The New MASS Code 2026: Maritime Autonomous Surface Ships, Remote Operation & Cybersecurity
The IMO International Code of Safety for Maritime Autonomous Surface Ships (MASS Code) establishes a new goal-based framework for the safe integration of remotely controlled and autonomous commercial ships, with important implications for remote operations, connectivity, system design, cybersecurity, risk assessment, and human oversight.
The New IMO MASS Code
The International Maritime Organization (IMO) adopted the new International Code of Safety for Maritime Autonomous Surface Ships, known as the MASS Code, at the 111th session of the Maritime Safety Committee in May 2026.
The non-mandatory MASS Code came into effect on 1 July 2026 and provides a comprehensive, goal-based framework intended to support the safe, secure, and environmentally responsible operation of Maritime Autonomous Surface Ships.
The Code is particularly significant because it addresses not only autonomous navigation, but also risk assessment, system design, software, connectivity, remote operations, human oversight, cybersecurity, and the integration of Remote Operations Centres into the overall safety framework.
The MASS Code supplements existing IMO instruments, including SOLAS, rather than replacing the established international maritime regulatory framework.
What Is a Maritime Autonomous Surface Ship?
A Maritime Autonomous Surface Ship (MASS) is a ship that can, to varying degrees, operate independently of human interaction. Autonomous or remote technologies may replace or support functions that would normally be carried out by personnel onboard.
Importantly, enhanced automation alone does not automatically make a vessel a MASS. The vessel must complete the applicable approval process and obtain a valid MASS Safety Certificate.
IMO encourages a functional approach in which the operator identifies which functions are performed conventionally by onboard personnel, which are performed remotely, and which are performed autonomously.
MASS Operating Modes
The MASS Code requires the different modes of operation for which a MASS is designed to be described. The operational concept must therefore clearly identify how control and decision-making are distributed between onboard personnel, remote operators, and autonomous systems.
Conventional Operation
Ship functions are performed primarily by personnel onboard using conventional navigation, machinery, safety, and operational arrangements.
Remote-Assisted Operation
Selected ship functions may be monitored or supported by personnel located ashore while onboard personnel retain operational responsibilities.
Remote-Controlled Operation
Specific ship functions may be controlled remotely through a Remote Operations Centre, subject to the defined operational and safety conditions.
Autonomous Operation
Defined ship functions may be performed by autonomous systems without continuous human intervention, while appropriate human oversight and intervention capability remain part of the safety architecture.
Key Technical Areas Covered by the MASS Code
The MASS Code introduces a broad technical and operational framework. Its requirements extend beyond autonomous navigation and address the complete safety architecture of the vessel.
Risk Assessment
Identification and management of risks associated with autonomous and remotely controlled functions, including failures, degraded conditions, and operational hazards.
System Design
System architecture should provide appropriate robustness, reliability, redundancy, fault tolerance, and safety characteristics for the intended operating concept.
Software Principles
Software becomes an important component of the vessel's safety architecture, requiring appropriate control, verification, configuration management, and reliability.
Connectivity
Communications between the vessel and shore-based operational infrastructure must support the intended operating mode and defined safety requirements.
Remote Operations
Remote control and monitoring arrangements must be integrated into the vessel's overall operational and safety framework.
Human Element
The roles, responsibilities, competence, training, watchkeeping, and intervention capabilities of personnel remain fundamental to safe MASS operation.
Remote Operations Centres and Remote Operators
Remote Operations Centres (ROCs) are a critical component of remotely controlled MASS operations. A ROC may monitor or control vessel functions from ashore and may become an essential part of the vessel's operational safety system.
IMO states that ROCs should be assessed, certified, and operated under a robust Safety Management System.
The assessment therefore needs to consider the complete ship-to-shore operational architecture rather than treating the ROC as an ordinary shore-based office.
