Detecting a cyber threat on a vessel is only half the battle with operators still needing to assess it, understand the operational impact, and act fast enough to avoid disruption. Marlink and the Nordic Maritime Cyber Resilience Centre (NORMA Cyber) have closed that gap with a combined service that connects fleet-wide threat detection directly to expert maritime response. Höegh Autoliners, a long-standing Marlink customer, is among the first operators to deploy it across its entire fleet.
As vessels become more connected, identifying a potential cyber threat is only the first step. Operators must also be able to assess its significance, understand the possible operational impact and take effective action without causing unnecessary disruption onboard. The combined service links NORMA Cyber’s independent security monitoring and initial analysis with Marlink’s maritime cyber expertise and incident response capabilities, helping customers move efficiently from alert to containment and resolution.
For operators that choose NORMA Cyber as their monitoring partner, the collaboration offers access to a centralised maritime cybersecurity function, supported by threat intelligence and shared expertise developed through its member community. It also allows customers to separate independent monitoring from the technology and operational support used to resolve an incident, while maintaining a clear response path when action is required.
At the core of the service, Marlink’s log-forwarding capability securely streams real-time security data from onboard Unified Threat Management (UTM) and Endpoint Detection and Response (EDR) systems to the NORMA Cyber Security Operations Centre (SOC). NORMA Cyber analyses and triages potential threats and, when an incident requires action in the customer’s onboard environment, escalates it to Marlink’s cyber specialists for investigation, containment and remediation.
Because Marlink understands the customer’s connectivity, network and security environment, its experts can respond with the operational context needed to minimise disruption and maintain continuity.
The model gives shipowners greater flexibility in how they organise cybersecurity across their fleets. Customers can retain their preferred independent monitoring partner while continuing to rely on Marlink to manage and secure their onboard environment and to take effective action when a threat is identified. It complements Marlink’s own managed security and SOC capabilities by supporting an additional operating model for customers that already work with, or choose to use, NORMA Cyber.
As a forward-looking operator investing in low-emission technology, including its Aurora Class vessels, Höegh Autoliners combines NORMA Cyber’s monitoring with connectivity, IT and cybersecurity capabilities delivered through the Marlink Possibility Platform to support operational continuity across its fleet.
“Maintaining uninterrupted operations is critical for us. This combined approach strengthens our ability to manage cyber risk effectively across the fleet,” said Christian Hall, Head of Global Cargo Operations and Digital Projects, Höegh Autoliners.
“Our work with NORMA enables faster, more effective response to cyber threats, helping customers reduce operational disruption and maintain continuity across their fleets,” said Tore Morten Olsen, President, Marlink Maritime. “It also gives operators the flexibility to choose how they manage cyber security, while continuing to rely on Marlink to resolve incidents quickly and effectively.”
“Working with Marlink allows us to deliver greater value to shipowners by combining advanced monitoring with proven response capabilities. NORMA Cyber remains a neutral and technology agnostic provider that aims to support all members and their operations in close cooperation with each member and their chosen providers,” said Lars Benjamin Vold, NORMA Cyber. “Together, we are combining specialist capabilities to strengthen maritime cyber resilience.”
Robban Assafina is now on WhatsApp channel. Click Here
