Höegh Autoliners is among the first shipowners to deploy Marlink and NORMA Cyber’s combined cyber service across its fleet, connecting independent threat monitoring with maritime incident response. The model gives ship operators a direct route from onboard alerts to investigation, containment and remediation while retaining flexibility over their cybersecurity providers.
Marlink and the Nordic Maritime Cyber Resilience Centre (NORMA Cyber) have combined their capabilities to link fleet-wide cyber monitoring with specialist response, with Höegh Autoliners among the first operators to deploy the service across its entire fleet.
The service sends real-time security data from onboard Unified Threat Management and Endpoint Detection and Response systems through Marlink’s log-forwarding capability to NORMA Cyber’s Security Operations Centre. NORMA Cyber analyses and triages potential threats before escalating incidents requiring action onboard to Marlink’s cyber specialists.
That division of responsibility is designed to give shipowners independent monitoring while retaining a response team familiar with their connectivity, network and security environment.
The practical issue is what happens after an alert. A warning generated by onboard systems still needs to be assessed against the vessel’s operational environment before action is taken. Marlink says its specialists can investigate, contain and remediate incidents while limiting disruption to operations.
Höegh Autoliners, which operates Aurora Class vessels and has invested in connectivity, IT and cybersecurity through the Marlink Possibility Platform, is using the combined service across its fleet.
“Maintaining uninterrupted operations is critical for us. This combined approach strengthens our ability to manage cyber risk effectively across the fleet,” said Christian Hall, Head of Global Cargo Operations and Digital Projects, Höegh Autoliners.
Tore Morten Olsen, President, Marlink Maritime, said: “Our work with NORMA enables faster, more effective response to cyber threats, helping customers reduce operational disruption and maintain continuity across their fleets. It also gives operators the flexibility to choose how they manage cyber security, while continuing to rely on Marlink to resolve incidents quickly and effectively. Tore Morten Olsen, President, Marlink Maritime. NORMA Cyber currently has more than 180 members representing over 3,000 vessels and offshore units. Its Lars Benjamin Vold said the partnership combines monitoring with response while keeping NORMA Cyber independent and technology agnostic.”
Lars Benjamin Vold, NORMA Cyber. Lars Benjamin Vold, NORMA Cyber, said: “Working with Marlink allows us to deliver greater value to shipowners by combining advanced monitoring with proven response capabilities. NORMA Cyber remains a neutral and technology agnostic provider that aims to support all members and their operations in close cooperation with each member and their chosen providers. Together, we are combining specialist capabilities to strengthen maritime cyber resilience.”
For shipowners managing larger digital estates, the arrangement puts operational response alongside detection rather than treating the two as separate cybersecurity tasks.










