Lloyd's Register in 2026: Cyber Rules and New Fuels
- Ravi Shankar FICS
- 4 days ago
- 15 min read
At Posidonia 2026, Lloyd's Register launched a Newbuild Advisory Service and an updated New Construction Guide, drawing on experience from more than 500 newbuilding projects. Sherry Li, LR's Global Head of New Construction, put the problem plainly: selecting the right shipyard has become more complex as owners balance delivery schedules, fuel readiness, and technical capability simultaneously. Source: InterManager, 'Lloyd's Register strengthens newbuild capabilities as complexity grows for shipowners,' Posidonia 2026.
Three weeks earlier, EXMAR completed type approval and factory acceptance testing for an ammonia propulsion system at HD Hyundai's South Korean facility, under joint supervision from EXMAR and Lloyd's Register. EXMAR Group CEO Carl-Antoine Saverys said it plainly: 'Ammonia propulsion is no longer theoretical, we are deploying it.' Source: gCaptain, 'Shipping's Ammonia Era Begins as EXMAR Receives Landmark Newbuild,' June 2026.
Lloyd's Register is a classification society that verifies a ship meets technical and safety standards through plan approval, construction surveys, and ongoing in-service inspection. In 2026, two areas define its most consequential current work: alternative fuel classification, where LR's tracked orderbook now stands at 1,942 alternative-fuel-capable vessels, and cyber resilience classification under IACS UR E26 and UR E27, which entered force for newbuilds contracted from 1 July 2024 and are now reaching their first in-service survey cycle.
What Classification Actually Means and Why It Exists
A classification society does not own ships. Lloyd's Register does not build them either. What LR does is verify, independently of the shipowner and the shipyard, that a vessel's design, construction, and ongoing condition meet a defined set of technical standards.
That verification happens in stages. Plan approval reviews the design before steel is cut. Construction surveys check the vessel as it is built. Once delivered, periodic surveys, annual, intermediate, and special, confirm the vessel remains in compliant condition throughout its operating life. A vessel that fails to maintain class loses its certificate, and with it, in most cases, its insurability and its ability to trade internationally.
I have sat in conversations where a shipowner treated classification as a formality, a box to tick rather than a genuine technical check. That view does not survive contact with a real survey. A surveyor finding a structural crack during an intermediate survey, or flagging an inadequate cyber risk assessment during a special survey, is not performing theatre. The certificate exists because someone, somewhere along the chain, decided that an independent technical check on every commercial vessel was worth the cost of building an entire global institution to perform it.
Posidonia 2026: LR's Newbuild Advisory Service and What It Actually Adds
Standard plan approval answers one narrow question: does this design meet the rules. LR's new Newbuild Advisory Service, launched at Posidonia 2026, answers a broader commercial question instead: given fuel readiness, delivery schedule, shipyard capability, and long-term operational requirements together, which design and which yard actually make commercial sense.
That distinction matters more in 2026 than it did five years ago. A shipowner ordering a newbuild today is choosing among LNG, methanol, ammonia-ready, hydrogen-capable, and conventional fuel options simultaneously, each with different regulatory trajectories, different bunkering infrastructure timelines, and different resale value implications a decade out. Getting that choice wrong is not a minor design error. It is a multi-decade capital allocation mistake.
The accompanying updated New Construction Guide focuses specifically on major North Asian shipyards, the region where the overwhelming majority of global newbuild capacity sits. LR is drawing on its own institutional knowledge across more than 500 newbuilding projects to give owners a single reference point for yard capability, regional strengths, and construction considerations, rather than requiring owners to assemble that picture themselves from scattered sources.
Inside Cyber Resilience Classification: UR E26, UR E27, and LR's Specific Posture
North Star's Grampian Kestrel and Grampian Eagle became the first vessels in the world to achieve LR's Cyber Resilience classification, certified to the LR Rules implementing IACS standards UR E26, Cyber Resilience of Ships, and UR E27, Cyber Resilience of On-Board Systems and Equipment. Duncan Duffy, LR's Global Head of Digitalization, Technical Directorate, described it as the culmination of close collaboration between North Star, shipbuilder Vard, and LR throughout the design and construction process. Source: Lloyd's Register, 'North Star secures LR's Cyber Resilience classification,' company press release.
