Maritime Cyber Risk Management
Code imo-cyber-risk
Training aligned with IMO MSC.428(98) and BIMCO Guidelines on Cyber Security On Board Ships v.4 (2020).
- Prerequisites
- —
- Duration
- 16 hours
- Validity
- 3 years
- Refresher
- every 3 years
- Typical cost
- ~$600 USD
Where to take this course
Country guides list accredited training centres in the major seafarer-supplying nations:
High confidence
Editorial confidence: how we grade. Data sources and methodology: /sources.
Maritime Cyber Risk Management: FAQ
- What is the Maritime Cyber Risk Management (IMO-CYBER-RISK) certification?
- Training aligned with IMO MSC.428(98) and BIMCO Guidelines on Cyber Security On Board Ships v.4 (2020). Category: Cyber.
- Who needs IMO-CYBER-RISK?
- IMO-CYBER-RISK applies to seafarers in roles defined under STCW. No formal prerequisites are listed in our directory. Without IMO-CYBER-RISK, operators may decline to roster you for the relevant duties.
- How long does IMO-CYBER-RISK take?
- Typical course duration is 16 hours (2 working days at 8h/day). This is face-to-face or blended-learning time at an approved training centre; revalidation refresher courses are usually shorter. Plan against your sea leave window before booking.
- How much does IMO-CYBER-RISK cost?
- Typical cost is around US$600 at an approved provider. Cost varies widely by country and training centre quality; many shipping companies cover the course fee as part of the contract. Check with your manning agent or fleet department before paying out of pocket.
- Where can I get IMO-CYBER-RISK?
- IMO-CYBER-RISK is delivered by approved training centres in most major maritime training countries. Use our /training-centres directory and the certifications-by-country filters to find an approved provider near you. The flag administration of your seaman's book may also publish a list of accepted providers.
- How long is IMO-CYBER-RISK valid?
- 3 years from issue, with a refresher required every 3 years. Plan your revalidation course before the expiry date; lapsed certificates may require re-sitting the full course rather than a refresher, and operators may refuse to extend a contract while a critical certificate is expired.