ISPSCode

The International Ship and Port Facility Security Code (ISPS Code) is an international framework established by the International Maritime Organization (IMO) to enhance the security of ships and port facilities against acts of terrorism and other illicit activities. It was adopted in December 2002 as part of amendments to the Safety of Life at Sea (SOLAS) Convention and entered into force on July 1, 2004. The Code sets mandatory requirements for the assessment, designation, and coordination of security measures for vessels, port facilities, and related operations.

The Code applies to ships engaged on international voyages and to port facilities serving such ships. It requires each ship to have a Ship Security Plan (SSP) approved by the flag state, and to designate a Ship Security Officer (SSO) along with a Company Security Officer (CSO) responsible for ensuring the SSP’s implementation. Port facilities must have a Port Facility Security Plan (PFSP) and a Port Facility Security Officer (PFSO). Security measures are based on a formal security assessment and implemented according to three security levels: Level 1 normal, Level 2 heightened, and Level 3 extraordinary.

Verification and certification are central to the ISPS Code. Ships on international voyages must hold an International Ship Security Certificate (ISSC) after proper verification by the flag state or its recognized organization. Port facilities are expected to obtain an International Port Facility Security Certificate (PFSC). The Code also requires regular security drills and exercises, training for personnel, and cooperation among ships, port facilities, and authorities, along with documentation and reporting to support security management.

The ISPS Code is complemented by guidelines in its Part B and remains an integral element of maritime security governance, influencing how shipping companies, port authorities, and regulators approach risk, response, and resilience.