Both URs took effect on 1 July 2024 for newbuilds contracted from that date. They translate IMO Resolution MSC.428(98)'s general obligation to manage cyber risk as part of a ship's Safety Management System into specific, surveyable engineering standards. UR E26 covers the cyber resilience of the vessel as an integrated whole, identification, protection, detection, response, and recovery across the ship's systems. UR E27 covers the individual onboard systems and equipment through a type-approval pathway, the responsibility of the equipment manufacturer rather than the shipyard directly. Source: International Association of Classification Societies, UR E26 'Cyber Resilience of Ships' and UR E27 'Cyber Resilience of On-Board Systems and Equipment,' official publication.
By mid-2026, the first cohort of E26/E27-contracted newbuilds is entering service. That means the first cyber-relevant in-service surveys, not just the original newbuild certification, are now starting. This is a genuinely new test for the class society system: certifying a cyber-resilient design at delivery is one exercise, confirming two years later that the vessel's actual operational posture still matches what was certified is a different and harder one.
Here is where LR's specific posture becomes relevant. Across its IACS peer societies, DNV, Bureau Veritas, ABS, and ClassNK have each published their own standalone cyber security guidance and class notations aligned with E26/E27, with some variation in terminology between them. Lloyd's Register has explicitly stated it has not published a separate standalone document. Its position is that its existing July 2024 rules are already closely aligned with the new requirements, making a separate guidance publication unnecessary. Source: Pen Test Partners, 'IACS UR E26 and E27 guidance,' technical analysis of cross-society compliance posture.
Worked Example: What a Cyber Resilience Survey Actually Checks
Take a representative mid-sized product tanker, contracted in late 2024 and now approaching its first in-service cyber-relevant survey under UR E26/E27. The surveyor checks five specific elements, against five specific categories of documentation.
Survey Element | What It Verifies | Documentation Required | Who Provides It |
Vessel Asset Inventory | Complete, current list of all computer-based systems aboard, matching the inventory created during construction under UR E26 | Zones and Conduit Diagram; original construction-phase asset inventory plus any subsequent changes | Shipowner/ship manager, originally compiled by the shipbuilder |
Ship Cyber Resilience Test Procedure | That the vessel's cyber resilience measures (network segmentation, access control, monitoring) function as designed | Original test procedure documentation from construction, plus any retest records following system changes | Shipowner/ship manager |
Ship Cyber Security and Resilience Program | That an active, maintained program exists for ongoing cyber risk management during the operational phase, not just at delivery | Current program documentation reflecting the vessel's actual operational state | Shipowner/ship manager, mandatory under UR E26 for the operational phase |
Type-Approved Equipment Verification | That individual onboard systems and equipment still match their type-approved configuration, firmware version, and security baseline | UR E27 type approval certificates for each in-scope system; evidence of any firmware or configuration changes since delivery | Equipment manufacturer/OEM, verified by shipowner/ship manager at survey |
SMS Alignment Check | That the cyber risk management content of the Safety Management System reflects what the vessel actually does operationally, not a generic template | Safety Management System documentation, cross-checked against the vessel's actual systems and procedures | Document of Compliance holder, the management company responsible regardless of which class society classed the vessel |
The fifth row is the one most ship managers underestimate. Cyber risk management sits inside the Safety Management System under IMO MSC.428(98), which means the management company holding the Document of Compliance carries the operational responsibility, independent of which class society classed the vessel. A surveyor pressing hardest on whether the SMS is a credible reflection of the vessel's actual cyber posture, not a generic template copied across a fleet, is the single most common source of findings at this survey stage.
The Counter-Consensus Case: 'No Separate Guidance' Is Not Necessarily a Weakness
The implicit consensus among cybersecurity specialists tracking this space is that DNV's approach, publishing detailed standalone guidance and a tiered notation system (Cyber Secure Essential, aligned with mandatory UR E26/E27 compliance, and Cyber Secure Advanced, voluntarily exceeding it), represents better practice than LR's choice not to publish separate documents.
