Back to SOLAS
Safety

SOLAS Chapter XI — ISPS Code & Maritime Security

Special measures for maritime safety and security, permanent IMO hull markings, the 3 ISPS security levels, citadel hardening, and covert SSAS telemetry.

15 min read
Intermediate
Safety
Key Principles at a Glance 6 points
  • SOLAS Chapter XI is bifurcated into Chapter XI-1 (Special Measures to Enhance Maritime Safety) and Chapter XI-2 (Special Measures to Enhance Maritime Security), which makes the ISPS Code mandatory.
  • Under Regulation XI-1/3, the IMO Ship Identification Number must be permanently marked on the hull or superstructure (>= 200 mm outside, >= 100 mm inside machinery or steering spaces) and remains unchanged throughout the vessel life.
  • The Continuous Synopsis Record (CSR) serves as an unbroken statutory passport documenting all ownership, flag, class, and safety management history; it must remain permanently on board even upon ship transfer or sale.
  • The ISPS Code defines three statutory Security Levels: Level 1 (Normal baseline at all times), Level 2 (Heightened risk for a period without a specific target), and Level 3 (Exceptional risk for a limited period against a specific target; set only by Governments).
  • Restricted Areas (bridge, engine room, steering flat, emergency generator, bow thruster) require multi-tiered access control, key management, and anti-tamper sealing during elevated security levels.
  • The Ship Security Alert System (SSAS) utilizes covert activation points (bridge and at least one other secure location) to transmit a silent satellite distress message directly to the Flag Authority and CSO without generating any acoustic or visual indication on board.

1. Chapter XI-1: Ship Identification & Continuous Synopsis Record

≥ 200 mm Exterior IMO Marking Height
≥ 100 mm Interior Steel Marking Height
≥ 300 GT Cargo Ship ID Number Mandate
CSR Continuous Synopsis Record Passport

Permanent IMO Ship Identification Marking (Regulation XI-1/3)

To eliminate fraudulent identity switching, phantom ship operations, and maritime piracy collusion, SOLAS Regulation XI-1/3 mandates that all passenger ships of 100 GT and upwards and all cargo ships of 300 GT and upwards must be permanently marked with an official IMO Ship Identification Number.

The seven-digit IMO number (preceded by the letters "IMO") is assigned by Lloyd's Register / S&P Global at the time of keel laying. Unlike radio call signs or vessel names, the IMO number is permanent and follows the physical hull from shipbuilder delivery to the final demolition scrap yard.

SOLAS CH.XI-1: PERMANENT IMO IDENTIFICATION MARKING CAD & CSR DOCUMENT LIFECYCLE REG XI-1/3 & 5 PERMANENT HULL & BULKHEAD MARKINGS SUMMER LOAD LINE IMO 9876543 ≥ 200 mm HEIGHT STERN STERN IMO 9876543 ENGINE BHD ≥ 100 mm MANDATORY MARKING SPECIFICATION: • Exterior: Height ≥ 200 mm, contrasting color, painted or raised steel plate • Interior: Height ≥ 100 mm, cut in, raised, or centre-punched into end bulkhead • Method: Permanent bonding; cannot be scraped off or easily expunged CONTINUOUS SYNOPSIS RECORD (CSR) FILE FLAG STATE ADMINISTRATION PASSPORT • 1. Flag State entitled to fly & Date of registration • 2. Ship Identification Number (IMO Number) • 3. Ship Name, Port of Registry, Call Sign • 4. Registered Owner & Company Unique IMO IDs • 5. Classification Society(ies) overseeing hull/machinery • 6. Auditing Authority issuing DOC, SMC, and ISSC • 7. Bareboat charterer names and registered addresses • 8. Complete chronological sequence of amendments (File 1 to N) STATUTORY PASS-ON RULE (REG XI-1/5.4): When a ship changes flag, is sold to a new owner, or changes manager, the CSR file MUST REMAIN ON BOARD. It is an unbroken legal history. Missing CSR files constitute an immediate Port State detention defect.
Figure 1: SOLAS Chapter XI-1 Permanent Ship Identification Marking & Continuous Synopsis Record Architecture. Left: Exterior marking ($ge 200 ext{ mm}$ amidships above summer load line) and interior machinery space marking ($ge 100 ext{ mm}$ engraved in steel). Right: The statutory Continuous Synopsis Record (CSR) passport that remains permanently on board across all ownership and flag changes.

