View source for International Ship and Port Facility Security Code

{{Use American English|date = March 2019}}
{{Admiralty law}}
{{Short description|Maritime treaty}}
{{Use dmy dates|date = March 2019}}
[[Image:ISPS code Southampton.jpg|right|300px|thumb|ISPS Code being applied in Southampton, England, with signs prohibiting access to areas next to ships.]]
[[File:Youghal port sign.jpg|thumb|ISPS Code sign in [[Youghal]], Ireland]]
[[Image:Sea Princess Southampton.jpg|right|299px|thumb|The cruise ship ''Sea Princess'' leaving the port of Southampton; fences are visible on the right, which prevent access to the ship under the ISPS Code.]]
[[File:ISPScodenorway.jpg|thumb|ISPS Sign in Port]]
The '''International Ship and Port Facility Security''' ('''ISPS''') '''Code''' is an amendment to the [[International Convention for the Safety of Life at Sea|Safety of Life at Sea (SOLAS) Convention]] (1974/1988) on [[Maritime security]] including minimum security arrangements for [[ship]]s, [[port]]s and [[government]] agencies.  Having come into force in 2004, it prescribes responsibilities to governments, shipping companies, shipboard personnel, and port/facility personnel to "detect security threats and take preventive measures against security incidents affecting ships or port facilities used in international trade."

==History==
The [[International Maritime Organization]] (IMO) states that "The International Ship and Port Facility Security Code (ISPS Code) is a comprehensive set of measures to enhance the security of ships and port facilities, developed in response to the perceived threats to ships and port facilities in the wake of the 9/11 attacks in the United States".  

Development and implementation were sped up drastically in reaction to the [[September 11, 2001 attacks]] and the bombing of the [[France|French]] oil tanker ''[[Limburg (ship) bombing|Limburg]]''. The [[United States Coast Guard|U.S. Coast Guard]], as the lead agency in the [[United States]] delegation to the IMO, advocated for the measure.<ref>[http://www.worldcruise-network.com/features/feature447/ World Cruise – Maximum Security – Cruise Ships Secure from Terrorist Threats<!-- Bot generated title -->]</ref>  The Code was agreed at a meeting of the 108 signatories to the SOLAS convention in London in December 2002. The measures agreed under the Code were brought into force on July 1, 2004.

== Appointed officers ==
ISPS Code demands that every ship must have a Company Security Officer (CSO)<ref>[https://www.edumaritime.net/isps-code/company-security-officer-cso ISPS Company Security Officer]</ref> and Port Facility Security Officer (PFSO) that will work alongside the Ship Security Officer (SSO)<ref>[https://www.edumaritime.net/isps-code ISPS Code Requirements for Seafarers, Ships and Ports]</ref> for security purposes. The CSO takes data from the Ship Security Assessment or Vessel Security Assessment to advise on possible threats that could happen on the ship. He will ensure that the Ship Security Plan (SSP) is maintained in an efficient manner by the SSO.<ref name=":0">{{Cite news|url=http://www.marineinsight.com/marine-safety/what-are-the-duties-of-ship-security-officer-sso/|title=What Are The Duties Of Ship Security Officer (SSO)?|date=2012-06-02|work=Marine Insight|access-date=2017-04-10|language=en-US}}</ref>
Port Facility Security Officer (PFSO) is an officer employed by the port and designated as responsible for the development, implementation, revision, and maintenance of the port facility security plan and liaison with the port authorities, Ship Security Officer (SSO), and Company Security, Officer (CSO).<ref>[https://www.edumaritime.net/isps-code/port-facility-security-officer-pfso Port Facility Security Officer (PFSO)]</ref>
The Ship Security Officer has full responsibility of the vessels security with the captain's approval as stated in chapter XI-2/8.<ref name=":0" /> The SSO maintains the SSP and conducts regular security inspections to make sure that the appropriate security steps are always taken. The SSO also ensures that the security crew is trained for high security level purposes.<ref name=":0" />