I am not convinced that consensus is right, and the EXMAR and North Star precedents are part of why.
A standalone guidance document is useful when a society's existing rules require substantial reinterpretation to align with a new requirement. LR's position is that its rules did not require that reinterpretation, because they were already structured closely enough to the new IACS standard that a separate publication would have been redundant rather than clarifying. Whether that claim holds up depends entirely on whether LR's surveyors are actually applying a consistent, defensible standard during real surveys, which is precisely what the North Star certification and the upcoming wave of 2026 in-service surveys will demonstrate in practice rather than in marketing language.
A published standalone document is not the same thing as survey-ready compliance evidence. DNV's tiered notation system gives shipowners a clearer marketing signal, Cyber Secure Essential versus Advanced is an easy distinction to put in a charter party clause. But the actual test of whether a class society's cyber resilience approach works is whether its surveyors can consistently identify a genuine gap between a vessel's documented cyber posture and its operational reality. A society can publish extensive standalone guidance and still apply it inconsistently across surveyors. A society can rely on tightly integrated existing rules and still apply them rigorously. The publication format is not the test. The survey outcome is.
LR and the Alternative Fuel Orderbook: Reading the 2025 Numbers
The EXMAR ammonia newbuild is not an isolated story. It sits inside a quantified, tracked market position LR publishes annually using Clarksons Research data. Source: Lloyd's Register, alternative-fuel orderbook analysis using Clarksons Research data, published January 2026, covering full-year 2025.
Shipowners ordered 590 merchant and leisure vessels in 2025 capable of operating on alternative fuels at delivery, totaling 45.5 million gross tonnes. The total alternative-fuel-capable orderbook now stands at 1,942 vessels: 1,259 LNG-capable, 385 methanol-capable, 139 LPG-capable, 55 ethane-capable, 53 hydrogen-capable, 45 ammonia-capable, 22 biofuel-capable, and 4 nuclear-capable. Including vessels already operating with alternative-fuel capability, the combined in-service fleet plus orderbook totals 4,542 vessels, 294.7 million gross tonnes, which LR estimates at 2.1% of the global fleet and orderbook combined.
LNG remains the dominant choice by a wide margin, on the strength of its lower CO2 emissions relative to conventional fuels, though LR's own Fuel for Thought: LNG report flags methane slip and the need to scale bio-LNG and synthetic LNG pathways for longer-term decarbonization alignment. Methanol continued strong with 134 new orders, supported by LR's July 2025 revision of its low-flashpoint fuel rules to maintain alignment with the IMO IGF Code. Ammonia's 45-vessel-capable orderbook and six new 2025 orders look modest next to LNG's scale, but the EXMAR case demonstrates the technical work, type approval and factory acceptance testing of ammonia propulsion systems, is now genuinely operational rather than theoretical, exactly the milestone Saverys was describing.
Classification Society Comparison: LR vs DNV vs ABS vs Bureau Veritas vs ClassNK
The single most consequential difference between the major IACS societies right now is not fleet size. It is how each has chosen to translate the same mandatory IACS Unified Requirements into rules, guidance, and survey practice.
