Marlink and NORMA Cyber have launched a combined service that links fleet-wide cyber threat detection directly to expert maritime response, bridging the critical gap between identifying an alert and mitigating operational disruption. Höegh Autoliners is among the first to deploy the integrated solution across its fleet, utilizing NORMA Cyber for independent monitoring and Marlink for contextual remediation. This collaboration offers shipowners enhanced flexibility and security by separating independent monitoring from technical resolution while maintaining a streamlined escalation path.
Oslo and Paris | September 29, 2026 – In an era where digital connectivity is the lifeblood of global shipping, detecting a cyber anomaly at sea is only half the battle. The true test lies in swift assessment, understanding the operational ripple effects, and executing containment before a digital threat morphs into physical disruption.
Tackling this industry-wide vulnerability head-on, maritime digital solutions leader Marlink and the Nordic Maritime Cyber Resilience Centre (NORMA Cyber) have forged a strategic partnership. The collaboration seamlessly bridges fleet-wide threat detection with expert, context-driven maritime incident response.
Leading car carrier shipping giant Höegh Autoliners is among the first major operators to roll out the combined service across its entire fleet, setting a new benchmark for proactive digital defense in deep-sea logistics.
The Anatomy of the Threat-to-Resolution Gap
Modern commercial vessels are floating data centers. From advanced engine telemetry and voyage optimization tools to sophisticated cargo-handling systems, maritime assets rely heavily on constant connectivity. However, this hyper-connectivity expands the cyberattack surface.
While Unified Threat Management (UTM) and Endpoint Detection and Response (EDR) systems have gotten better at ringing alarm bells, shipowners have historically faced a fragmented landscape when responding to alerts:
- The Triage Bottleneck: Ship operators struggle to quickly decipher whether a security alert is a critical attack or a benign false positive.
- Operational Blind Spots: Security analysts unfamiliar with the unique constraints of maritime networks risk taking actions that inadvertently disrupt onboard operations.
- Siloed Vendors: Disconnecting the party that monitors the threat from the party that manages the ship’s onboard infrastructure often delays critical remediation.
The Marlink and NORMA Cyber integration effectively closes this chasm by establishing a clean, fast-tracked relay from detection to remediation.
How the Combined Service Works: A Seamless Handshake
At the heart of the joint service is a streamlined, secure technical pipeline designed to maximize speed without compromising operational safety:
- Real-Time Data Streaming: Marlink’s robust log-forwarding capability securely transmits real-time security telemetry from onboard UTM and EDR systems directly to the NORMA Cyber Security Operations Centre (SOC).
- Independent Triage: NORMA Cyber, acting as a neutral, technology-agnostic monitoring partner, analyzes, triages, and evaluates the severity of potential threats utilizing intelligence gathered across its extensive member community.
- Contextual Remediation: When an incident demands active intervention onboard, NORMA Cyber escalates the case directly to Marlink’s specialized cyber team. Because Marlink intimately understands the customer’s specific network topology, connectivity architecture, and security environment, its experts can step in with deep operational context, minimizing vessel downtime and maintaining commercial continuity.
Flexibility and Choice for Shipowners
This collaboration introduces a vital degree of architectural flexibility for shipowners navigating complex regulatory and cybersecurity frameworks.
Customers retain the freedom to select NORMA Cyber as their independent monitoring partner while continuing to rely on Marlink to secure and manage their onboard IT and OT environments. This model successfully separates independent monitoring from technology resolution, providing a clear, stress-tested escalation pathway. Furthermore, it complements Marlink’s existing managed security and SOC capabilities by supporting alternative operating models for companies already embedded in the NORMA Cyber ecosystem.
Industry Leadership in Action: Höegh Autoliners
As a forward-thinking operator spearheading the transition toward low-emission shipping, most notably through its cutting-edge, ammonia-ready Aurora Class vessels, Höegh Autoliners relies heavily on uninterrupted digital infrastructure. By integrating NORMA Cyber’s independent monitoring with the connectivity, IT, and cybersecurity solutions delivered via the Marlink Possibility Platform, the company ensures ironclad resilience across its global fleet.
“Maintaining uninterrupted operations is critical for us. This combined approach strengthens our ability to manage cyber risk effectively across the fleet,” said Christian Hall, Head of Global Cargo Operations and Digital Projects at Höegh Autoliners.
Collaborative Defense
Industry leaders behind the partnership emphasize that cybersecurity in the maritime sector can no longer be handled in isolation.
Tore Morten Olsen, President of Marlink Maritime, noted: “Our work with NORMA enables faster, more effective response to cyber threats, helping customers reduce operational disruption and maintain continuity across their fleets. It also gives operators the flexibility to choose how they manage cybersecurity, while continuing to rely on Marlink to resolve incidents quickly and effectively.”
Lars Benjamin Vold, representing NORMA Cyber, added: “Working with Marlink allows us to deliver greater value to shipowners by combining advanced monitoring with proven response capabilities. NORMA Cyber remains a neutral and technology-agnostic provider that aims to support all members… Together, we are combining specialist capabilities to strengthen maritime cyber resilience.”
As cyber threats facing the maritime supply chain become increasingly sophisticated, initiatives like the Marlink-NORMA Cyber alliance demonstrate that industry-wide collaboration, technical integration, and operational context are the ultimate keys to keeping global trade moving safely.
About Marlink
For companies operating in the world’s most challenging environments, from merchant vessels to offshore and onshore energy operations, humanitarian organizations, cruise ships, and superyachts, Marlink creates and delivers possibilities, anywhere. Marlink is a managed service provider and global leader in remote ICT solutions, with annual revenues surpassing $800 million and 1,500 employees operating in more than 30 countries.
Wherever our customers are in the world, we deliver the capability to work smarter, operate more effectively, more safely, and more sustainably—without the limitations of technology. Through our Possibility Platform, we enable a comprehensive suite of end-to-end managed solutions (Connectivity, Network, Cyber Security, Cloud & IT, IoT & Apps), supported by professional services, unmatched global operations, delivery capabilities, and dedicated local support teams. As a global company with a local focus, we help make tomorrow’s possibilities today’s realities.
About Nordic Maritime Cyber Resilience Centre (NORMA Cyber)
The Nordic Maritime Cyber Resilience Centre (NORMA Cyber) serves as the primary hub for operational cybersecurity in the Nordic maritime industry. Established in 2021 through a collaboration between The Norwegian Shipowners’ Mutual War Risks Insurance Association (DNK) and the Norwegian Shipowners’ Association, the center initially focused on Norway before expanding to the broader Nordic region in the spring of 2024. NORMA Cyber operates as a non-profit organization representing members across the Nordic maritime sector, with affiliate and vendor memberships also available to international organizations and maritime suppliers.
NORMA Cyber currently counts over 180 members representing more than 3,000 vessels and offshore units. The center provides a centralized cybersecurity function, enabling members to pool resources and achieve greater effectiveness and resilience than through independent efforts. NORMA Cyber invests in developing solutions that leverage emerging technologies to deliver efficient, cost-effective cybersecurity for its members. Services include threat intelligence, timely information sharing among members, crisis response support, managed SOC services, and related security functions.
Source: Marlink