Slide 1 Maritime Security – What to do? March Contracting Governments to SOLAS 2. Shipping Companies to provide Ship Security 3. RSO verification process 4. Port Facility Security 5. Security Training Approval program

Slide 2 Amendments to the SOLAS Convention (1) Adopted 12 Dec Chapter V New AIS implementation date 1. July 2004 (V/19) (Apply now for all ships above 300 GT in international trade) (Long range not yet concluded) Chapter XI The chapter is divided into two. The new titles are: Chapter XI-1 : Special Measures to Enhance Maritime Safety; and Chapter XI-2 : Special Measures to Enhance Maritime Security (The ISPS Code as Annex)

Slide 3 Amendments to the SOLAS Convention (2) Chapter XI-1 Ship Identification Number (hull markings) (XI-1/3) (SIN) Continious Synopsis Record (CSR) (XI-1/5) Chapter XI-2 Whole new chapter – 13 regulations (XI-2) Incl. Ship Security Alert System (SSAS) International Ship and Port Facility Security Code Part A (mandatory) Part B (recommendatory – guidance)

Slide 4 Governmental Responsibilities Ships Competent Security Organisation or RSO Port Facilities Cargo Security (Custom?) Seafarers ID (Maritime schools?)

Slide 5 Contracting Governments (1) Establish security organisation : Communicate details of contact point of national authority for ship security (XI-2/13.1.1) Identify the Designated Authority pertaining to Port Facilities (XI-2/1.1.11) Set security levels and ensure that port facilities and ships are informed hereof (XI-2/3.2) Decide to impose control measures (XI-2/ )

Slide 6 Contracting Governments (2) Establish operational procedures : Inform the Ship Security Administration in writing of the decision to impose control measures (XI-2/9.3.1) Notify other states of activation of a security alert (XI-2/6.7) Conclude bilateral of multilateral agreements on alternative security arrangements covering short international voyages (XI-2/11.1)

Slide 7 Ship Security Administrations Establish operational procedures : Inform the security level for ships of own flag (XI-2/3.1) Inform Contracting Governments when establishing levels 2 and 3 on own ships in the ports of other Contracting Governments (ISPS A/7.8) Issue Continuous Synopsis Record (CSR) to ships (XI-1/5.3) Specify minimum period for keeping Declarations of Security (DOS) by ships (ISPS A/5.7) Recognize, authorize and audit RSO (XI-2/1.16)

Slide 8 Recognised Security Organisation (RSO) Review and approve Ship Security Plan (SSP) (ISPS A/9.1) Verify implementation of Ship Security Plan onboard ships Issue International Ship Security Certificate (ISPS A/19.2) Intermediate and renewal verification surveys Specify minimum period for records (ISPS A/10.1)

Slide 9 Designated Authority for Port Facilities (1) Establish organisation of Ports with Port Facilities: Ensure that Port Facility Security Assessments are carried out (XI-2/10.2.1) Ensure that Port Facility Security Plans are developed, implemented and reviewed (XI-2/10.2.2) Decide the extent of application to port facilities which only occasionally serve ships arriving or departing on an international voyage (XI-2/2) Communicate list showing approved Port Facility Security Plans (XI-2/13.3)

Slide 10 Designated Authority for Port Facilities (2) Establish procedures to operate Port Facility security : Designate and communicate measures required in a PFSP (XI-2/10.3) Authorize control and inspection officers (XI-2/ ) Specify minimum period for keeping Declarations of Security (DOS) by the Port Facility (ISPS A/5.6)

Slide 11 Police or Military Security (1) Set security levels 24 hours : Set security levels for Port Facilities, and Ships using Port Facilities in the territory/territorial waters. (XI-2/3) Set security levels for Ships of own flag in International trade. (XI-2/3.1) Possibly require information prior to a ship`s entry into port with the aim of avoiding the need to impose control measures. (XI-2/9.2.1) Decide to impose other control measures than Port State Control. (XI-2/9.1.2)

Slide 12 Act on threats 24 hours : Ensure information (about security level) to ships operating in – or having communicated an intention to enter domestic territorial sea (XI-2/7.1) Provide/assist police authority for the purpose of control of ships intending to enter its port (XI-2/9.2) Police or Military Security (2)

