ISPS 6. Ship Security Plan HZS ISPS 2006-2007

SSP Definition & Purpose of the SSP Contents of the SSP Confidentiality issues Implementation of the SSP Maintenance and modification of the SSP HZS ISPS 2006-2007

I. Definition & Purpose of the SSP Each ship shall carry on board a Ship Security Plan approved by the (flag) Administration (A/9.1) or by a Recognized Security Organization approved by the flag administration (A/9.2.1) SSP : “ a plan developed to ensure the application of measures on board the ship designed to protect persons on board, cargo, cargo transport units, ship’s stores or the ship from the risks of a security incident ” (A/2.2.1.4) READ : - “Each Ship …” - The ISPS Code defines the SSP as a ….READ…” a plan developped to …” In short : the plan contains security measures who should PREVENT THE RISKS of a security Incident and PREVENT ILLEGAL ACTS against the ship, the crew and/or the passengers “SSP is a Ship Specific Plan” That’s an important remark : the SSP is a ‘ship specific plan’ which means that the plan is valid for one particular ship and not for another one. “The SSP addresses…” that means that the plan must contain procedures to follow in case of a security threat or a security incident, and this at all security Levels. The Ship Security Plan is a Ship Specific Plan (B/9.1) The SSP addresses the security measures that should be taken at each security level HZS ISPS 2006-2007

The Ship Security Plan : Is generally prepared / submitted by the CSO (B/9.1) May be prepared / reviewed / approved / amended by a RSO on behalf of a flag Administration (A/9.2) … But the RSO undertaking the approval / review / amendments of the SSP shall not be involved in the SSA, the initial SSP or the preparation of the amendments under review (A/9.2.1) The Plan shall be written in the language or languages of the ship. If the language or languages used in not English, French or Spanish, a translation into one of these languages shall be included (A/9.4) No comment – Read slide Submission of Ship Plan or amendments, for approval, shall be accompanied by the Ship Security Assessment on the basis of which the plan, or amendments, have been developed (A/9.3) HZS ISPS 2006-2007

I. Definition & Purpose of the SSP How to obtain the ISSC…. No comment – read slide SSP Shall be developed taking into account the guidance given in part B of the Code (A/9.4) HZS ISPS 2006-2007

I. Definition & Purpose of the SSP Objective of the SSP: The SSP should describe in a clear and concise form HOW the security measures, taken by the Company, will be carried out to protect the ship and the crew (and pax) regardless of where the ship is located. No comment – Read slide HZS ISPS 2006-2007

I. Definition & Purpose of the SSP PREVENTION of illegal acts against ship / crew / pax The Ship Security Plan addresses the security measures that should be taken at each security level and specifically the security measures covering : (B/9.8) ACCESS TO THE SHIP IDENTIFICATION OF RESTRICTED AREAS HANDLING OF CARGO Read slide and at the end of the slide REPEAT : “ The security measures that should be taken at each security level Example : the SSP establish security measures covering all means of access to the ship identified in the ship security assessment and what to do at level 1, level 2 and level 3. A guidance is given in the part B of the Code. HANDLING OF UNACCOMPANIED BAGGAGE MONITORING THE SECURITY OF THE SHIP DELIVERY OF SHIP’S STORES HZS ISPS 2006-2007

SSP Definition & Purpose of the SSP Contents of the SSP Confidentiality issues Implementation of the SSP Maintenance and modification of the SSP HZS ISPS 2006-2007

II. Contents of the SSP The content of the SSP is clearly established in the ISPS Code in : Part A, section 9.4 with additional information in Part B, section 9 SSP shall address, at least, all the points mentioned in the Code Imperative that the SSO and the CSO fully understand the nature of the Ship Security Plan The OOW should be familiar with the contents of the plan (in a generic fashion) READ SLIDE Then add flwg comment : It is imperative that all of you - hopefully future SSO or CSO – that all of you fully understand the NATURE of the SSP. The requirements for the SSO and CSO are quite different : - The Company Security Officer must ensure that a plan is developed, that it is submitted for approval, and thereafter that it is implemented and maintained. - The Ship Security Officer will need to maintain and supervise the implementation of the plan. HZS ISPS 2006-2007

