ISO 24060-2:2023

Overview

ISO 24060-2:2023 - Ships and marine technology - Ship software logging system for operational technology - Part 2: Electronic service reports, is an international standard developed by ISO. This standard specifies the requirements for electronic service reports within ship software logging systems, specifically for operational technology (OT) on board ships. It defines the mandatory content and the digital format for service reports that document software maintenance events completed by service providers and submitted to shipowners for inclusion in the ship software logging system.

With the increasing reliance on digital systems and software for shipboard operations, the adoption of standardized electronic service reports ensures transparency, consistency, and security in the maintenance and management of shipboard software. The standard supports regulatory compliance and improves the traceability of maintenance activities across the maritime industry.

Key Topics

Required Content for Electronic Service Reports

ISO 24060-2:2023 specifies that electronic service reports must include:

• General Information: Details about the ship (owner, name, IMO number, MMSI), and the service provider (company, contact details, technician).
• Equipment and Software Details: Information on equipment manufacturer, model, type, serial number, software version before maintenance, and historical maintenance data.
• Maintenance Event Description: Purpose of the maintenance (e.g., defect resolution, feature release, compliance, cyber security, obsolescence), criticality, organization that initiated service, date, ship location, and service locations (on-board, shore-based, remote).
• Cyber Security Documentation: Usage and authorization of removable media, anti-virus/malware status, network setting changes, and maintenance connection status.
• Technical Report: Step-by-step description of work, outcome, necessary follow-ups, and records of software and hardware changes.
• Operational Checks: Confirmation of successful equipment operation, self-test outcomes, and generation of diagnostic reports.
• Signatures: Digital or manual signatures from the technician and ship representative to verify the accuracy and acceptance of the service report.
• Other Information: Attachments, additional comments, service costs, and supporting documentation.

Standardized Digital Format

Service reports must use a digital format aligned with ISO 24060:2021 guidelines to facilitate automated processing, secure record-keeping, and long-term traceability.

Applications

ISO 24060-2:2023 delivers practical value for:

• Shipowners and Operators: Ensuring all software maintenance activities are fully documented and accessible for auditing, improving oversight of OT systems.
• Service Providers: Providing a clear, uniform template for submitting maintenance events, reducing errors and omissions in service reporting.
• Shipbuilders and System Integrators: Supporting lifecycle management of OT software with standardized data formats that integrate easily with broader safety and compliance programs.
• Regulatory and Port Authorities: Enabling streamlined review processes for compliance checks, enhancing maritime cyber security, and supporting investigations.

This standard is especially relevant for documenting software updates, upgrades, bug fixes, security patches, and hardware changes, contributing to safer, more resilient shipboard operations and better cyber risk management.

Related Standards

• ISO 24060:2021 - Ships and marine technology - Ship software logging system for operational technology: The foundational standard outlining general requirements for ship software logging systems.
• IMO Guidelines on Maritime Cyber Risk Management - Relevant for understanding the broader regulatory context of OT software management on ships.
• IEC Standards on Marine Electrical Equipment - For technical integration of software-logging best practices with electrical and electronic systems.
• ISO/IEC 27001 - Information security management, offering guidelines that complement the cyber security sections of the electronic service report.

By adhering to ISO 24060-2:2023, maritime stakeholders can enhance operational efficiency, uphold regulatory compliance, and support industry-wide efforts to secure and standardize the management of shipboard operational technology software.