Vessel IT means the servers, PCs, networks, communication and security equipment used on board — and the way they are run. It looks like shore-office IT, but it is managed very differently: a ship connects to the outside world only through satellite links, and no engineer can board right away during a voyage. Here is a guide to the scope and core principles of vessel IT management for ship managers.
What makes up vessel IT
- Business systems: office PCs and servers used by the master, officers and engine department, printers and vessel e-mail (with vessel email sharing so several PCs can use the radio-room mailbox)
- Network: switches, wireless access points and cabling, plus VLANs that separate the business network, crew welfare network and navigation / engine (OT) zones
- Connectivity: satellite and mobile links such as VSAT, FBB, IRIDIUM, STARLINK and LTE, tied together by a firewall (UTM)
- Security: firewall policy, endpoint security, USB control, account and backup management
- Connected equipment: CCTV, data acquisition units (DAQ) and other devices on the onboard network
For onboard PCs, servers, NAS, switches and wireless access points, see vessel IT equipment.
How managing ship IT differs from shore IT
- Narrow, costly links: updates, antivirus distribution and remote support must be designed around satellite bandwidth.
- No engineer on site: faults at sea are solved by the crew with remote support from shore, so remote access and recovery tools must be in place in advance.
- Direct impact on operations: when e-mail, reporting or navigation-support systems stop, the voyage schedule is affected.
- Compliance: cyber security and IT asset management are now checked in class and charterer audits.
Four pillars of vessel IT management
- Preventive inspection: check servers, PCs, UPS and network equipment on every onboard visit and replace ageing equipment early. (vessel IT maintenance services)
- Remote support: diagnose and fix faults at sea through remote access that works over low-bandwidth satellite links. (OCEAN-SUPPORT™ remote management)
- Security: run firewall policy, network segmentation, endpoint and USB security as a fleet standard. (maritime cyber security solutions)
- Connectivity: make satellite links redundant and configure automatic failover. (vessel satellite communication)
Questions for ship managers
- Is the IT asset inventory and network diagram for each vessel up to date?
- If a PC will not boot at sea, who recovers it, and how?
- Does traffic fail over to the backup link automatically when the satellite link drops?
- Can you check firewall policy and antivirus status from shore?
- Are onboard inspection results recorded and carried into the next inspection?
Ocean Connect's integrated vessel IT management
Ocean Connect combines vessel IT maintenance, ship network build, satellite commissioning, maritime cyber security and remote management into one system and acts as our clients' own vessel IT team. See Ocean Connect — vessel IT integrated management for our services and 7 preventive checks that reduce vessel IT failures for our onboard inspection items.
For a review of your vessel IT management, contact us via the online inquiry form or our emergency 24-hour helpdesk (+82-70-7588-0611~0612).