International Ship and Port Facility Security Code

The International Ship and Port Facility Security Code, adopted by IMO under SOLAS Chapter XI-2 in the aftermath of the September 2001 attacks and entering into force in July 2004, creates a framework for assessing and managing security risks to ships and port facilities. It requires ships of 500 GT or more on international voyages to carry an International Ship Security Certificate, have a company security officer (CSO), and have a ship security plan approved by the flag state. For a deck officer designated as ship security officer (SSO), the ISPS Code defines the daily security responsibilities: maintaining the ship's security level, controlling access to the vessel, monitoring the deck and restricted areas, and logging security incidents and drills. The three security levels — 1 (normal), 2 (heightened), and 3 (exceptional) — trigger progressively more restrictive measures. Port state control inspectors verify that the ISSC is valid, that a ship security plan is in place and has not been disclosed improperly, and that the crew can demonstrate security awareness. The Continuous Synopsis Record (CSR), required under SOLAS Regulation XI-1/5, must also be maintained on board, providing a verifiable record of the ship's ownership, management, and flag history. Vessels calling at US ports face additional requirements under the US Maritime Transportation Security Act.