Continuous Synopsis Record (CSR) Mandatory Information Fields

CSR Field Number Statutory Record Content Verification Document Required on Board
Fields 1 – 3 Flag State, Date of registration under current flag, Ship's unique IMO Number. Certificate of Registry (original held in ship's master safe).
Fields 4 – 5 Ship Name and Port of Registry. Certificate of Registry, Official Radio Station License.
Fields 6 – 8 Registered Owner(s), Registered Address, and Owner IMO Identification Number. Official Bill of Sale / Owner Registration Title.
Fields 9 – 11 Registered Bareboat Charterer, Company managing ship, and Company IMO ID Number. Bareboat Charter Agreement, Document of Compliance (DOC).
Fields 12 – 14 Classification Society, Body issuing DOC/SMC, and Authority issuing ISSC. Class Certificate of Hull/Machinery, SMC Certificate, ISSC Certificate.

2. Chapter XI-2 & ISPS Code: Objectives, Legal Hierarchy & Security Levels

PART A Mandatory Legal Provisions
PART B Non-Mandatory Guidance
LEVEL 1 Normal Baseline Security
LEVEL 3 Exceptional Threat / Specific Target

Legal Hierarchy & The Three Security Levels

SOLAS Chapter XI-2 (13 Regulations) forms the statutory anchor for the International Ship and Port Facility Security (ISPS) Code, which entered into mandatory international force on 1 July 2004.

The ISPS Code establishes an international risk-management framework to deter terrorism, piracy, armed robbery, and hostage taking. Central to the Code is the classification of operational threat into three distinct, standardized Security Levels:

ISPS CODE: THREE STATUTORY SECURITY LEVELS & SHIP-TO-PORT INTERFACE CAD ISPS PART A BERTHED VESSEL ACCESS PERIMETERS PORT FACILITY (QUAY) PFSO JURISDICTION CARGO SHIP HULL ACCESS CONTROL POINT • ID Check & Visitor Log PATROL DECK & WATER LIGHTING DECLARATION OF SECURITY (DoS) TRIGGER: Mandatory when ship and port operate at different security levels, or during STS transfers with non-compliant vessels. THE 3 STATUTORY SECURITY LEVELS SECURITY LEVEL 1 (NORMAL BASELINE) • Minimum appropriate protective security maintained at all times • Over-side lighting; gangway photo ID check; visitor badge log • Key control for restricted areas; periodic roving deck patrols SECURITY LEVEL 2 (HEIGHTENED RISK) • Heightened risk of security incident (no specific target identified) • Random searches of visitors, baggage, and delivery vehicles • 100% container seal verification; no visitors on bridge or engine room • Shore-side waterside boat patrol coordinated with PFSO SECURITY LEVEL 3 (EXCEPTIONAL THREAT) • Probable or imminent security incident against a specific target • Single strictly controlled access point; gangway lifted when inactive • Cargo operations and stores deliveries suspended immediately • Total closure of all restricted areas; full vessel security sweep • SET ONLY BY CONTRACTING GOVERNMENTS (PORT OR FLAG STATE)
Figure 2: Ship-to-Port Interface CAD & The Three ISPS Security Levels. Left: Quayside security perimeters, single gangway control point, waterside patrol zone, and over-side illumination. Right: Escalation hierarchy from Level 1 (Normal baseline) to Level 3 (Imminent threat, stores and cargo suspended, gangway lifted).

