ransomware. Security is not about blocking access; it is about controlling the gate.

Vessel-Initiated

The connection must be started by the ETO on the ship, never “dialed-in” from the shore without notice.

MFA Required

Static passwords are forbidden. All remote logins must require a second factor (Code or App).

Time-Limited

Access is granted for a specific window (e.g., 2 hours) and automatically revoked.

Implementing the OT Kill-Switch

There are two primary ways an ETO can ensure a “Default-Off” posture for remote access:

The Physical Air-Gap

Keeping the vendor’s gateway or jump-host physically disconnected from the OT switch until the moment access is required. No cable = No breach.

The Logical Firewall Toggle

Maintaining a specific firewall rule labeled “OEM-REMOTE-ACCESS” in a Disabled state, only toggled On after a formal request is signed.

ETO Best Practice: Closing the Gate

Never rely on the vendor to “log out.” To satisfy IACS UR E26 audit requirements, the ETO must verify session termination:

  • Hard Kill: Manually disable the firewall rule or pull the physical bridge cable.
  • Verification: Refresh the HMI user-list to ensure no active sessions remain.
  • Audit Entry: Timestamp the Actual End Time in the TAG-OT-LOG-03 Log.

Compliance Documentation Previews

Standardized templates for managing remote access. View watermarked previews below; premium SOPs and fillable forms require the Pro Bundle.

TAG-OT-LOG-03
Remote Access Log
View Form
TAG-OT-SOP-05
Kill-Switch Config
Unlock with Pro Bundle
TAG-OT-CHK-01
Post-Session Audit
View Form

Unlock Full Compliance & Intelligence

Upgrade to the TAGSIA Pro Bundle to get all 40+ fillable documents, editable SOPs, and unlimited access to our real-time Threat Intel feed, CVE Library, and Vendor Advisories.

Upgrade to Pro Bundle
Includes Unlimited Intel Search
Instant access to IACS E26/E27 Templates

Next Section

OT Password Policy & RBAC

Phase 2: Protect All vessels Satisfies: E26 §4.2.4 E27 §4.1 IEC 62443 IMO MSC-FAL.1 BIMCO v4 All vessels OT Password P...

Scroll to Top