The security assessment and the ship security plan
1The lesson in plain words
The CSO has the ship assessed, including an on-scene survey. The plan built on it is approved by the flag, kept confidential and kept up to date.
The assessment
The ship security assessment (SSA) is the risk assessment behind the plan. The CSO makes sure it is carried out by people with the right skills. It must include an on-scene security survey on board. It identifies existing security measures, key shipboard operations to protect, possible threats and their likelihood, and weaknesses, including human factors. The company documents, reviews, accepts and keeps it.
The SSO's part
The SSO knows the ship best. You show the assessor access points, restricted areas, lighting, locks, alarms and how the crew actually work. You point out weak spots, such as a gangway out of sight of the bridge or a stores door left open at night. Computer systems and networks are part of the survey too.
The plan
The ship security plan (SSP) turns the SSA into measures for each security level. It must cover weapons and dangerous substances, restricted areas, unauthorised access, threats and breaches, government instructions at level 3, evacuation, crew security duties, internal audits, training, drills and exercises, and coordination with port facilities.
Keeping the plan workable
Include procedures for reviewing the plan and reporting incidents. Name the SSO and give the CSO's name and 24-hour contact details. Set out how to inspect, test, calibrate and maintain security equipment, including testing and calibration intervals. Identify the ship security alert system (SSAS) activation points. Explain how to test, activate, deactivate and reset the system, and prevent false alerts. ISPS A/9.4 requires these contents.
Approval
The flag state, or a recognised security organisation (RSO) on its behalf, approves the SSP. An RSO that prepared the SSA or SSP may not approve it. The plan is written in the ship's working language; if that is not English, French or Spanish, a translation into one of them is included. The flag determines which changes to the approved SSP or its security equipment need approval before implementation. Check its requirements before making changes.
Confidentiality
Keep the SSP confidential; protect electronic copies against deletion, destruction or amendment. Port state control (PSC) may inspect relevant sections only exceptionally, with clear grounds and no other way to verify or rectify non-compliance, and with the flag's or master's consent. Sections protected by ISPS A/9.8.1, including restricted areas, threat responses and SSAS details, require agreement of the Contracting Governments concerned, including the flag and port states. Protect all copies from unauthorised access or disclosure.
2Key data
- SSA
- Under the CSO; includes an on-scene security survey (ISPS A/8)
- SSP approval
- Flag or an RSO that did not prepare the SSA or SSP (A/9.2)
- Language
- Working language; plus English, French or Spanish if needed
- Amendments
- Flag determines which SSP or equipment changes need prior approval
- PSC access
- Protected sections: agreement of the governments concerned
3Key points
- 1
The SSA is done under the CSO and includes an on-scene survey.
- 2
The SSP is approved by the flag or an RSO independent of its preparation.
- 3
The flag determines which SSP or equipment changes need approval before implementation.
- 4
The plan is confidential; PSC sees it only in limited cases.
- 5
Computer systems and networks belong in the assessment.
4Frequent mistakes
Wrong: The SSO writes and approves the ship security plan.
Right: The CSO arranges the SSA and SSP. The flag or an independent RSO approves the plan.
Wrong: A port state control officer may read the whole plan on request.
Right: The SSP is confidential. Exceptional PSC access needs clear grounds, no other means and consent. Protected sections need agreement of the governments concerned.
5Practice case & exam keys
Your company fits closed-circuit television (CCTV) and a new card-access door to the accommodation. The CSO emails an updated SSP page and asks you to start using it today. What do you check?
Show the answer
Ask the CSO which changes need prior approval under the flag's requirements and obtain evidence of any required approval. Approval on its way is not approval. Keep the approved access arrangements in force; do not implement affected changes before approval. Agree any temporary measures under the current plan with the master and CSO, preserve emergency escape and record the decision. File the approved amendment.
Exam keys
- SSA under the CSO, with an on-scene survey; documented, reviewed, accepted and kept by the company.
- SSP approved by the flag or an RSO not involved in preparing it.
- The flag determines which SSP or equipment changes require approval before implementation.
- SSP confidential; exceptional PSC access with consent. Protected sections need agreement of the governments concerned.
Finish this unit
When you've read it, answer three questions. Get all three right to finish the unit; opening the page alone doesn't count.
My notes for this unit
No notes

