Marine and shipping firms in Dubai run a shore office around the clock, hold documents that move a vessel, and answer to cyber risk expectations from the IMO and their own class society. Listonics builds the shore side properly and plans for the vessel link. Projects are quoted as a fixed scope from AED 2,500 to AED 30,000 depending on requirement.
The shore office is the operations centre, not a back office
Shipping does not keep office hours. A vessel berths on the tide, a port call is fixed by the agent overnight, and a bunker or crew change is arranged against a window that ignores the working week. That makes the shore office an operations room, and it changes the IT question from convenience to continuity: if email or the document system is down at two in the morning, a laid-up berth costs money that dwarfs the IT budget.
Practically that means redundancy where an ordinary office would accept a single point of failure. A second internet line with automatic failover, because a provider fault during a port call is not a slow afternoon, and satellite where the shore office or the vessel needs a path that does not depend on a cable at all. Monitoring that reports a problem rather than waiting for a call. And out-of-hours cover written into the agreement rather than assumed, which we set around your operating pattern rather than an office week.
Documents are the cargo
A shipping business runs on paperwork with legal weight: bills of lading, charter parties, statements of facts, crew certificates, port clearances, class and survey records. These move between the owner, the charterer, the agent, the port and the authorities, and the version that matters is whichever one was current at the moment of signing. Storing them in mailboxes, which is what most firms drift into, means the record of a fixture lives in whichever inbox it happened to land in.
The fix is unglamorous and durable: one document structure per vessel and per voyage, versioned, with access by role rather than by person, and a retention period set deliberately against your obligations. Our cloud storage for business page covers the structure, and business backup services covers the copy that survives a bad day.
The vessel link you do not control
Shore IT can be engineered. The link to a vessel largely cannot, because it is satellite, it is shared, and it changes with position and weather. Modern low-orbit services have improved this considerably, and Starlink publishes its maritime offering for vessels, but the planning assumption should still be that the link is intermittent and expensive rather than always on.
So the design question is what has to work when the link drops. Mail for the master should queue and send rather than fail. Reporting forms should complete offline and sync. Large files, such as drawings or a software update for a bridge system, should be scheduled rather than pulled on demand. We set that up on the shore side so the vessel is not fighting the connection.
- Assume intermittent, not absent: design for queue and sync rather than live sessions.
- Keep vessel mailboxes small and archived ashore, so a reconnect is not a flood.
- Schedule large transfers to the cheapest window rather than on demand.
- Give the master a documented fallback for when the primary link fails.
Cyber risk is now a regulated expectation
Maritime cyber security stopped being optional guidance when the International Maritime Organization required cyber risk to be addressed in safety management systems. The industry guidance that most owners and managers work to is maintained through bodies including BIMCO. What this means in practice for a Dubai office is that an auditor, a charterer or an insurer can ask how you manage cyber risk and expect an answer with evidence behind it.
That evidence is ordinary IT work done deliberately: multi-factor authentication on every account, administrator separation, a documented joiner and leaver process, patching you can demonstrate, and a backup that has been restored and dated. Our cyber security audit produces exactly that record, ranked by risk, at a fixed price.
Crew, agents and everyone who is not staff
The access list in a shipping company is unusually messy. Seafarers rotate on and off, port agents need a folder for one call, superintendents come and go, technical managers sit in another country, and a charterer's broker needs a document but nothing else. Granting this person by person produces an access list nobody can audit within a year.
Access by group and by vessel is what makes it manageable. Somebody joining a vessel inherits that vessel's access, a port agent is given one voyage folder with sharing set to expire, and a departure removes everything in one action. The CIS Critical Security Controls treat this as a baseline rather than an advanced measure, and it is the control an auditor asks about first.
Working around Jebel Ali and the Dubai maritime cluster
Dubai's marine sector clusters around the port and free zone operations run by DP World, with the federal regulator being the Ministry of Energy and Infrastructure and local oversight through the Dubai Maritime Authority. For IT this matters in two practical ways: offices inside port and free zone estates have their own connectivity options and fit-out procedures, and a firm with a shore office plus a yard, workshop or warehouse needs those sites joined properly rather than run as separate islands.
We check what each provider can actually deliver to your specific unit before designing anything, and where a company runs more than one location we build it as one company on one tenant. Our multi-location IT support page covers that pattern.
How a marine engagement runs
A survey of the shore office, any yard or workshop, and a conversation about the operating pattern and the vessel link. That produces a fixed-scope proposal covering connectivity and failover, the document structure, access by vessel and role, the security baseline with its evidence, and backup with a monthly restore test. Listonics projects run from AED 2,500 to AED 30,000 depending on requirement.
Support is a fixed monthly fee with response times written into the agreement and set around when you actually operate. Everything ends with documentation you own, which in this sector doubles as the record you hand an auditor.
Frequently asked questions
We build and support the shore side, and design it so the vessel link works within its limits: mail that queues, reporting that syncs, and transfers scheduled rather than on demand. Equipment on the bridge and in the engine room is the domain of your class-approved suppliers, and we coordinate with them rather than working on it ourselves.
That cyber risk has to be addressed within your safety management system, which in practice means you can show how it is managed rather than assert that it is. For a shore office that is multi-factor authentication everywhere, administrator separation, a documented joiner and leaver process, demonstrable patching and a backup with a dated restore test.
It should, and we set covered hours around your operating pattern rather than an office week. Port calls, bunkering and crew changes do not wait for Sunday morning, so the systems that stop operations get out-of-hours cover, and maintenance is scheduled into your quiet window instead of applied whenever an update is released.
By structuring documents per vessel and per voyage and granting access through groups rather than to individuals. The agent is added to the single voyage folder with sharing set to expire, and is removed in one action at the end of the call. That also makes your access list something you can produce when an auditor asks.
Yes, and it is the arrangement we recommend. One Microsoft 365 tenant, the same security settings at each site, a secure link between them, backup covering all of it and a single support agreement. Two setups maintained separately is where the duplicated cost and most of the confusion come from.
It is quoted as a fixed scope after a free survey of the shore office and any other sites. Listonics projects run from AED 2,500 to AED 30,000 depending on requirement, with headcount, number of sites, out-of-hours cover and the evidence work moving the figure most. Support is a fixed monthly fee with response times in the agreement.
Written by Srinivasan Ramachandran, Founder, Listonics · Last reviewed October 11, 2026