- Remote operator competence and training
- Master and remote operator responsibilities
- Remote monitoring and control functions
- Communication between vessel and ROC
- Alarm management and escalation
- Emergency intervention capability
- ROC availability and redundancy
- Integration with the vessel Safety Management System
Connectivity: The Ship-to-Shore Safety Link
Connectivity becomes a critical consideration when ship functions are monitored or controlled remotely. A MASS may depend on communication links to exchange navigation information, system status, alarms, operational data, and control commands.
The technical assessment must therefore determine what happens when the communication system operates outside its defined performance parameters.
Primary Connectivity
Assessment of the primary communication path supporting remote monitoring, control, and operational information exchange.
Backup Connectivity
Verification of alternative communication arrangements where required by the vessel's operational concept and risk assessment.
Loss of Connectivity
Defined response to communication failure, including autonomous continuation, safe operating mode, alarm generation, or other approved intervention.
Communication Performance
Consideration of availability, latency, reliability, bandwidth, coverage, and other characteristics relevant to the intended operation.
MASS Cybersecurity Compliance
Cybersecurity becomes directly connected with navigational and operational safety when autonomous systems and remote control technologies are used.
A cyber event affecting a critical operational system could potentially influence navigation, propulsion, steering, communications, sensors, machinery automation, alarms, or remote control functions.
Cybersecurity assessment should therefore cover the complete cyber-physical architecture extending from onboard operational technology to shore-based remote operations infrastructure.
Shipboard Operational Technology
Identification and protection of critical navigation, propulsion, steering, machinery, automation, monitoring, alarm, and communication systems.
Remote Operations Centre
Assessment of ROC networks, workstations, user access, authentication, system monitoring, physical security, and operational controls.
Access Control
Appropriate controls should be established for authorized users, privileged access, remote access, system accounts, and administrative functions.
Network Protection
Network segmentation, secure interfaces, monitoring, authentication, and protection against unauthorized access should be considered.
Software Integrity
Software configuration, updates, version control, testing, change management, and integrity are important to the safe operation of autonomous systems.
Cyber Incident Response
Procedures should address detection, containment, recovery, reporting, and continued safe operation following a cybersecurity incident.
Human Oversight and the Role of the Master
Autonomous technology does not eliminate the human element from maritime safety.
The MASS Code emphasizes human oversight, and the master retains overall responsibility for the ship even when the master is not physically onboard.
The operational concept should therefore clearly define the responsibilities and authority of the master, remote operators, onboard personnel, and autonomous systems.
- Master responsibility and authority
- Remote operator responsibilities
- Human intervention capability
- Watchkeeping arrangements
- Competence and training
- Alarm response
- Emergency decision-making
- Handover between operators
MASS System Design and Reliability
MASS technology must be designed around the intended operational concept and safety requirements rather than relying solely on individual equipment reliability.
Technical assessment may consider the interaction between sensors, navigation systems, automation, software, communication systems, remote control equipment, machinery, power supply, and human operators.
Redundancy
Critical functions may require appropriate redundancy to reduce the consequences of individual equipment failures.
Fault Tolerance
The system architecture should address foreseeable faults and provide appropriate responses to degraded conditions.
Sensor Reliability
Navigation and autonomous functions depend on reliable sensor information and appropriate detection of abnormal or conflicting data.
Safe Failure Response
The MASS should have defined responses when critical systems become unavailable or operating conditions exceed approved limits.
Software and Autonomous Decision-Making
Software is increasingly becoming part of the vessel's safety architecture. In a MASS, software may influence navigation, collision avoidance, machinery operation, monitoring, alarms, decision support, and remote-control functions.
Software therefore needs to be considered as a controlled technical component rather than an independent IT product.
- Software identification and configuration control
- Version management
- Verification and validation
- Software change management
- Testing following software modifications
- Cybersecurity protection
- Backup and recovery arrangements
- Supplier and third-party software management
Operational Context and Defined Operating Limits
Autonomous operation cannot be assessed independently from the environment in which the vessel operates.