II. Contents of the SSP According to PART A, the plan shall address, at least, the following measures, identifications and procedures (A/9.4) : Prevent weapons, dangerous substances and devices intended for use against persons, ships or ports from being taken o/b ; Identification of the restricted areas and measures for the prevention of unauthorized access to them ; Prevention of unauthorised access to the ship; Responding to security threats or breaches of security ; Responding to security instructions given by Contracting Governments at security level 3; Evacuation in case of security threats or breaches of security ; HZS ISPS 2006-2007

II. Contents of the SSP Duties of shipboard personnel assigned security responsibilities Auditing the security activities; Training, drills and exercises; Interfacing with port facility security activities; Periodic review of the plan and for updating; Reporting security incidents; Identification of the Ship Security Officer; Identification of the Company Security Officer, including 24-hour contact details; Inspection, testing, calibration, and maintenance of security equipment; HZS ISPS 2006-2007

II. Contents of the SSP Frequency for testing or calibration of any security equipment provided on board; Identification of the locations where the ship security alert system activation points are provided;* and Procedures, instructions and guidance on the use of the ship security alert system, including the testing, activation, deactivation and resetting and to limit false alerts.* * Administrations may allow this information to be kept elsewhere on board in a document known to the master, the SSO and other senior shipboard personnel as may be decided by the Company. HZS ISPS 2006-2007

II. Contents of the SSP ACCORDING TO PART B, section 9, all SSPs should: Detail the organizational structure of security for the ship; Detail the ship’s relationships with the Company, port facilities, other ships and relevant authorities with security responsibilities; Detail the communication systems to allow effective continuous communication within the ship and between the ship and others, including port facilities; Detail the basic security measures for security level 1, both operational and physical, that will always be in place; HZS ISPS 2006-2007

Once again : The OOW should be familiar with the contents of the plan II. Contents of the SSP Detail the additional security measures that will allow the ship to progress without delay to security level 2 and, when necessary, to security level 3; Provide for regular review, or audit, of the SSP and for its amendment in response to experience or changing circumstances; and Detail reporting procedures to the appropriate Contracting Government’s contact points. Once again : The OOW should be familiar with the contents of the plan (in a generic fashion) HZS ISPS 2006-2007

SSP Definition & Purpose of the SSP Contents of the SSP Confidentiality issues Implementation of the SSP Maintenance and modification of the SSP HZS ISPS 2006-2007

III. Confidentiality Issues The SSP (like Security Records) is a CONFIDENTIAL document and shall be protected from unauthorized access or disclosure (A/9.7) Basically, the SSP is not subject to inspection by Port State Control Authorities (A/9.8) NEVERTHELESS, certain parts of the SSP may be shown to PSC Authorities in certain circumstances (A/9.8.1) Certain parts are ALWAYS confidential unless authorized by the Contracting Government concerned. These parts are : section 9.4, subsections .2, .4, .5, .7, .15, .17 and .18 (A/9.8.1) The Ship Security Plan and the Records are CONFIDENTIAL. These documents must be protected from unauthorized access or disclosure. No part of these documents may be used or reproduced or disclosed to a third party in any manner whatsoever without written permission. The « Security Records » will be explained during session 10 « Security Administration » The Ship Security Plans are not subject to inspection by officers of a Contracting Government Every ship is subject to control when in a port of another Contracting Government. Such control shall be limited to the verification of the International Ship Security Certificate (or the Interim certificate) unless there are »clear grounds » for believing that the ship is not in compliance with the requirements of the Code (Amendments to SOLAS chapter XI and part A of the Code). Exemples of “clear grounds” : - evidence that the certificate is not valid or it has expired; - Evidence or information that serious deficiencies exist in the security equipment, in the documentation or arrangements required by the Code; - Receipt of a report or a complain; - Evidence that the Master or ship’s personnel is not familiar with essential shipboard security procedures - Evidence that the security procedures or drills are not carried out; - Evidence that there is a communication problem If the officers of the Port State Control have clear grounds to believe that the ship is not in compliance with SOLAS Chapter XI or Part A of the Code, a limited access to the SSP is allowed in the following conditions : - when the only means to verify or rectify the non-compliance is to review the relevant sections of the plan; - with the consent of the Contracting Government of the ship or the consent of the master of the ship Certain sections cannot be subject to inspection unless otherwise agreed by the Contracting Governments concerned HZS ISPS 2006-2007