Slide 13 Maritime Security – What to do? March Contracting Government to SOLAS 2. Shipping Companies to provide Ship Security 3. RSO verification process 4. Port Facility Security 5. Security Training Approval Program

Slide 14 Ship Companies (No DOC required) Designate a Company Security Officer (CSO) (ISPS A/11.1) Designate a Ship Security Officer (SSO) on each ship (ISPS A/12.1) Ensure and emphasize the master`s overriding authority (ISPS A/6.1) = Safety above Security Ensure the necessary support to the Officers and Masters when fulfilling their duties (ISPS A/6.2) Training + ERC Ensure documented information : (XI-2/5) in CSR - Who appoints the crew and other members on board? - Who is responsible for deciding the employment of the ship? - Who are the parties to any charter parties?

Slide 15 Company Security Officer (CSO) Ensure Ship Security Assessment, SSA, on each ship (ISPS A/8.2 and B/8.1) (Sisterships in similar trade may have the same threats and may use the same SSA) Document, verify and retain the Ship Security Assessments (ISPS A/8.5) (Change of trade and threat, review SSA) (CSO responsibility even when made by security consultants) Establish Ship Security Plans, SSP, on basis of the Assessments for each ship (ISPS B/9.1)

Slide 16 IMOS REQUIREMENTS TO THE SSA PROCESS 1. Does a particular motive exist to attack my ship? 3. What existing security measures, procedures and operations are in place? 5. What are the likelihood and consequences? 4. How can anybody attack my ship? Security Officer 2. Which key shipboard operations, systems, areas and personnel to protect? …AND THE COMPANY SECURITY OFFICER SHALL ENSURE THAT THE SSA PROVIDES ANSWERS TO THE FOLLOWING QUESTIONS:

Slide 17 Ship Security Assessment The ship security assessment is an essential and integral part of the process of developing and updating the ship security plan : (ISPS A/8.1) 1.On-scene security survey (ISPS A/8.4) (to increase awareness and realize motions) 2. Identification and evaluation of key ship-board operations that it is important to protect (ISPS A/8.4.2) 3. Identification of existing security measures, procedures and operations (ISPS A/8.4.1) 4. Identification of possible threats to the ship-board operations and the likelihood of their occurrence, in order to establish and prioritise security measures (ISPS A/8.4.3) 5. Identification of weaknesses, including human factors in the infrastructure, policies and procedures (ISPS A/8.4.4)

Slide 18 Ship Security Assessment Based on information form ports to call Draw on expert assistance

Slide 19 Ship Security Plan (1) - Identification Identification of the restricted areas (ISPS A/9.4.2) Duties of shipboard personnel (ISPS A/9.4.7) Identification of the ship security officer (ISPS A/9.4.13) Identification of the company security officer, including 24-hour contact details (ISPS A/9.4.14) Identification of security alert activation points (ISPS A/9.4.17)

Slide 20 Ship Security Plan (2) - Procedures Procedures for interfacing with port security activities (ISPS A/9.4.10) Procedures for responding to security threats or breaches of security (ISPS A/9.4.3) Procedures for reporting security incidents (ISPS A/9.4.13) Procedures and instructions pertaining to the security alert system fitted (ISPS A/9.4.18) Procedures for evacuation (ISPS A/9.4.6) Procedures for auditing, training and drills (ISPS A/ ) Procedures for the periodic review of the plan and for updating (ISPS A/9.4.11)

Slide 21 Ship Security Plan (3) - Measures Based on a Ship Security Assessment (ISPS A/9.3) Measures to respond to Security threat levels 1, 2 and 3 Unauthorized access to the ship Measures to prevent unauthorized goods from coming on board (ISPS A/9.4.1) PLAN SHOULD ENABLE THE SHIP TO OPERATE UNDER THREAT LEVEL 3 !