The operational context should define the conditions within which the MASS is designed and approved to operate safely.
- Geographic operating area
- Traffic density
- Weather conditions
- Visibility
- Sea state
- Water depth
- Communication availability
- Navigation system availability
- Autonomous system limitations
When operating conditions exceed defined limits, the MASS should have an established and verified response appropriate to the approved operating concept.
MASS Risk Assessment
Risk assessment is a fundamental element of the MASS Code. Autonomous and remote-control functions introduce interactions between technology, people, software, communications, machinery, navigation systems, and operational procedures.
A MASS risk assessment should therefore consider both individual equipment failures and combinations of failures that could affect the ability of the vessel to maintain safe operation.
- Loss of remote communications
- Cybersecurity incidents
- Navigation sensor failure
- Loss of positioning information
- Steering or propulsion failure
- Remote operator failure
- Remote Operations Centre failure
- Software malfunction
- Conflicting sensor information
- Multiple simultaneous failures
MASS and the Safety Management System
The MASS operational concept should be integrated into the vessel's Safety Management System (SMS).
Procedures must address both normal and abnormal operation and should provide clear responsibilities for onboard personnel, masters, remote operators, shore management, and technical personnel.
- Normal MASS operating procedures
- Remote-control procedures
- Autonomous operating procedures
- Communication failure procedures
- Cybersecurity incident response
- Emergency intervention
- Remote operator competence
- Maintenance and testing
- Software and configuration management
- Incident reporting and investigation
MASS Technical Readiness Assessment
Shipowners, operators, shipyards, technology developers, and technical managers can begin preparing for the MASS regulatory environment by carrying out a structured technical readiness assessment.
MASS Operational Concept
Define how the vessel will operate, which functions are autonomous, which are remotely controlled, and which remain under onboard human control.
Remote Operations Review
Review the Remote Operations Centre, remote operator functions, communication arrangements, authority, and emergency intervention capability.
Cybersecurity Review
Assess the vessel-to-shore cyber-physical architecture, critical systems, interfaces, access controls, and cybersecurity response arrangements.
Connectivity Review
Evaluate primary and backup communications, availability, performance, failure modes, and the vessel's response to loss or degradation of connectivity.
System Reliability Review
Examine redundancy, fault tolerance, sensors, automation, software, power supply, navigation systems, and critical operational dependencies.
SMS Integration
Review whether MASS operational procedures, emergency arrangements, cybersecurity, remote operations, and competence requirements are integrated into the SMS.
From the 2026 Non-Mandatory Code to Mandatory MASS Requirements
The 2026 MASS Code is an important first step rather than the end of the regulatory process.
IMO has established an Experience-Building Phase to gather practical information from Member States and industry. Work toward a mandatory MASS Code is expected to begin in 2028, with adoption targeted by 1 July 2030 and entry into force targeted for 1 January 2032.
For shipowners and technology developers, this means that the current non-mandatory framework provides an important opportunity to identify technical, operational, cybersecurity, and human-factor issues before the future mandatory regime enters into force.
Independent Technical Consultancy for MASS Readiness
PAMS Pacific Admiralty Maritime Services provides independent marine surveying, engineering, offshore technical consultancy, and maritime regulatory compliance support.
For emerging autonomous and remotely operated vessel projects, independent technical assessment can assist owners, operators, shipyards, and project stakeholders in reviewing the relationship between vessel technology, operational requirements, risk management, remote operations, cybersecurity, and regulatory expectations.
MASS readiness should be evaluated as an integrated ship and shore operational system rather than as an isolated autonomous technology project.
Frequently Asked Questions
What is the IMO MASS Code?
The IMO International Code of Safety for Maritime Autonomous Surface Ships (MASS Code) is a goal-based international framework for the safe, secure, and environmentally responsible operation of remotely controlled and autonomous commercial ships. It was adopted by IMO in May 2026 and came into effect as a non-mandatory Code on 1 July 2026.
