FAQ

Frequently asked questions.

Answers to the questions we hear most about cybersecurity on board, NIS2 compliance and what MDM-PROTECT actually does. Can't find what you are looking for? Feel free to get in touch.

Main questions

What is MDM-PROTECT?

MDM-PROTECT is a compact hardware unit that installs on your vessel and monitors all network traffic on board, 24 hours a day, 7 days a week. It sits between your IT systems (internet, communication, administration) and your OT systems (navigation, engine management, operational controls), and automatically detects and blocks threats before they can affect your operations. The system is monitored remotely from our control room, so no technical knowledge is required from you or your crew.

What is the difference between IT and OT, and why does it matter for my vessel?

IT (Information Technology) refers to the systems you use for communication, administration and internet access, such as email, office software, and internet-connected devices. OT (Operational Technology) refers to the systems that control the physical operation of your vessel, including navigation, engine management, propulsion, track pilots.

In the past, these two environments were separate. Today they are increasingly connected, which means a vulnerability in your IT environment can potentially affect your OT systems, the ones that keep your vessel moving safely. MDM-PROTECT creates a protective layer between the two, preventing threats from crossing that boundary.

Does installation affect my vessel's operations?

No. MDM-PROTECT is designed to be non-intrusive. The installation is carried out by our team and typically takes one working day. The unit integrates with your existing network without replacing or interfering with any of your current systems. Once installed, it runs silently in the background. Your crew will not notice any difference in how the vessel operates.

Does my crew need to do anything after installation?

Nothing. MDM-PROTECT is fully managed from our shore-side control room. Your crew does not need any technical knowledge to operate it. If a threat is detected, our team handles the response. We will contact you directly if any action is required on board.

What happens when a threat is detected?

The moment MDM-PROTECT detects unusual activity, such as an unauthorised access attempt, unexpected device behaviour or suspicious network traffic, our control room is alerted. Our team assesses the situation immediately and takes action by isolating the threat, blocking the connection and notifying you. In most cases, threats are neutralised before they have any impact on your operations. You will receive a full report of every detected incident.

What systems does MDM-PROTECT protect?

MDM-PROTECT monitors and protects both the IT and OT environment on board. This includes navigation systems, engine management, communication equipment, internet-connected devices and any other networked systems on your vessel. Every device connected to your on-board network falls within its scope. The unit is configured specifically to your vessel's network during installation, so protection is tailored, not generic.

What is NIS2 and does it apply to me?

NIS2 is the EU's updated directive on cybersecurity, requiring organisations across critical sectors, including transport and maritime, to implement cybersecurity measures, report incidents and demonstrate compliance. It applies directly to shipping companies, port operators and maritime supply chain entities classified as medium or large organisations.

Even if your own company falls below the threshold, NIS2 is likely to affect you indirectly. Cargo owners, charterers and logistics operators who are required to comply must also assess the cyber maturity of their entire supply chain, including the vessels they work with. That means your cybersecurity posture may be scrutinised by your clients, regardless of your own size.

Can MDM-PROTECT help me comply with NIS2?

Yes. MDM-PROTECT supports NIS2 compliance directly by providing continuous monitoring of your IT and OT systems, automated incident detection and response, and monthly compliance reports documenting all network activity, detected anomalies and actions taken. This documentation is exactly what authorities, cargo owners and chain partners will ask for. Our team also provides guidance on what NIS2 means for your specific situation.

What are the consequences of not complying with NIS2?

For organisations classified as essential under NIS2, fines can reach up to €10 million or 2% of total annual global turnover, whichever is higher. For important entities, the maximum fine is €7 million or 1.4% of turnover. Beyond financial penalties, NIS2 also introduces personal liability for management in cases of serious negligence following a security incident.

Equally significant is the commercial risk: cargo owners and charterers are increasingly requiring cybersecurity compliance as a condition of doing business. Vessels without verifiable security measures may find themselves excluded from certain contracts or freight corridors as enforcement tightens.

I am a small operator — does NIS2 still affect me?

Smaller operators may fall below the formal NIS2 thresholds and not be directly required to comply. However, if you carry cargo for companies that are in scope, and most significant cargo owners in the Netherlands are, their NIS2 obligations extend to their supply chain. That includes you. As your clients come under growing pressure to demonstrate supply chain compliance, they will increasingly ask you to show that your vessel meets a minimum cybersecurity standard. MDM-PROTECT gives you exactly that and the documentation to prove it.

Practical questions

How long does installation take?

A standard installation takes approximately one working day. Our team comes on board, maps your vessel's network, installs and configures the MDM-PROTECT unit to your specific setup, and confirms that everything is working correctly before we leave. No dry-docking or special arrangements are required.

What happens after installation, do I need to do anything to maintain it?

You do not need to do anything to maintain it. Software and firmware updates are applied automatically, keeping the unit current without any action from you. Our team monitors the system continuously from shore, so any issues are identified and resolved remotely. You receive a monthly report covering activity and status, but the system runs itself.

Is MDM-PROTECT suitable for older vessels with legacy systems?

Yes. Many inland vessels run a mix of older legacy systems and more modern equipment, and MDM-PROTECT is built with exactly this in mind. The unit is designed to integrate with existing networks without requiring upgrades to your current systems. During installation, our team maps your specific network and configures the unit accordingly. We have worked with a variety of vessel types and system combinations.

Can MDM-PROTECT be installed on multiple vessels?

Yes. MDM-PROTECT scales from a single vessel to an entire fleet. Each vessel has its own unit, individually monitored and configured. All reporting is centralised, giving fleet operators a single overview of their cybersecurity status across every vessel. If you are interested in fleet-wide protection, get in touch and we will outline what that looks like in practice.

Who is behind MDM?

MDM, Maritime Data Management, is a Rotterdam-based company founded in 2025 as a 50/50 joint venture between Jansma International and aXite Security Tools. Jansma International brings deep operational expertise in inland shipping, including over 14 years of vessel construction and maritime operations. aXite Security Tools is a specialist in OT cybersecurity, with a track record in securing critical infrastructure across some of the most demanding operational environments in Europe, including Schiphol Airport's baggage handling systems. Together, they form the foundation MDM is built on.