Slide 22 DNV apply this text for verification of Ship Security Plans. The ISPS Code part B - Guidance Responsibility of Contracting Governments Setting the security level Declaration of Security Information and communication Obligations of The Company Verification and Certification of Ships Ship Security Ship Security Assessment Ship Security Plan Company Security Officer Ship Security Officer Training and Drills

Slide 23 Ship Security Plan Records open for Port State Control – Measures kept CONFIDENTIAL and locked

Slide 24 Ships (1) All passenger ships, including High Speed Passenger Craft and Cargo ships of 500 GRT and upwards engaged on international voyages, must have the following in place by July 2004 : A designated ship security officer (ISPS A/12.1) Ship security assessment (ISPS A/8) (Need not to be onboard) Approved ship security plan (ISPS A/9) Capability to conform to all threat levels (ISPS A/7.1) Ship security alert at first radio survey after 1. July 2004 (XI-2/6)

Slide 25 Ships (2) Training of the ship security officer and ship`s crew (ISPS A/ ) Records of activities regarding security (ISPS-A/10) Forms for Declaration of Security, DOS (ISPS A/5.2) Not part of ISSC, but should be addressed: Continuous Synopsis Record, CSR (XI-1/5) Automatic Identification System, AIS Ship Identification Number, SIN (IMO number)

Slide 26 International Ship and Port Facility Security Code DECLARATION OF SECURITY FOR PORT CLEARANCE SHIPS Company Security Officer Ship Security Assessment Ship Security Plan Ship Security Officer PORT FACILITIES Port Facility Security Assessment Port Facility Security Plan Port Facility Security Officer ISSC Report Secure Port Facilities DECLARATION OF SECURITY FOR PORT CLEARANCE

Slide 27 Cycle of Compliance REMEMBER: Review SSA when changes of trade or cargo

Slide 28 Maritime Security – What to do? March Contracting Government to SOLAS 2. Shipping Companies to provide Ship Security 3. RSO verification process 4. Port Facility Security 5. Security Training Approval Program

Slide 29 DNV Certification Process Request from Company Information about ship, class and flag Identification of sisterships to simplify Security Contact person at Company Time schedule requested based on time needed for training and implementation and port for verification before July 2004 Company DNV Request form

Slide 30 DNV Certification Process Quotation provided Planning provided Ship owner to confirm Company DNV Order confirmation DNV do all Flag, but DNV classed vessels first. Can do non-DNV vessels for owners with majority of DNV classed vessels.

Slide 31 DNV Certification Process Essential part of the process Shall accompany the SSP Use an available guideline Company DNV Ship Security Assessment Ship Security Plan SSA will not be approved, but reviewed as reflected in the SSP for Approval

Slide 32 DNV Certification Process Subsequent to the SSA After or during the SSP development Why strongly recommended: No non-conformities at Approval of SSP Observations useful at initial stage. Feedback reported to the development of SSP Company DNV Preliminary SSP Review (Optional)

Slide 33 DNV Certification Process Based on the SSA Based on SOLAS and the ISPS Code Address all requirements in Part B Use Checklist for Security Plan in DNV Guideline Company DNV Ship Security Plan Completion

Slide 34 DNV Certification Process The SSA must be available The SSA will be evaluated, but not approved No non-conformities in approved SSP No copies retained by DNV, but Approval Report is maintained Company DNV SSP Approval

Slide 35 DNV Certification Process No specific implementation period Will vary with ship type Allow time for technical improvement and installation of equipment Allow time for training Allow time for record entries Onboard Training, Drills and Audits Company DNV SSP Implementation

Slide 36 DNV Certification Process Completed implementation of the SSP Equipment survey Records - Training and Drill - Internal Audit Verification of SOLAS and ISPS Code in Port before July 2004 Company DNV Shipboard Verification

Slide 37 DNV Certification Process No non-conformities Issued by Security Surveyor Intermediate between 2nd and 3rd Renewal verification after 5 years Company DNV Issue of ISSC

Slide 38 Communication procedures Confidential and restricted distribution No mail, no open files Hand carry by security persons Approval at company, no extra copies Agree on procedures for amendments

Slide 39 Recommendations and Interpretations Ship Security Assessment Set of conditions for sisterships -similar ship arrangement -similar trading area, ports to call and crew onboard -similar cargo and risk The SSA and SSP may not be valid if conditions change significantly

Slide 40 Recommendations and Interpretations Ship Security Plan All relevant ship data –General Arrangement –Restricted areas –Access points –Shell doors Specific for each security level Procedures for keeping Records Master for Declaration of Security, DOS

