Entry & progression
Governing: SOLAS Chapter XI-2; ISPS Code Parts A and B; REG Yacht Code Part A, Chapter 31; Regulation (EC) 725/2004 as retained in UK law.
The ISPS Code was adopted in December 2002 in response to the attacks of September 2001 and came into force with SOLAS Chapter XI-2 in July 2004. It treats security as risk management: assess the ship, write a plan, and scale the measures to a declared threat level.
Structure
| Instrument | Status | Content |
|---|---|---|
| SOLAS XI-2 | Mandatory convention chapter | Application, security levels, SSAS, master's discretion, control and compliance |
| ISPS Code Part A | Mandatory | Duties of governments, companies, ships and port facilities; SSA, SSP, CSO, SSO, records, training, certification |
| ISPS Code Part B | Guidance | How to meet Part A: detailed measures, drill frequencies, plan contents |
In the UK, Regulation (EC) 725/2004 (retained after EU exit) gives the special measures and Part A the force of law, and requires listed Part B paragraphs to be complied with as if mandatory. They include B/13.6 and 13.7, the drill and exercise frequencies you will meet in L3.2.
Which ships
SOLAS XI-2 and the ISPS Code apply to ships engaged on international voyages:
- passenger ships, including high-speed passenger craft;
- cargo ships, including high-speed craft, of 500 GT and upwards;
- mobile offshore drilling units.
The UK has extended the Code domestically to Class A passenger ships, Class B passenger ships certified for more than 250 passengers, and tankers.
Yachts
A commercial yacht carrying 12 or fewer passengers is a cargo ship for SOLAS purposes. The REG Yacht Code Part A (commercial yachts of 24 m and over, no cargo, no more than 12 passengers) goes further in its wording: Chapter 31.1(1), "All vessels of 500GT and above shall comply with the IMO's International Ship and Port Facility Security Code." There is no international-voyage qualifier in that sentence.
| Yacht | ISPS position |
|---|---|
| Commercial, 500 GT and over, REG Code | Must comply: SSA, approved SSP, SSO, CSO, ISSC |
| Commercial, under 500 GT | Not required; many operators adopt a proportionate plan |
| Private, not in trade, any size | Outside SOLAS XI-2; IMO MSC.1/Circ.1283 gives voluntary guidance |
| REG Part B passenger yacht (13-36 passengers) | Passenger ship on international voyages: in scope |
Many large private yachts run a voluntary SSP and appoint an SSO because owners, insurers and charter guests expect it, and because they berth among ISPS ships and use ISPS port facilities. Job advertisements for chief officers routinely ask for an SSO certificate regardless of the yacht's status.
Who enforces it in the UK
The Department for Transport sets maritime security policy. The MCA is responsible to DfT for implementing the ISPS Code on UK ships, security aspects of port state control, receiving ship security alerts, and approving SSO and CSO training providers. Plans for UK ships go to the MCA's maritime security team, or to a Recognised Security Organisation (RSO) where ISSC certification is delegated.
The Continuous Synopsis Record and IMO number
SOLAS XI-1 sits alongside XI-2. The ship identification number must be permanently marked, and the Continuous Synopsis Record carries the ship's history of flag, owner and managers. UK large commercial yachts may display the number on a horizontal surface visible from the air, as passenger ships do.
CAUTION — Private is not the same as exempt from scrutiny A private yacht outside the Code still meets port facility security rules ashore, flag state guidance and the owner's insurers. The SSO skills in this course apply either way.
Cross-refer to Security Awareness and Designated Security Duties for crew-level training.