Comparison of Security Measures Across Levels 1, 2, and 3

Security Function Security Level 1 (Normal) Security Level 2 (Heightened) Security Level 3 (Exceptional)
Access Control (Gangway) Single access point; visual verification of photo ID; visitor badge issuance and logbook sign-in. Limited access points; random search of persons, baggage, and carry-on gear; escorting of all non-crew. Single controlled access point for emergency responders only; gangway lifted or guarded by armed security.
Restricted Areas Locked when unattended; key control logged; signage posted; periodic security patrols. Continuous security guard presence or electronic alarm monitoring; zero visitors permitted on bridge or engine room. Total lock-down; restricted spaces evacuated and sealed with tamper-evident cable seals; full search.
Cargo Operations Routine visual inspection of packaging, containers, and seals; verify against cargo manifest. Detailed cargo checking; 100% seal checks on containers; random internal container inspections. Immediate suspension of all cargo loading, discharging, and container transfers across the vessel.
Ship's Stores & Bunkers Match deliveries against purchase orders; inspect packaging before embarking. Detailed physical inspection and screening of all incoming stores and spare parts prior to loading. Total refusal and suspension of all stores, provisions, spares, and bunkering operations.
Security Level Hierarchy Rule

Under the ISPS Code, a ship's security level must never be lower than the security level set by the Port Facility. If a vessel operating at Security Level 1 enters a port designated at Security Level 2 by the Contracting Government, the Master must immediately elevate the ship to Level 2, notify the Company Security Officer (CSO), and execute a Declaration of Security (DoS) with the Port Facility Security Officer (PFSO) before commencing commercial operations.

3. Physical Vessel Hardening & Citadel Architecture (BMP5)

BMP5 Best Management Practices Anti-Piracy
≥ 1.0 m Razor Wire Outboard Overhang
CITADEL Armored Emergency Refuge
REMOTE TRIP Main Engine Emergency Stop Inside

Anti-Piracy Engineering & Layered Defense (BMP5)

In High Risk Areas (HRA)—such as the Gulf of Guinea, Gulf of Aden, Red Sea, and Straits of Malacca—physical ship protection is engineered strictly per the Best Management Practices for Protection against Maritime Piracy (BMP5).

Defense is arranged in concentric defensive rings:

  • Outer Perimeter: Razor wire concertina coils mounted on outboard steel brackets along the entire freeboard and poop deck, high-pressure water monitors, and evasive high-speed maneuvering.
  • Superstructure Envelope: Heavy steel plates welded over lower portholes, deadlights bolted, external stairways secured, and accommodation doors locked with inner quick-release panic bolts.
  • The Citadel (Safe Muster Point): A bullet-resistant, gas-tight armored refuge designed to keep the entire crew safe from armed boarders while maintaining radio communication with naval coalition warships.
BMP5 PHYSICAL VESSEL HARDENING & ARMORED CITADEL MECHANICAL CAD BMP5 DEFENSE EXTERIOR DECK HARDENING & WATER FOAM MONITORS AFT POOP DECK BULWARK DOUBLE COIL RAZOR WIRE (≥ 1.0 m OUTBOARD) HIGH-PRESSURE DRENCH BMP5 SUPERSTRUCTURE ACCESS HARDENING: • All external portholes blocked with heavy steel deadlights • Outer doors locked from inside with quick-release fire escape bars • Hawse pipes blanked and anchor hawse covers locked in place ARMORED CITADEL REFUGE (STEERING GEAR FLAT) HARDENED CITADEL (BALLISTIC STEEL ENCLOSURE) ARMORED DOOR SAT INDEPENDENT VHF / SAT TRIP M/E REMOTE STOP RATIONS 72H WATER / O2 EMERGENCY HATCH MANDATORY CITADEL OPERATIONAL CRITERIA: • Complete command handover: Main engine fuel trips operated from inside • Steering gear auxiliary isolation to prevent attackers steering vessel • Independent backup battery power powering satellite comms for ≥ 72 hours
Figure 3: BMP5 Physical Vessel Hardening & Armored Citadel Mechanical Architecture. Left: Exterior poop deck defense showing double concertina razor wire overhanging bulwarks by $ge 1.0 ext{ m}$ and high-pressure fire monitors. Right: Ballistic citadel refuge located in the steering gear flat, equipped with emergency main engine fuel trip and 72-hour independent satellite communications.