Society | E26/E27 Guidance Approach | Alternative Fuel Position | Notable 2025-2026 Milestone | Comparative Note |
Lloyd's Register | No standalone guidance published; relies on existing July 2024 rules alignment | 1,942-vessel tracked alternative-fuel orderbook; ammonia type approval (EXMAR) | First-ever Cyber Resilience classification (North Star CSOVs); Posidonia 2026 Newbuild Advisory launch | Bets on rule integration over separate documentation; strongest current alternative-fuel data transparency via published Clarksons-sourced analysis |
DNV | Published standalone guidance with a tiered notation system (Cyber Secure Essential/Advanced) | Major LNG and ammonia classification presence | Cyber Secure Advanced voluntarily exceeds IACS/IMO minimums | Clearest commercial signalling via tiered notations, useful for charter party reference |
ABS | Published updated cyber security guidance aligned with E26/E27 | Strong US Gulf and offshore alternative-fuel presence | Continued early-adopter positioning for cyber certification services | Strong North American market alignment |
Bureau Veritas | Published updated cyber security guidance aligned with E26/E27 | Significant European alternative-fuel newbuild presence | Active in EU-regulated fleet cyber compliance work | Strong EU regulatory alignment given ETS/FuelEU Maritime overlap |
ClassNK | Published updated cyber security guidance aligned with E26/E27, with specific Japanese-flag fleet application detail | Dominant position in Japanese and broader Asian newbuild market | Detailed E26/E27 implementation guidance specific to Japanese shipyard practice | Strongest Asia-Pacific newbuild market integration |
The Retrofit Capacity Gap and Where It Actually Sits
LR's own Engine Retrofit Report 2025 puts current retrofit capacity at approximately 465 vessels per year across 16 yards, against a projected need of 1,000 conversions annually to meet the pace of decarbonisation that current fleet renewal and regulatory targets imply. Source: Lloyd's Register, Engine Retrofit Report 2025. Securing a retrofit slot in a constrained market is, in practice, its own kind of capacity negotiation, not unlike how freight forwarding works after the DSV-Schenker consolidation: the operators with the deepest yard relationships and the earliest bookings get priority, and waiting until the regulatory deadline is close is the most expensive way to discover that.
That gap is not primarily a classification bottleneck. Plan approval and survey capacity at LR and its peer societies can scale with demand faster than physical retrofit yard capacity can. The bottleneck sits in dry-dock availability, skilled retrofit labour, and the specific engineering complexity of converting an existing engine to burn LNG, methanol, or ammonia safely, work that requires dedicated yard space and expertise that does not yet exist at the scale the targets assume.
Hull optimization and energy-saving devices are growing faster precisely because they do not require this constrained retrofit capacity: 28.5% of newbuilds now adopt at least one energy-saving device, and wind-assisted propulsion devices, led by bulk carriers and tankers, are delivering fuel savings of 5-15%, in some cases up to 30%.
Why Classification Credibility Matters Most on Novel Technical Questions
A classification society's reputation on conventional hull and machinery surveys was built over more than a century, with enough accumulated casualty data and engineering precedent that the standards are, in a meaningful sense, settled. Cyber resilience and alternative fuel safety are not settled in the same way. There is no century of casualty data on ammonia fuel system failures. There is limited real-world precedent on how a vessel's cyber posture actually degrades between delivery and a five-year survey.
This is exactly the condition under which a classification society's institutional judgment matters most, and where the cost of getting it wrong is highest. The same logic that makes navigating Strait of Hormuz transit risk in 2026 a matter of structured professional judgment rather than a rigid rule applies here: when there is no settled precedent, the quality of the institution making the call matters more than the existence of a published rule. A society's track record on novel questions, EXMAR's ammonia type approval, North Star's cyber resilience certification, becomes the actual evidence a shipowner or financier should weigh, not the marketing language describing the service.
Shipfinex/MAT Section: Classification as the Trust Layer Beneath Asset-Level Exposure
Shipfinex FZCO, operating under VARA In-Principle Approval (IPA/26/01/002), structures Maritime Asset Tokens around vessels that carry exactly this kind of independently verified classification status. An IPA is not a full operational licence and is subject to completion of final regulatory requirements.
Maritime Asset Tokens (MATs) represent economic exposure to vessel-owning Special Purpose Vehicles, the same structure described in Shipfinex's guide to maritime asset tokenization. Classification status is not a peripheral detail in this structure, but the independent, third-party verification layer that gives any prospective MAT holder a defined, externally audited basis for understanding what a vessel actually is and whether it continues to meet the standards it was certified against, in the same way net asset value in shipping depends on a current, dated, independently verified valuation rather than a stale or self-reported one.