Is the MASS Code mandatory?
The MASS Code adopted in 2026 is a non-mandatory IMO instrument. It provides the initial international framework and supports an Experience-Building Phase. IMO has planned development of a future mandatory MASS Code, with adoption targeted by 1 July 2030 and entry into force targeted for 1 January 2032.
When did the MASS Code come into effect?
The IMO MASS Code came into effect on 1 July 2026. It was adopted by the Maritime Safety Committee at its 111th session in May 2026.
What ships are covered by the MASS Code?
The MASS Code applies to cargo ships covered under SOLAS Chapter I, generally ships of 500 gross tonnage and above engaged on international voyages. IMO also recommends that Member States apply the Code, as far as practicable, to MASS below 500 gross tonnage.
Does automation automatically make a ship a MASS?
No. Enhanced automation by itself does not automatically make a vessel a Maritime Autonomous Surface Ship. IMO states that autonomous or remote technologies must replace or support functions normally performed by onboard personnel, and the vessel must complete the applicable approval process and hold a valid MASS Safety Certificate.
What is a Remote Operations Centre?
A Remote Operations Centre (ROC) is a shore-based facility from which trained personnel may monitor or control functions of a MASS. IMO states that ROCs should be assessed, certified, and operated under a robust Safety Management System.
Why is connectivity important for MASS operations?
Connectivity may become an essential component of safe operation when vessel functions are remotely monitored or controlled. The MASS operational concept should therefore address communication availability, performance, redundancy, failure modes, and the vessel's response to loss or degradation of connectivity.
Why is cybersecurity important for autonomous ships?
Cybersecurity is directly connected with safety when digital systems can influence navigation, machinery, steering, propulsion, communications, sensors, alarms, or remote-control functions. MASS cybersecurity assessment should therefore consider both shipboard operational technology and shore-based remote operations infrastructure.
Does the master remain responsible when operating remotely?
Yes. The IMO MASS framework emphasizes human oversight and states that the master retains overall responsibility for the ship even when the master is not physically onboard. The operational concept should clearly define the authority and responsibilities of the master and remote operators.
What should be included in a MASS technical readiness review?
A MASS readiness review may include the operational concept, risk assessment, system design, software, connectivity, remote operations, cybersecurity, human factors, system reliability, emergency response, Safety Management System integration, and technical documentation.
What is the future regulatory roadmap for the MASS Code?
IMO plans to develop an Experience-Building Phase following adoption of the non-mandatory Code. Development of the mandatory MASS Code is expected to commence in 2028, with adoption targeted by 1 July 2030 and entry into force targeted for 1 January 2032.
Can PAMS provide independent MASS technical consultancy?
PAMS Pacific Admiralty Maritime Services provides independent marine surveying, marine engineering, offshore technical consultancy, and maritime regulatory compliance support. MASS-related technical readiness, system assessment, remote operations, and regulatory-readiness consultancy can be considered within an appropriate project scope.
PAMS Pacific Admiralty Maritime Services
PAMS Pacific Admiralty Maritime Services is an independent marine technical consultancy specializing in marine surveying, marine engineering, offshore technical consultancy, FPSO/SPM technical engineering, and maritime regulatory compliance.
PAMS supports shipowners, operators, technical managers, offshore projects, and maritime stakeholders through independent technical assessments, vessel inspections, technical due diligence, engineering review, and compliance-focused consultancy.
Our regulatory and assurance expertise includes RightShip RISQ 3.2, OCIMF SIRE 2.0, TMSA, ISM, ISPS, and MLC-related technical compliance requirements.
Based in Manila, Philippines — operating as an independent technical consultancy.
MASS Technical Readiness & Regulatory Consultancy
Preparing for remotely operated and autonomous vessel operations? PAMS can provide independent technical assessment and consultancy covering vessel systems, operational concepts, remote operations, offshore engineering, technical due diligence, and maritime regulatory readiness.