===Scope===
The ISPS Code states that it is the sole responsibility of the Company Security Officer (CSO) and Company to approve the Ship Security Officer (SSO). This process must be approved by the administration of the flag state of the ship or verified security organization with approval of the Ship Security Plan or Vessel Security Plan (VSP).<ref name=":1">{{Cite web|url=http://www.imo.org/blast/mainframe.asp?topic_id=897|title=FAQ on ISPS Code and maritime security|website=www.imo.org|access-date=2017-04-10|archive-date=16 April 2017|archive-url=https://web.archive.org/web/20170416185308/http://www.imo.org/blast/mainframe.asp?topic_id=897|url-status=dead}}</ref> The ISPS Code ensures that before the VSP is set in place that Vessel Security Assessments must be taken (VSA).<ref name=":3">{{Cite journal|title=Authenticated U.S Government Information|url=https://www.gpo.gov/fdsys/pkg/CFR-2016-title33-vol1/pdf/CFR-2016-title33-vol1-part104-subpartC.pdf|journal=GPO}}</ref> The Vessel Security Plan must address every requirement in the Vessel Security Assessment.<ref name=":3" /> The VSP must establish a number of important roles and steps to provide safety for the marine vessel. Therefore, the VSP must include procedures to allow necessary communication that shall be enforced at all times.<ref name=":3" /> The VSP has to include procedures that assessed for the performance of daily security protocols. It also must include the assessment of security surveillance equipment systems to detect malfunctioning parts.<ref name=":3" /> ISPS code requires that the Vessel Security Plan must have strict procedure and practices for the vital protection of [[Sensitive Security Information]] (SSI) that is either in the form of electronic or paper. Observation of procedures has to include timed submissions, and assessments of security reports pertaining to heightened security concerns.<ref name=":3" /> ISPS code requests that the VSP maintain an updated inventory of dangerous or [[hazardous goods]] and substances that are carried aboard the ship.<ref name=":3" /> The location of the goods or substance must be stated in the inventory report.<ref name=":3" />

The ISPS Code is implemented through chapter XI-2 Special measures to enhance maritime security in the International Convention for the Safety of Life at Sea (SOLAS).

Regulation XI-2/3 ensures that administrations establish security levels and guarantee the provisions of strict security level data to ships that fly their flag.<ref name=":12">{{Cite web|url=http://www.imo.org/blast/mainframe.asp?topic_id=897|title=FAQ on ISPS Code and maritime security|website=www.imo.org|access-date=2017-04-10|archive-date=16 April 2017|archive-url=https://web.archive.org/web/20170416185308/http://www.imo.org/blast/mainframe.asp?topic_id=897|url-status=dead}}</ref> Ships that are prior to docking in [[port]] must immediately comply with all requirements for security levels that are determined by that contracting [[government]].<ref name=":12" /> This also pertains to the security level that is established by the Administration for that ship.

Regulation XI-2/6 makes sure that all ships are equipped and fitted with a [[Ship Security Alert System]].<ref name=":12" /><ref name="n419">{{cite book | last=Herbert-Burns | first=Rupert | last2=Bateman | first2=Sam | last3=Lehr | first3=Peter | title=Lloyd's MIU Handbook of Maritime Security | publisher=CRC Press | date=2008-09-24 | isbn=978-1-04-008124-2}}</ref> The alarm system works from the ship to administration ashore with transmitted signals that are communicated via [[satellite]].<ref name=":12" /> The advanced security alarm system shall send a signal indicating the ship name, location, and the security threat that the ship is undergoing. The ships alarm system may be activated from the [[Bridge (nautical)|navigation bridge]] by the captain without alarming the crew on-board.<ref name=":12" />

The Regulation XI-2/8 establishes the main role of the [[Sea captain|Sea Master]], which allows him to maintain order and conduct decisions for the sake of the personnel and security of the ship. Regulations XI-2/8 states that the Sea Master must not be challenged or withheld from completing his duties.<ref name=":12" />

The Code is a two-part document describing minimum requirements for security of ships and ports.  Part A provides mandatory requirements. Part B provides guidance for implementation. Some contracting governments have elected to also treat Part B as mandatory.

