Where this sits
Governing: SOLAS XI-2 (SSAS); ISPS Code Part A section 9 (equipment in the SSP); STCW Table A-VI/6-2; UK Code of Practice: Cyber Security for Ships. Builds on: L2.2.
What yachts carry
| Equipment | Use | Your part |
|---|---|---|
| CCTV | Watching access points, decks, waterline and dock | Monitor as assigned; know the camera views; report faults |
| Access control | Keycards, codes and locks on restricted areas | Keep codes private; report doors left open |
| Security lighting | Deck and waterline floodlights | Switch on as the plan and level require; report failures |
| Intruder alarms and sensors | Doors, hatches, garage, swim platform | Know what each alarm means and who responds |
| Radios | Communication between watch, patrols and bridge | Carry charged; use call signs; check in on schedule |
| Detection equipment | Some yachts carry handheld metal detectors or search mirrors | Use as trained; record searches |
| Waterside detection | Radar, thermal cameras, sonar on some large yachts | Monitor as assigned by the SSO |
| SSAS | Covert alert to shore | Know it exists; never test or discuss without the SSO |
Proper use
Properly use security equipment and systems is a PDSD competence. It means:
- knowing how each item works, and its limits (camera blind spots, detector range);
- checking it at the start of watch: lights on, cameras recording, radio charged;
- using it as the plan says, not as convenient;
- recognising faults and reporting them at once;
- covering the gap (a patrol, portable light or extra watch) until it is fixed.
The SSP sets out inspection, testing, calibration and maintenance of security equipment, and the SSO keeps records of it.
WARNING: Nobody watching CCTV on a screen that nobody looks at is a recording, not a watch. If you are assigned to monitor, monitor. If you have to leave, hand over.
The SSAS
Under SOLAS XI-2, ships must have a ship security alert system. It is:
- covert: it makes no sound or light on board;
- a ship-to-shore alert showing that security is under threat or compromised;
- for UK ships, programmed to alert a nominated 24-hour contact and the UK Joint Rescue Coordination Centre.
Activation points are known only to those who need to know. Crew with designated duties may be told where they are. Never discuss their location, and never test the system without the SSO: a false alert starts a real response.
Security systems and cyber
Most yacht security systems are networked: IP cameras, digital recorders, door controllers. That makes them part of the cyber attack surface. Under the UK Code of Practice: Cyber Security for Ships, the ship's cyber assessment should cover them.
- Default passwords must be changed.
- Remote access by suppliers is controlled.
- Security system networks are separated from guest Wi-Fi.
- Crew do not plug personal devices into security recorders or monitors.
Communications
Radios are security equipment too. Good practice:
- agreed call signs and a quiet working channel;
- check-ins on a schedule for patrols; a missed check-in is investigated;
- a code word for a security emergency, known to crew and not to outsiders;
- spare batteries at the gangway post.
TIP: Start-of-watch check Lights, cameras, radio, log, passes. Thirty seconds at the start of a watch finds most failures before they matter.