A vessel's class certificate does not eliminate operational risk, the same point that applies to ocean freight rates after the Hormuz crisis and the structured industry guidance that governs transit decisions there. But it does mean every party assessing the asset, a charterer, an insurer, a financier, or a prospective MAT holder, is working from the same independently verified technical baseline rather than from the vessel owner's own unverified claims.
Where distributions are declared by the SPV, they are paid to token holders transparently and on-chain. MAT values may decline materially below purchase price if the underlying vessel's market value, operating performance, or classification status deteriorates. Secondary market liquidity for MATs is limited; early exit may not be possible.
Frequently Asked Questions
What does Lloyd's Register actually do?
Lloyd's Register is a classification society that independently verifies a ship's design, construction, and ongoing condition meet defined technical and safety standards. This happens through plan approval before construction, construction surveys during the build, and periodic in-service surveys, annual, intermediate, and special, throughout the vessel's operating life. LR does not own or build ships; its role is independent verification on behalf of the broader maritime system, including insurers, charterers, flag states, and financiers, all of whom rely on a vessel's class certificate as a shared technical reference point.
What is IACS UR E26 cyber resilience?
IACS UR E26, 'Cyber Resilience of Ships,' is a Unified Requirement published by the International Association of Classification Societies, mandatory for newbuilds contracted from 1 July 2024. It translates IMO Resolution MSC.428(98)'s general obligation to manage cyber risk into specific, surveyable engineering standards covering the cyber resilience of the vessel as an integrated whole, identification, protection, detection, response, and recovery. Its companion requirement, UR E27, covers individual onboard systems and equipment through a type-approval pathway. Together, they require shipbuilders, equipment manufacturers, and shipowners to maintain specific documentation, including a vessel asset inventory and a cyber resilience test procedure, that surveyors check both at delivery and at subsequent in-service surveys.
How does ship classification work for alternative fuel vessels?
Classification for alternative fuel vessels follows the same plan approval, construction survey, and in-service survey structure as conventional vessels, but with additional technical scrutiny specific to the fuel type. For ammonia, methanol, and hydrogen propulsion, this includes type approval and factory acceptance testing of the fuel system itself, often conducted jointly with the engine manufacturer, as in Lloyd's Register's supervision of EXMAR's ammonia propulsion type approval at HD Hyundai's facility. Classification societies also publish fuel-specific rules, such as LR's rules for ships using gases or other low-flashpoint fuels, updated periodically to remain aligned with the IMO IGF Code as the underlying international safety framework evolves.
What is the difference between LR's Cyber Resilience classification and standard UR E26/E27 compliance?
Standard UR E26/E27 compliance is mandatory for all newbuilds contracted from 1 July 2024 and is verified as part of standard classification. Lloyd's Register's specific Cyber Resilience classification, as awarded to North Star's Grampian Kestrel and Grampian Eagle, the first vessels in the world to receive it, represents formal certification to the LR Rules implementing these IACS standards, demonstrating early and rigorous compliance during a period when the broader industry was still developing common practice. The distinction matters most during the current transitional period as the first cohort of E26/E27-contracted vessels reaches its first in-service survey cycle in 2026, since early, well-documented compliance reduces the risk of survey findings.
Why hasn't Lloyd's Register published separate cyber resilience guidance like DNV?
Lloyd's Register has stated that its existing July 2024 rules are already closely aligned with IACS UR E26 and UR E27, making a separate standalone guidance document unnecessary in its assessment. This differs from the approach taken by DNV, Bureau Veritas, ABS, and ClassNK, all of which have published their own standalone cyber security guidance and notation systems aligned with the same Unified Requirements. Whether this represents a meaningful difference in practical compliance outcomes depends on how consistently LR's surveyors apply the integrated rules during actual surveys, which the current wave of first in-service cyber-relevant surveys in 2026 will demonstrate in practice. Source: IACS, press release confirming UR E26/E27 entry into force for newbuilds contracted from 1 July 2024.
How big is the alternative fuel vessel orderbook in 2026?
