ISO 24060:2021

Overview

ISO 24060:2021 defines a Ship Software Logging System (SSLS) for logging and retrieving software version information and operational status of shipboard operational technology (OT). The standard establishes design and usability requirements for SSLS software to support software maintenance across a wide range of ship systems - from navigation and propulsion to fire suppression and power generation. It aims to make software inventory, change-tracking and service reporting consistent, auditable and resilient to cyber risk.

Key topics and requirements

ISO 24060:2021 focuses on practical, implementable SSLS features and includes the following technical requirements:

• Automatic and manual logging
  • Record software versions for updateable equipment.
  • Create an initial log entry when equipment is first installed or detected.
  • Automatically log version messages and periodic status reports from connected equipment.
• Log content and data elements
  • Required fields: device type, manufacturer, unique identifier, serial number, manufacture date, model number, timestamp (UTC), and software version.
  • Differentiate whether entries were automatic or manual.
• Service report repository
  • Store electronic service reports (PDF, JPEG, PNG) associated with log entries.
  • Require service provider identity (technician name and company) and allow user comments.
• Integrity and availability
  • Prevent editing of automatically recorded messages (corrections via new manual entries).
  • Support automatic, periodic backups for recovery.
  • Require user login credentials and incorporate cybersecurity considerations in SSLS design.
• Connectivity and message cadence
  • Monitor networks for version messages; connected equipment should send reports at least once per 24 hours and no more than once per second.
  • Support various transport methods (serial-to-IP bridging and similar translations).

Applications / Who uses it

ISO 24060:2021 is practical for:

• Shipowners, ship managers and operators maintaining regulatory compliance and asset lifecycle records.
• System integrators and shipboard engineers implementing centralized software registries.
• Equipment manufacturers designing OT devices to output standard version messages.
• Technical service providers and class societies auditing software maintenance and cyber risk posture.

Benefits include clearer software inventories, streamlined maintenance workflows, better traceability of updates and service actions, and improved cyber-risk visibility.

Related standards

ISO 24060:2021 references and aligns with maritime data and cybersecurity practices, including:

• IEC 61162-1 / IEC 61162-450 / IEC 61162-460 (version message formats and network architectures)
• ISO 19847 and ISO 19848 (shipboard data server and data designs anticipated for future updates)
• Industry guidance such as IACS URE22 and earlier CIRM‑BIMCO work on software maintenance

Keywords: ISO 24060:2021, ship software logging system, SSLS, shipboard software, operational technology, maritime cybersecurity, software inventory, software versioning.