Marlink and NORMA Cyber connect fleet-wide threat detection with expert maritime response

Oslo and Paris, 29.09.2026. Detecting a cyber threat on a vessel is only half the battle with operators still needing to assess it, understand the operational impact, and act fast enough to avoid disruption. Marlink and the Nordic Maritime Cyber Resilience Centre (NORMA Cyber) have closed that gap with a combined service that connects fleet-wide threat detection directly to expert maritime response. Höegh Autoliners, a long-standing Marlink customer, is among the first operators to deploy it across its entire fleet. 

As vessels become more connected, identifying a potential cyber threat is only the first step. Operators must also be able to assess its significance, understand the possible operational impact and take effective action without causing unnecessary disruption onboard. The combined service links NORMA Cyber’s independent security monitoring and initial analysis with Marlink’s maritime cyber expertise and incident response capabilities, helping customers move efficiently from alert to containment and resolution.

For operators that choose NORMA Cyber as their monitoring partner, the collaboration offers access to a centralised maritime cybersecurity function, supported by threat intelligence and shared expertise developed through its member community. It also allows customers to separate independent monitoring from the technology and operational support used to resolve an incident, while maintaining a clear response path when action is required.

At the core of the service, Marlink’s log-forwarding capability securely streams real-time security data from onboard Unified Threat Management (UTM) and Endpoint Detection and Response (EDR) systems to the NORMA Cyber Security Operations Centre (SOC). NORMA Cyber analyses and triages potential threats and, when an incident requires action in the customer’s onboard environment, escalates it to Marlink’s cyber specialists for investigation, containment and remediation. Because Marlink understands the customer’s connectivity, network and security environment, its experts can respond with the operational context needed to minimise disruption and maintain continuity.

The model gives shipowners greater flexibility in how they organise cybersecurity across their fleets. Customers can retain their preferred independent monitoring partner while continuing to rely on Marlink to manage and secure their onboard environment and to take effective action when a threat is identified. It complements Marlink’s own managed security and SOC capabilities by supporting an additional operating model for customers that already work with, or choose to use, NORMA Cyber.

As a forward-looking operator investing in low-emission technology, including its Aurora Class vessels, Höegh Autoliners combines NORMA Cyber’s monitoring with connectivity, IT and cybersecurity capabilities delivered through the Marlink Possibility Platform to support operational continuity across its fleet. 

For further information, please contact:

Nur Dulin, CMO
T: +34 663 566 330
E: nur.dulin@marlink.com  

About Marlink

For companies operating in the world’s most challenging environments – from merchant vessels to offshore and onshore energy operations, from humanitarian organisations to cruise ships and superyachts – Marlink creates and delivers possibilities, anywhere.

Marlink is a managed service provider and global leader in remote ICT solutions with annual revenues surpassing $800 million and 1,500 employees operating in more than 30 countries.

Wherever our customers are in the world, we deliver them possibilities to work smarter and to operate more effectively, more safely, more sustainably - without the limitations of technology.

With our possibility platform, we enable a comprehensive suite of end-to-end managed solutions (Connectivity, Network, Cyber Security, Cloud & IT, IoT & Apps), supported by professional services, unmatched global operations and delivery capabilities and local support teams.

As a global company with a local focus we help make tomorrow’s possibilities today’s realities.

For further information please visit www.marlink.com. 

About Nordic Maritime Cyber Resilience Centre (NORMA Cyber)

The Nordic Maritime Cyber Resilience Centre (NORMA Cyber) serves as the primary hub for operational cybersecurity in the Nordic maritime industry. Established in 2021 through a collaboration between The Norwegian Shipowners’ Mutual War Risks Insurance Association (DNK) and the Norwegian Shipowners’ Association, the centre initially focused on Norway before expanding to the broader Nordic region in spring 2024. NORMA Cyber operates as a non-profit organisation with members from the Nordic maritime sector. Affiliate and vendor memberships are also available to international organisations and maritime vendors.

NORMA Cyber currently has over 180 members and represents more than 3,000 vessels and offshore units. The centre provides a centralised cybersecurity function, enabling members to pool resources and achieve greater effectiveness and resilience than through independent efforts.

NORMA Cyber invests in developing new solutions that leverage emerging technologies to deliver efficient, cost-effective cybersecurity for its members. Services include threat intelligence, timely information sharing among members, crisis response support, managed SOC services and related functions.