As of Lloyd's Register's analysis of 2025 full-year data using Clarksons Research figures, the global alternative-fuel-capable orderbook stood at 1,942 vessels, with LNG-capable vessels dominant at 1,259, followed by methanol at 385, LPG at 139, ethane at 55, hydrogen at 53, ammonia at 45, biofuel at 22, and nuclear at 4. Including vessels already in service with alternative-fuel capability, the combined fleet and orderbook totalled 4,542 vessels, approximately 294.7 million gross tonnes, representing roughly 2.1% of the global fleet and orderbook combined.
What is the retrofit capacity gap in shipping decarbonization?
The retrofit capacity gap refers to the shortfall between current global capacity to convert existing vessel engines to alternative fuels and the capacity needed to meet decarbonisation targets. Lloyd's Register's Engine Retrofit Report 2025 puts current capacity at approximately 465 vessel conversions per year across 16 yards, against a projected need of roughly 1,000 conversions annually. The gap is primarily a physical and labour constraint, dry-dock availability and skilled retrofit expertise, rather than a classification or regulatory bottleneck, since plan approval and survey capacity at classification societies can scale faster than physical yard retrofit capacity.
What does LR's Newbuild Advisory Service actually include?
Launched at Posidonia 2026, LR's Newbuild Advisory Service goes beyond standard plan approval to help shipowners navigate the broader set of decisions involved in ordering a new vessel: fuel readiness given multiple competing alternative fuel pathways, shipyard capability assessment, delivery schedule risk, and long-term operational requirements. It is accompanied by an updated New Construction Guide focused specifically on major North Asian shipyards, drawing on LR's accumulated experience across more than 500 newbuilding projects to give owners a consolidated reference point rather than requiring them to assemble that picture from scattered sources independently.
Glossary
Classification Society: an independent organisation that verifies a ship's design, construction, and ongoing condition meet defined technical standards.
Plan Approval: the review of a vessel's design against classification rules before construction begins.
Class Certificate: the document confirming a vessel meets classification society standards; required for insurability and international trading in most cases.
IACS: the International Association of Classification Societies, the body that develops Unified Requirements applied across its member societies.
UR E26 / UR E27: IACS Unified Requirements covering cyber resilience of ships and onboard systems respectively, mandatory for newbuilds contracted from 1 July 2024.
Type Approval: certification that a specific piece of equipment or system meets defined technical standards, typically the manufacturer's responsibility.
Document of Compliance: the certificate confirming a ship management company's Safety Management System meets ISM Code requirements; the holder carries cyber risk management responsibility under IMO MSC.428(98).
IGF Code: the IMO's International Code of Safety for Ships using Gases or other Low-flashpoint Fuels.
Approval in Principle (AiP): a preliminary classification society assessment confirming a novel design concept is technically feasible, ahead of full plan approval.
Retrofit: the conversion of an existing vessel's engine or fuel system to operate on an alternative fuel.
DISCLAIMER: Ravi Shankar FICS is Chief Commercial Officer of Shipfinex, a maritime asset tokenisation platform operating under VARA In-Principle Approval (IPA/26/01/002) in Dubai, and Chairman of ICS Middle East. This article is for informational and educational purposes only and does not constitute investment advice or a financial promotion. Maritime Asset Tokens are VARA-regulated virtual assets backed by physical maritime assets held through ring-fenced SPVs. MAT values may decline materially below purchase price. In extreme scenarios (e.g. vessel total loss), residual scrap and salvage value provides a floor, but material capital impairment is possible. Distributions are not guaranteed. Secondary market liquidity is limited; early exit may not be possible.
Ravi Shanker
Co-Founder & CCO, Shipfinex
Ravi Shankar FICS is Co-Founder and Chief Commercial Officer of Shipfinex, and General Secretary of the ICS Middle East Branch. A Fellow of the Institute of Chartered Shipbrokers with extensive experience in ship sale and purchase, chartering, and maritime consultancy, he has previously held senior roles at Maersk Broker and Eastgate Shipping DMCC. His day-to-day commercial work spans dry bulk and tanker market analysis, SnP transactions, and shipbroking advisory.
