船舶和海洋技术

[中文适用范围]： 本文件确立了船上网络风险评估的要素，并规定了评估流程、评估准备、风险识别、风险分析和风险评估的要求。本文件适用于基于网络技术的船上网络系统的风险评估，主要包括桥梁系统、货物管理系统、推进和机械管理和电力控制系统、门禁系统、乘客或访客服务和管理系统、面向乘客的网络、核心基础设施系统、行政和船员福利系统以及通信系统。 [外文原描述]： This document establishes the elements of onboard cyber risk assessment and specifies requirements for the assessment process, assessment preparation, risk identification, risk analysis and risk evaluation. This document applies to the risk assessment of onboard cyber systems based on network technologies which mainly include bridge systems, cargo management systems, propulsion and machinery management and power control systems, access control systems, passenger or visitor servicing and management systems, passenger-facing networks, core infrastructure systems, administrative and crew welfare systems and communication systems.