MASS UK Industry Conduct Principles and Code of Practice 2022 (V6)

13.6.5 Security measures include:
n Security by design, using best practice principles;
n Use of safe operating system (or no operating system at all), as many cyber-attacks exploit the operating system
itself;
n Air-gapping (denial of communications so that the firmware, once programmed, is safe). This eliminates backdoor
attacks and is effectively applied to many sensors such as GPS, heading and depth sensors;
n Command link encryption;
n Use of multiple command links, effectively providing command link backup.
n BIT testing to verify the integrity of firmware and mission and configuration data at run time.
13.6.6 A Cyber Security Analysis should be conducted to identify possible security vulnerabilities and their effects on
the vital systems and the performance of the craft or vessel, including but not limited to the command link, the
generation and dissemination of waypoints, steering, and the ability to initiate Emergency Stop..
14
Operator Standards of Training,
Qualifications, Competence and
Watchkeeping
14.1 OBJECTIVE
The objective of this Chapter is to provide guidance on the required training and qualifications for
identified roles within a MASS operating organisation, including RCC, for the various classes of
MASS and operating Levels of Control.
13.6.7 The Cyber Security Analysis should be interpreted and acted upon in a manner similar to the Risk Assessment,
in terms of identifying the need to apply corrective measures to reduce risk to an acceptably low level.
14.2 SCOPE
Fugro FAS900
14.2.1 The aim of this Chapter of the Code is to establish pan industry agreement on skill and competency requirements
for MASS operation in advance of and alongside the establishment of governing regulations. However, operators
should demonstrate a clear understanding of the relevant extant IMO instruments (COLREGs, SOLAS, MARPOL
and STCW).
14.2.2 This Chapter sets out to identify the principles and considerations to be given to the skills and competencies
required to operate MASS safely.
14.2.3 Skill and competency levels, and team size for specific MASS operations, should be defined in a Safe Operating
Plan equivalent to the IMO Resolution A.1047(27) - Principles of Minimum Safe Manning. Paragraph 1.4 of Annex
2 (Guidelines for Determination of Minimum Safe Manning) states that, in determining the minimum safe manning
of a ship, consideration should also be given to the number of qualified and other personnel required to meet
peak workload situations and conditions, with due regard to the number of hours of shipboard duties and rest
periods assigned to seafarers.
14.2.4 It is recommended that the owner or operating organisation should produce a “Safe Manning Guide” similar to
that required in the MCA Publication “A Master’s Guide to the UK Flag”.
14.3 GENERAL PRINCIPLES
14.3.1 Part 1 of this Code sets out a clear Industry Principle for Training and Development:
n Users of this Code should ensure the appropriate level of training and certification for all MASS operational
staff to meet their Safe Operating Plan. They should enable staff development and the sharing of best practice
through professional maritime bodies;
n MASS operational Staff should be trained and certified to at least the same recognised Flag State Authority
or national equivalent standards, to a level equivalent to that appropriate for a similar manned vessel;
n Companies within the Industry should have staff development processes in place to capture and progress
skill generation.
n Training should be underpinned internally and externally through quality auditing. MASS Training course
recognition or accreditation must only be carried out by external organisations, bodies, or authorities with the
competence to do so.
104 MASS UK Industry Conduct Principles and Code of Practice Version 6
MASS UK Industry Conduct Principles and Code of Practice Version 6 105