Designated Restricted Areas & Security Controls

Navigation Bridge & Radio Room

Access strictly restricted to watchkeeping navigation officers. Doors locked in port; electronic key card or cipher lock access with visitor logging.

Machinery Spaces & Steering Flat

Access limited to licensed engineering personnel. Workshop and steering gear escape doors locked from inside with emergency push bars.

Emergency Generator & Fire Station

Critical auxiliary spaces housing life-saving power and emergency fire pumps must be locked and inspected during every security patrol.

HVAC & Ventilation Fan Rooms

Enclosed air-intake rooms are locked with tamper-evident serial cable seals to prevent toxic gas, biological agents, or chemical contamination.

4. Security Governance (SSO, CSO, PFSO) & Covert SSAS Alerts

SSAS Ship Security Alert System
SILENT Zero On-Board Visual/Acoustic Alarm
≥ 2 POINTS Bridge & Secondary Covert Buttons
3 MONTHS Statutory Shipboard Drill Interval

The Security Triad: SSO, CSO, and PFSO

The human governance of the ISPS Code rests upon three designated statutory officers who maintain an uninterrupted chain of communication:

  • Ship Security Officer (SSO): A licensed ship officer on board accountable to the Master, responsible for implementing the Ship Security Plan (SSP), directing drills, maintaining security hardware, and inspecting restricted spaces.
  • Company Security Officer (CSO): A designated corporate shore official who performs the Ship Security Assessment (SSA), submits the SSP to the Flag State or Recognized Security Organization (RSO) for approval, and acts as the 24/7 shore emergency contact.
  • Port Facility Security Officer (PFSO): An official designated by the port terminal responsible for developing the Port Facility Security Plan (PFSP), controlling waterside gates, and executing Declarations of Security.

Ship Security Plan — Language Rule & Ten Mandatory Contents (Q72a)

The SSP is written in the working language(s) of the ship, with a translation in English, French or Spanish. Recite its ten statutory contents as three groups — guard (3), respond (4), sustain (3):

  • Guard — restricted areas + anti-access measures; anti-weapon/-device measures; ship-access control procedures.
  • Respond — threat/breach response procedures; security-incident reporting; SSO identity; 24-hour CSO contact.
  • Sustain — security duties of shipboard personnel; SSAS activation-point locations; training, drill and exercise procedures.
SOLAS REG XI-2/6: SHIP SECURITY ALERT SYSTEM (SSAS) COVERT TELEMETRY CAD COVERT LINK COVERT ACTIVATION HARDWARE (ON BOARD) LOCATION 1 Nav Bridge Console Spring-loaded flap LOCATION 2 Master's Cabin / ECR Undisclosed position CENTRAL SSAS TRANSCEIVER Dedicated 24V DC Emergency Battery Inmarsat-C / Iridium Dedicated Modem ZERO ON-BOARD BUZZER OR STROBE SOLAS REGULATION XI-2/6 MANDATES: • Capable of initiation from the navigation bridge AND at least 1 other site • Activation switches must be designed to prevent inadvertent operation • Must continue transmitting automatic updates until manually cancelled/reset COVERT SATELLITE TELEMETRY ROUTING SATELLITE UPLINK DOWNLINK FLAG ADMINISTRATION National MRCC / Coast Guard Notifies Naval Coalitions UKMTO / MARLO / MSCHOA COMPANY CSO 24/7 Crisis Response Desk Coordinates Shore Support Direct Board Briefing WHAT THE SSAS DOES NOT DO: • DOES NOT transmit to nearby vessels (unlike GMDSS Distress Alert) • DOES NOT sound alarms or flash lamps on board (preserves crew safety) • DOES NOT alert the hijackers that the distress signal has escaped
Figure 4: Ship Security Alert System (SSAS) Covert Satellite Telemetry & Routing CAD. Dual hidden buttons (bridge and secret secondary site) transmit an encrypted satellite distress packet directly to the Flag State MRCC and Company CSO without raising any visual or audible alarm on board.
Ship security alert system onboard installation
Reference photo (course notes): the SSAS fit on board — alert buttons, wiring box and satellite unit. Source: Kunjal Shah Part 4 — SOLAS, MARPOL & STCW.

