Yacht Refit Security Begins Before the Yacht Enters the Yard
The people, systems and payment instructions a yacht relies on can all change during a refit. Those changes need to be accounted for before work starts and reviewed before the vessel leaves.
An invoice arrives during a busy week in the yard. The work is familiar, the amount looks right and the contractor is expecting payment. The only change is the bank account. By the time the message reaches the person who can approve it, several people may already have seen it. Each may assume someone else checked.
That is a yacht refit security problem. A yard period changes who comes aboard, who can connect to the yacht’s systems and who has the authority to approve a decision while work is under way. These changes are normal. The risk comes when the captain, yard and shore team are working from different versions of what was agreed.
Yacht refit security starts with who has access
The shipyard may know who has been admitted through its gate. The project manager knows which trades are booked. The crew know which parts of the yacht are ready for work and which are still in use. A contractor can be expected at the yard and still turn up at the yacht before the person supervising the job is available. The crew member at the gangway then has to resolve a question the project team could have settled before arrival.
Samuel Mervosh, founder of Hydra Defense Solutions, advocates rehearsing an incident before the yard period. The exercise can start with a routine problem. A contractor sends a replacement technician who needs to connect to a piece of equipment. Who confirms the substitution? Who can approve the connection? What should the crew member do if the person who normally approves it is ashore? Running through that exchange shows whether the crew can reach the person named in the plan and get a decision while the work is waiting.
Naresh Samlal, CEO of CloudSource, points to connected cameras and access systems as examples of how closely physical security and IT can overlap. A technician commissioning a camera may need to board the yacht, connect to its network and log in remotely later to finish the setup. Each step can be authorised by a different person. The work order is a useful place to bring those decisions together so the captain can see what was granted and when it is due to end.
The plan also needs to fit the yacht. Mervosh distinguishes between deliberate targeting of a particular vessel and the opportunities created by ordinary lapses in access control. Crew numbers, the yard layout and the vessel’s itinerary all affect what the team can reasonably manage. On a yacht with a dedicated engineer, an access request may go straight to that person. If the captain is also running the project, someone else may need to handle those requests when the captain is tied up with the yard.
A change of bank details deserves its own check
A fraudulent payment request can use the ordinary details of a refit to look plausible. It can name a real supplier, refer to a job the crew recognise and arrive when a payment is expected. There may even be a good reason for an unfamiliar person to be copied in. During a refit, responsibility for an invoice can pass from the person who commissioned the work to someone on shore who has never dealt directly with the supplier.
An independent callback gives the person approving the payment something to rely on. The team can call the supplier on a number already held on file and confirm the new instructions with a known contact. A number supplied in the email asking for the change is part of the request being checked. Deciding who makes the call and where the confirmation is recorded is a small piece of work compared with trying to establish what happened after money has moved.
Samlal describes simulated phishing as a way to find out what people do when a request looks credible. A useful test follows the message beyond the first click. It can show whether crew know whom to tell, how long the report takes to reach that person and whether the duty team knows what to do with it. If the reporting process is hard to remember on an ordinary day, it will be harder still when several trades are waiting for decisions.
What crew share can travel beyond the yard
A photograph taken during a refit can show where the yacht is, which work is still being done or what is visible from a part of the yard the public rarely sees. Each detail may seem unremarkable on its own. A series of posts can reveal when the boat arrived, when a particular job ended and when it is likely to move.
Mervosh suggests giving crew practical examples of what can be shared and when. A photograph worth posting can often wait until the yacht has left. The same discussion can cover yard and contractor accounts, particularly when a supplier wants to show off a completed installation before the yacht’s own team is ready to announce it. Agreeing on the timing early gives the crew a straightforward answer when someone asks to post from the job.
Make the plan usable when the schedule changes
The first week’s schedule rarely tells the whole story of a refit. A trial moves, a supplier waits on a part, or a second technician comes in to finish a job. Anybody taking over the watch needs to know which changes affect access and which are simply changes to the order of work. A short update at the handover between shifts can be especially useful when a job has run late and the people who booked it have already left.
If a contractor has permission to work after hours, the duty crew need the contractor’s name, the work area and a way to confirm the arrangement. If a technician needs a connection from shore, the engineer who takes over should know whether that permission was granted for a single session or for the rest of the job. The same information can settle questions about what to do when the work is interrupted and picked up again the next day.
This is where the rehearsal before arrival earns its place. The captain and project manager can hear how the plan sounds to the person expected to use it. If that person would have to make three calls to find out whether an exception was approved, the team has a chance to sort it out while everyone is still in the room.
Close out access when the work is finished
A yacht can leave the yard with more accounts, devices and remote connections than it had on arrival. Some are still needed for warranty calls or ongoing support. Others were set up to commission a single system. The closeout is the time to distinguish between them, while the people who set them up can still explain what each one does.
A camera may be working perfectly at handover while the account used to configure it still gives an outside technician access. A clear handover records which systems can be reached remotely, who still has permission and how the yacht can authorise temporary access if something needs attention later. The person receiving the handover should be able to find that information without having to trace it through an installer’s emails.
There is also a difference between installing equipment and taking responsibility for it in service. If a provider continues to monitor a system, someone on the vessel or ashore needs to know who receives alerts and whom to call when something changes. Samlal describes monitoring in terms of learning what normal activity looks like for a particular client. That makes the transition out of the yard worth flagging. The people connecting to the vessel and the hours they work can change as soon as the yacht gets under way.
New builds give teams a chance to settle some of these questions earlier, while equipment and support arrangements are still being specified. For a refit, the same conversation belongs next to the technical handover. Once the scaffolding is down and the trades have moved on, the crew will be operating the systems the project leaves behind. They should know who can still reach those systems, who’s watching them and who has the authority to change the arrangement.
━━━━━━━━━━━━━━━
SUPPORTED BY
Maritime Project Solutions
━━━━━━━━━━━━━━━
Maritime Project Solutions provides independent project management for yacht refits and new builds, with support for day-to-day vessel operations. The team works with owners, captains and managers on planning, yard coordination, logistics and administration.
Independent. Experienced. On your side.
Comments