Computer and networking technology on board ships is increasing in complexity as the levels of automation and monitoring at sea evolve. Ships are acknowledged to be a System of systems, including both IT (Information Technology) and OT (Operational technology). A virtual team that includes members of the various on-board departments, shore based technical support staff and vendors perform management of technical equipment, largely in isolation. It is possible to conclude that the technology installation is one of the only operational aspects of a vessel, where no one has the full picture and could drive a coordinated response to a major technology issue. This paper will propose a best practice framework for governance of technology on board ships. This framework will serve as an input to the process of including cyber security in the ISM Safety Management Manual for the 2021 deadline.