code_of_practice_V3_2019

6.10.4 Provision shall be made to protect systems against:
n intentional or unintentional viruses or unauthorised Code (Cyber Security is covered in more detail at
paragraph 11.6);
n unauthorised installation, change, or deletion of software or associated data;
n the installation or use of unauthorised software, (e.g. running games or office applications);
n modification of the software function by additional or modified physical devices.
6.10.5 The system safety justification shall be developed to include the risks posed by the use of software both afloat
and ashore and how those risks are reduced to an acceptable level. Consideration should be given to conducting
a Failure Mode Effects and Criticality Analysis (FMECA) to identify risks or safety Critical Software elements. Any
function of a MASS should be adequately validated in accordance with its consequence to safety and performance
of the MASS, and any software implementation of this function adequately verified.
6.10.6 The configuration status of the software on each platform shall be captured and recorded, and the record
maintained up-to-date for the life of the platform.
6.10.7 The development and testing of changes to the software and data, including specific arrangements for on-board
testing, shall be managed so that the safety of the system, sub-system or equipment is not compromised.
6.10.8 The retention and release of earlier versions of software shall be managed to enable restoration of a previous
known and trusted state when necessary.
6.10.9 The release and installation of software to each platform shall be appropriately and actively managed so
that changes to software are controlled. The installation process shall include a strategy for managing a failed
installation.
6.11 IN-SERVICE REQUIREMENTS
6.11.1 Independent verification should be undertaken to provide assurance that the MASS complies in all respects with
the provisions of this Code and remains compliant throughout its life.
6.11.2 Construction surveys should be conducted at a periodicity and scope appropriate to the design and build and
may include:
n A review of the capability, organisation and facilities of the manufacturer to confirm that acceptable standards
can be achieved for the construction, and fit out of the hull structure, systems and equipment;
n Certification of software, equipment and components;
n Survey of the material state during build to confirm compliance with the appraised design;
n Witness of tests and trials to demonstrate functionality;
n Details of software integrity testing and cyber-security compliance audits.
6.11.3 Through life survey activities should be conducted at a periodicity appropriate to the design, construction, material
state and operation of the MASS.
46
MASS UK Industry Conduct Principles and Code of Practice Version 3