The ISPS Code applies to ships on international voyages (including [[passenger ship]]s, [[cargo ship]]s of {{GT|500}} <ref>{{Cite web|url=https://www.marineinsight.com/maritime-law/the-isps-code-for-ships-a-quick-guide|title=The ISPS Code For Ships-An Essential Quick Guide|website=www.marineinsight.com|access-date=2020-05-13}}</ref> and upwards, and [[Oil platform|mobile offshore drilling unit]]s) and the port facilities serving such ships. The Code does not apply to warships, naval auxiliaries, or other ships owned or operated by a contracting government and used only on government non-commercial service.

== MARSEC levels ==
Maritime Security (MARSEC) levels were constructed for quick communication from the ship to the [[United States Coast Guard|U.S Coast Guard]] for different levels of threats aboard or ashore.<ref name=":2">{{Cite web|url=https://www.uscg.mil/safetylevels/whatismarsec.asp|title=USCG: Maritime Security (MARSEC) Levels|website=www.uscg.mil|access-date=2017-04-10}}</ref> The three security levels listed below are introduced by the ISPS Code.

MARSEC Level 1 is the normal level that the ship or port facility operates at on a daily basis. Level 1 ensures that security personnel maintain minimum appropriate security 24/7.<ref name=":2" />

MARSEC Level 2 is a heightened level for a time period during a security risk that has become visible to security personnel. Appropriate additional measures will be conducted during this security level.<ref name=":2" />

MARSEC Level 3 will include additional security measures for an incident that is forthcoming or has already occurred that must be maintained for a limited time frame. The security measure must be attended to although there might not be a specific target that has yet been identified.<ref name=":2" />

Security level 3 should be applied only when there is reliable information given for that particular security threat that is probable or at hand.<ref name=":13">{{Cite web|url=http://www.imo.org/blast/mainframe.asp?topic_id=897|title=FAQ on ISPS Code and maritime security|website=www.imo.org|access-date=2017-04-10|archive-date=16 April 2017|archive-url=https://web.archive.org/web/20170416185308/http://www.imo.org/blast/mainframe.asp?topic_id=897|url-status=dead}}</ref> Security level 3 must be set for a timed duration for the identified security incident.<ref name=":13" /> Although the security levels will change from security level 1 to security level 2 and to security level 3, it is highly possible for the security levels to change drastically from security level 1 to security level 3.<ref name=":13" />

==National implementation==
===Europe===
Europe has enacted the International regulations with EC Regulation (EC) No 725/2004 of the European Parliament and of the Council of 31 March 2004, on enhancing ship and port facility security.

===United Kingdom===
The UK has enacted The Ship and Port Facility (Security) Regulations 2004, (S.I.1495 of 2004) these bring the EU regulation 725/2004 into UK law.<ref>{{Cite web | url=http://www.legislation.gov.uk/uksi/2004/1495/contents/made |title = The Ship and Port Facility (Security) Regulations 2004}}</ref>

===United States===
The United States has issued regulations to enact the provisions of the [[Maritime Transportation Security Act of 2002]] and to align domestic regulations with the maritime security standards of SOLAS and the ISPS Code.  These regulations are found in [https://web.archive.org/web/20120210185820/http://www.access.gpo.gov/nara/cfr/waisidx_03/33cfrv1_03.html Title 33] of the [[Code of Federal Regulations]], Parts 101 through 107.  [https://web.archive.org/web/20120210185812/http://www.access.gpo.gov/nara/cfr/waisidx_03/33cfr104_03.html Part 104] contains vessel security regulations, including some provisions that apply to foreign ships in US waters.

==See also==
* [[Supply-chain security]]
* [[Port security]]
* [[Hostile architecture]]

==References==
{{reflist}}

== External links ==
* [https://www.imo.org/en/OurWork/Security/Pages/FAQ.aspx IMO - FAQ on ISPS Code and maritime security]

[[Category:International Maritime Organization]]
[[Category:International water transport]]
[[Category:Water transport organizations]]
[[Category:Law of the sea]]