Document number:	SCH-XXX-XXXXX
Document type:	Schedule
Responsibility for implementation & training:	CTO
CB contract doc/ schedule:	YES or NO
Scope:	Maritime
Reason for change:	Initial version
Approved by:
Approved date:
Next review:
Review and consultation process:	Reviewed Annually by CEO
Associated documentation:	N/A
Distribution:	Controlled copy in Confluence Quality Management System. Any other Copies will not be deemed control copies
Nimbox import version:

History of key revisions:
Date issued:	Author:	Description:
18 Jun 2020	Emma Philpott	First Introduction


Internal audit history
Date:	Conducted by:	Link to IA:
18 Jun 2020

Version 1

Effective Date: January 2022

Revisions:
Date:	Author:	Description:
January 2022	Jamie Randall	First Version Published

	File	Modified

No files shared here yet.

Maritime Cyber Assessor Criteria

IASME requires that anyone who applies to become a Maritime Cyber Assessor must have a suitable level of skills in cyber security in the Maritime sector and to be proficient in the security aspects of Operational Technology (OT) environments. They must also attend the appropriate Assessor Training Course for the category of Assessor they wish to attain.

Maritime Cyber Assessors must meet all the requirements below:

Hold one of the following qualifications:

a. ISO 27001 Lead Auditor,

b. ISACA – Certified Information Security Manager (CISM)

c. ICS2 Certified Information Security Systems Professional (CISSP).

Be a member of a Maritime Professional body, e.g. Royal Institution of Naval Architects (RINA) or similar.

Hold a current certification in the security of Operational Technology (OT) environments (Fortinet, Cisco, SANS, etc or similar) or be able to demonstrate suitable experience of OT to the satisfaction of IASME

IASME may at its sole discretion accept alternative qualifications and certifications to those listed above. This will be decided on a case-by-case basis by IASME’s Head of Technical Strategy taking into account the skills requirements of the scheme.

Maritime Cyber Baseline Assessors must also attend and pass the Maritime Cyber Assessor Training course

Assessors must maintain any certifications that they rely on above (if those certifications require ongoing maintenance).

Assessors must attend at least one IASME Maritime Cyber Assessor Certification Body (CB) meeting each year, either in person or virtually.

Assessors will retain their status if they leave their CB and start work with another organisation - they do not have to attend the training a second time, but they cannot offer certification unless they are working on behalf of an authorised Maritime Cyber CB.

DRAFT - Schedule 11 - Maritime Cyber Assessor Criteria

Maritime Cyber Assessor Criteria