Marlink and NORMA Cyber connect fleet-wide threat detection with expert maritime response

Detecting a cyber threat on a vessel is only half the battle with operators still needing to assess it, understand the operational impact, and act fast enough to avoid disruption. Marlink and the Nordic Maritime Cyber Resilience Centre (NORMA Cyber) have closed that gap with a combined service that connects fleet-wide threat detection directly to expert maritime response.

Höegh Autoliners, a long-standing Marlink customer, is among the first operators to deploy the new service across its entire fleet. 

As vessels become more connected, identifying a potential cyber threat is only the first step. Operators must also be able to assess its significance, understand the possible operational impact and take effective action without causing unnecessary disruption onboard. The combined service links NORMA Cyber’s independent security monitoring and initial analysis with Marlink’s maritime cyber expertise and incident response capabilities, helping customers move efficiently from alert to containment and resolution.

For operators that choose NORMA Cyber as their monitoring partner, the collaboration offers access to a centralised maritime cybersecurity function, supported by threat intelligence and shared expertise developed through its member community. It also allows customers to separate independent monitoring from the technology and operational support used to resolve an incident, while maintaining a clear response path when action is required.

At the core of the service, Marlink’s log-forwarding capability securely streams real-time security data from onboard Unified Threat Management (UTM) and Endpoint Detection and Response (EDR) systems to the NORMA Cyber Security Operations Centre (SOC). NORMA Cyber analyses and triages potential threats and, when an incident requires action in the customer’s onboard environment, escalates it to Marlink’s cyber specialists for investigation, containment and remediation. Because Marlink understands the customer’s connectivity, network and security.