Slide 41 Recommendations and Interpretations Shipboard Verification Technical installations in place Internal Audit carried out Security Drills carried out Drill during verification if agreed

Slide 42 Recommendations and Interpretations Security Equipment Maintained, calibrated, inspected and tested Recorded service and maintenance Procedural redundancy established

Slide 43 Recommendations and Interpretations Security Alert System If not installed – how and when SSP resubmitted to ship when in place Verified during Radio Survey

Slide 44 Recommendations and Interpretations Communication of information Available through IMO 1 July 2004 –Administration contact points –Port contact information Procedures for how to obtain onboard

Slide 45 Miscellaneous Not included in ISSC certification Ship ID number (IMO no) Continous Synopsis Record (but kept updated onboard for Port clearance) Automatic Identification System (AIS)

Slide 46 DNV Strategy RSO, no consultancy work Full confidence from Port States by qualified and trusted Security Surveyors Desentralized approval of SSP Serve our clients first Aiming at ships

Slide 47 Maritime Security – What to do March Contracting Government to SOLAS 2. Shipping Companies to provide Ship Security 3. RSO verification process 4. Port Facility Security 5. Security Training Approval Program

Slide 48 Port Facilities Designation of a Port Facility Security Officer (ISPS A/17) Port Facility Security Assessment (ISPS A/15) Port Facility Security Plans (ISPS A/16) Measures required for various security levels (XI-2/10.3) Receive info from ships intending to enter port (XI-2/9.2.1) Act upon the security levels set by the Contracting Government (ISPS A/14.1) Ensure a minimum of interference or delay to passengers, ship, goods and services (ISPS A/14.1)

Slide 49 Port Facility Security Assessment - PFSA Identification and evaluation of important assets and infrastructure that it is important to protect (ISPS A/15.5.1) Identification of possible threats to the assets and infrastructure and the likelihood of their occurrence, in order to establish and priorities security measures (ISPS A/15.5.2) Identification, selection of counter-measures and their effectiveness in reducing vulnerability (ISPS A/15.5.3) Identification of weaknesses, including human factors in the infrastructure, policies and procedures (ISPS A/15.5.4) Be protected from unauthorized disclosure (ISPS A/15.7)

Slide 50 Port Facility Assets and Infrastructure (ISPS A/ and B/15.7) Cargo facilities, terminals, storage areas, cargo handling equipment Accesses, entrances, approaches, anchorages, manoeuvring and berthing spaces Bridges, railways, roads, power plants, cargo transfer piping and water supplies Port vessel traffic management systems and aids to navigation, including pilot boats, tugs lighters etc. Security and surveillance equipment, radio and telecommunication, computer systems and networks

Slide 51 Port Facility Security Plan – Identification and Procedures Identification of the port facility security officer including 24-hour contact details (ISPS A/ ) Duties of port facility personnel (ISPS A/16.3.6) Procedures for interfacing with ship security activities (ISPS A/16.3.7) Procedures for responding to a security alert at the port facility (ISPS A/ ) Procedures for responding to security threats or breaches of security and for maintaining critical operations (ISPS A/16.3.3) Procedures for reporting security incidents (ISPS A/16.3.9) Procedures for facilitating shore leave and personnel change (seafarers welfare) (ISPS A/ ) PFSP (1)

Slide 52 Port Facility Security Plan - Measures Measures based on PFSA for three security levels (ISPS A/16.1) Measures to prevent unauthorized goods from being introduced into the area (ISPS A/16.3.1) Measures to prevent unauthorized access to the PF, restricted areas and ships moored at the PF (ISPS A/16.3.2) Measures to ensure effective security of cargo and the cargo handling equipment at the PF (ISPS A/ ) Measures to ensure the security of the information contained in the plan (ISPS A/ ) PFSP (2)

Slide 53 Port Facility Measures for Level 1,2 and 3 Fencing, barriers, perimeter guard-patrols, waterside guard-patrols Lighting, smart monitoring (cameras IR/low light level TV, automatic intrusion and detection devices) Parking of vehicles, load and unload zones Dangerous goods and hazardous substances areas Control points (ID check, item and vehicle check) Routine checking of cargo, seals, delivery notes Screening of unaccompanied baggage Scanning/detection equipment (X-ray etc. and/or dogs) Escort of deliveries within the Port facility