III. Confidentiality Issues Certain sections cannot be subject to inspection unless otherwise agreed by the Contracting Government concerned : 2 Identification of the restricted areas and measures for the prevention of unauthorized access to them ; 4 Procedures for responding to security threats or breaches of security, including provisions for maintaining critical operations of the ship or ship/port interface ; 5 Procedures for responding to any security instructions Contracting Governments may give at security level 3 ; 7 Duties if shipboard personnel assigned security responsibilities and of other shipboard personnel on security aspects ; 15 Procedures to ensure the inspection, testing, calibration, and maintenance of any security equipment provided on board ; 17 Identification of the locations where the ship security alert system activation points are provided ;* and 18 Procedures, instructions and guidance on the use of the ship security alert system, including the testing, activation, deactivation and resetting and to limit false alerts.* HZS ISPS 2006-2007

III. Confidentiality Issues Example of a SSP procedure over the “Protection from unauthorized access or disclosure (from a Japanese Model Plan) : HZS ISPS 2006-2007

III. Confidentiality Issues Electronic format The plan may be kept in an electronic format but shall be protected by procedures aimed at preventing its unauthorized deletion, destruction or amendment (A/9.6) HZS ISPS 2006-2007

SSP Definition & Purpose of the SSP Contents of the SSP Confidentiality issues Implementation of the SSP Maintenance and modification of the SSP HZS ISPS 2006-2007

IV. Implementation of the SSP Implementation : mise en oeuvre / het in werking zetten In order to implement the SSP on board : SSO shall have knowledge and have received a training Shipboard personnel shall understand their responsibilities for ship security and shall have sufficient knowledge and ability to perform their assigned duties Drills shall be carried out at appropriate intervals (will be treated at session 9). HZS ISPS 2006-2007

IV. Implementation of the SSP The CSO and SSO should always have regard to the effect that security measures may have on shipboard personnel who may remain on board the ships for long periods. When developing security measures, particular consideration should be given to the convenience, comfort and personal privacy of the ship’s personnel and their ability to maintain their effectiveness over long periods (B/8.11). e.g. Access to the ship, level 2 require higher vigilance and tighter control which may include assigning additional personnel to patrol deck areas, increasing frequency of searches, personal effects, and vehicles being embarked or loaded onto the ship, escorting visitors on the ship, etc, etc. HZS ISPS 2006-2007

SSP Definition & Purpose of the SSP Contents of the SSP Confidentiality issues Implementation of the SSP Maintenance and modification of the SSP HZS ISPS 2006-2007

V. Maintenance and modification of the SSP Mechanisms for insuring the continuing effectiveness and updating of the SSP All SSPs should provide for regular review, or audit, of the SSP and for its amendments in response to experience or changing circumstances (B/9.2.6) CSOs and SSOs should develop procedures to : - assess the continuing effectiveness of the SSP; and - prepare amendments of the plan (B/9.5.1,2) SSP should established the procedures needed to assess the continuing effectiveness of security procedures and any security and surveillance equipment and systems, including procedures for identifying and responding to equipment or systems failure or malfunction (B/9/7/3) HZS ISPS 2006-2007

V. Maintenance and modification of the SSP The procedures for insuring the continuing effectiveness and updating of the SSP includes : Security inspection : SSO to ensure that appropriate security measures are maintained (A/12.2.1). For ships fitted with security or monitoring equipment, SSO to inspect them once every month and record the results. Inspection methods according to maker’s instructions ; Periodic Review : Master and SSO to review the SSP at least once a year. Normally done when SMS is reviewed. Results to report to CSO ; Internal audit : CSO is responsible to conduct an internal audit at least once a year. Normally done when SMS audit is conducted. Personnel to conduct internal audit should not be the crew of the ship. Copy of record of internal audit should be placed on board the ship. HZS ISPS 2006-2007

V. Maintenance and modification of the SSP Procedures for implementing any corrective actions Minor revisions : SSO is responsible for issuing (minor) revisions to the SSP, after the revisions have been approved by the Master and the CSO. Significant changes : the submission of amendments to an approved SSP shall be accompanied by the security assessment on the basis of which the amendments have been developed (A/9.3). Significant changes to the approved SSP or to any security equipment shall not be implemented UNLESS approved by the flag Administration or a Recognized Security Organization approved by the flag Administration (A/9/5). The approving RSO shall not be involved in the preparation of the amendments under review (A/9.2.1) HZS ISPS 2006-2007

HZS ISPS 2006-2007