SSAS Fitment Dates — Four Ship Groups (Q71)

Ships built on or after 1 July 2004 carry SSAS from delivery. Older ships fit it not later than the first radio survey after:

  • After 1 July 2004 — passenger ships incl. high-speed passenger craft; oil/chemical/gas/bulk/cargo high-speed craft ≥ 500 GT.
  • After 1 July 2006 — other cargo ships ≥ 500 GT and MODUs.

Comparison of Security Roles: SSO vs. CSO vs. PFSO

Security Officer Station / Operational Base Primary Statutory Duties Mandatory Drill & Exercise Intervals
Ship Security Officer (SSO) On board individual vessel; directly accountable to Master. Executes Ship Security Plan (SSP); maintains restricted areas and physical hardware; trains shipboard crew; manages gangway access. Conducts shipboard security drills at least every 3 months (or within 1 week if $>25%$ of crew changed).
Company Security Officer (CSO) Shore headquarters; maintains 24/7 emergency availability. Conducts Ship Security Assessments (SSA); drafts and updates SSP; arranges external Flag/RSO audits; liaises with SSO and PFSO. Participates in company-wide security exercises at least once every calendar year (max 18 months interval).
Port Facility Security Officer (PFSO) Port marine terminal / waterfront facility. Maintains Port Facility Security Plan (PFSP); verifies terminal gates, CCTV, and waterside fences; countersigns Declarations of Security. Executes full-scale port facility security exercises at least once every calendar year.

Surveyor Oral & Written Examination Bank

What are the statutory requirements for marking the IMO Ship Identification Number?
Under SOLAS Regulation XI-1/3, the IMO number must be permanently marked: 1. On the exterior: in a visible place on the stern or either side of the hull amidships above the deepest load line (or on the superstructure), with lettering height not less than 200 mm painted in contrasting color. 2. On the interior: on an end transverse bulkhead of the machinery space, cargo pump room, or steering gear flat, with lettering height not less than 100 mm cut in, raised, or centre-punched into the steel plating.
What is the Continuous Synopsis Record (CSR) and what happens to it when a ship is sold?
The CSR is an official passport issued by the Flag State providing an unbroken chronological history of the ship, recording flag state, registration date, IMO number, ship name, registered owners, charterers, managing companies, classification societies, and audit authorities. Under Regulation XI-1/5.4, when a vessel is sold or changes flag, the complete historical CSR file MUST REMAIN ON BOARD and cannot be removed by the outgoing owner.
Who sets the ISPS Security Levels, and can a Master lower the security level below that of the port?
Security Levels 1, 2, and 3 are set exclusively by Contracting Governments (Flag State for ships at sea; Port Coastal State for ships within territorial waters). The Master can NEVER lower the ship's security level below that set by the port facility. If the port is Level 2 and the ship is Level 1, the ship must immediately elevate to Level 2 and sign a Declaration of Security (DoS). The Master may only set a higher level if circumstances warrant.
How does the Ship Security Alert System (SSAS) differ from a standard GMDSS distress alert?
A GMDSS distress alert is broadcast publicly to all nearby ships and coast stations and sounds audible alarms on board. The SSAS transmits a covert, silent satellite message exclusively to the Flag State competent authority and the Company Security Officer. It transmits NO signal to other ships and triggers NO audible or visual indications on board, preventing hijackers or armed intruders from knowing an alert was transmitted.
What are the mandatory specifications for an anti-piracy citadel under BMP5?
Under BMP5, a citadel must be a hardened, ballistic-resistant space (such as the steering gear flat) with doors locked from inside with heavy dog bolts. It must feature: 1. Independent two-way satellite and VHF communications with dedicated backup power for at least 72 hours. 2. Remote main engine emergency stops to prevent boarders from driving the vessel. 3. Potable water, food rations, and first aid for the entire crew. 4. Independent ventilation or air supply.