Slide 54 Maritime Security – What to do? March Contracting Governments to SOLAS 2. Shipping Companies to provide Ship Security 3. RSO verification process 4. Port Facility Security 5. Security Training Approval Program

Slide 55 DNV SeaSkill A global system for Maritime Competence based on Quality, Structure and Measurable Results Our Promise to our Customers is Making People Fit for Purpose

Slide 56 Training of Personnel Items A/13 and B/13 of the ISPS Code require training to be provided on ship security for : - Company Security Officers - Ship Security Officers - Shipboard personnel Competence requirements and a model course are under development in IMO, but not expected to be finalized before September The requirements are not included in the STCW Convention.

Slide 57 Cycle of continuous improvement Train Report Plan Audit Review

Slide 58 Training – DNV SeaSkill The London-based security company Maritime Underwater Security Consultants (MUSC) and others provides training programmes such as : - Company Senior Managers Training - Company Security Officers Training - Ship Security Officers Training - Shipboard Personnel Security Awareness Training Some of the basic training is provided by Computer-based Training (CBT) DNV SeaSkill will certify the training programmes to make sure they meet the requirements of the ISPC Code and the draft Model Course Outline developed at STW 34 in February 2003

Slide 59 Certification of Learning Programmes – DNV SeaSkill For additional information on DNV SeaSkill, please contact : Project Manager Security, Sverre J. Dahl DNV SeaSkill Det Norske Veritas 1322 Høvik Telephone : / 9476 / or any of DNVs Maritime Service Centres

Slide 60 Maritime Security – What to do? March Contracting Governments to SOLAS 2. Shipping Companies to provide Ship Security 3. RSO verification process 4. Port Facility Security 5. Security Training Approval Program

Slide 61 DNV SeaSkill A global system for Maritime Competence based on Quality, Structure and Measurable Results Our Promise to our Customers is Making People Fit for Purpose

Slide 62 Training of Personnel Items A/13 and B/13 of the ISPS Code require training to be provided on ship security for: - Company Security Officers - Ship Security Officers - Shipboard personnel Competence requirements and a model course are under development in IMO, but not expected to be finalized before September The requirements are not included in the STCW Convention.

Slide 63 Cycle of continuous improvement Train Report Plan Audit Review

Slide 64 Training – DNV SeaSkill The London-based security company Maritime Underwater Security Consultants (MUSC) and others provide training programmes such as : - Company Senior Managers Training - Company Security Officers Training - Ship Security Officers Training - Shipboard Personnel Security Awareness Training Some of the basic training is provided by Computer-based Training (CBT)

Slide 65 Certification of Learning Programmes – DNV SeaSkill DNV SeaSkill certifies the training in accordance with DNV SeaSkill Standard for Learning Programmes to ensure that the training is: properly designed contain clear objectives for results are carried out by qualified trainers are assessed and improved in line with market demands and experience The certification includes review of documentation, periodical reviews and covers the trainings: purpose and objectives contents, methods and assessments frame conditions and constraints

Slide 66 Certification of Learning Programmes – DNV SeaSkill DNV SeaSkill certifies the training programmes to make sure they meet the requirements of the ISPC Code B/13 and the draft Model Course Outline developed at STW 34 in February 2003 to make sure the candidates acquire the competences needed, such as: 1. Develop (CSO, only) maintain and supervise the implementation of a ship security plan; 2. Assess security risk, threat, and vulnerability; 3. Undertake regular inspections of the ship to ensure appropriate security measures are implemented and maintained; 4. Ensure that security equipment and systems, if any, are properly operated tested and calibrated; (SSO, only) 5. Encourage security awareness and vigilance

Slide 67 Certification of Learning Programmes – DNV SeaSkill For additional information on DNV SeaSkill, please contact : Project Manager Security, Sverre J. Dahl DNV SeaSkill Det Norske Veritas 1322 Høvik Telephone : / 9476 / or any of DNVs Maritime Service Centres