SOLAS Chapter XI — ISPS Code & Maritime Security

1. Chapter XI-1: Ship Identification & Continuous Synopsis Record

• ≥ 200 mm — height of the exterior IMO marking.
• ≥ 100 mm — height of the interior steel marking.
• ≥ 300 GT — threshold for the ship identification number mandate on cargo ships.
• CSR — the Continuous Synopsis Record, the ship's statutory passport.

Permanent IMO Ship Identification Marking (Regulation XI-1/3)

To eliminate fraudulent identity switching, phantom ship operations, and maritime piracy collusion, SOLAS Regulation XI-1/3 mandates that all passenger ships of 100 GT and upwards and all cargo ships of 300 GT and upwards must be permanently marked with an official IMO Ship Identification Number.

The seven-digit IMO number (preceded by the letters "IMO") is assigned by Lloyd's Register / S&P Global at the time of keel laying. Unlike radio call signs or vessel names, the IMO number is permanent and follows the physical hull from shipbuilder delivery to the final demolition scrap yard.

Continuous Synopsis Record (CSR) Mandatory Information Fields

2. Chapter XI-2 & ISPS Code: Objectives, Legal Hierarchy & Security Levels

• Part A — mandatory legal provisions.
• Part B — non-mandatory guidance.
• Level 1 — normal baseline security.
• Level 3 — exceptional threat or a specific target.

Legal Hierarchy & The Three Security Levels

SOLAS Chapter XI-2 (13 Regulations) forms the statutory anchor for the International Ship and Port Facility Security (ISPS) Code, which entered into mandatory international force on 1 July 2004.

The ISPS Code establishes an international risk-management framework to deter terrorism, piracy, armed robbery, and hostage taking. Central to the Code is the classification of operational threat into three distinct, standardized Security Levels:

Comparison of Security Measures Across Levels 1, 2, and 3

Danger — Security Level Hierarchy Rule. Under the ISPS Code, a ship's security level must never be lower than the security level set by the Port Facility. If a vessel operating at Security Level 1 enters a port designated at Security Level 2 by the Contracting Government, the Master must immediately elevate the ship to Level 2, notify the Company Security Officer (CSO), and execute a Declaration of Security (DoS) with the Port Facility Security Officer (PFSO) before commencing commercial operations.

3. Physical Vessel Hardening & Citadel Architecture (BMP5)

• BMP5 — best management practices for anti-piracy.
• ≥ 1.0 m — razor wire outboard overhang.
• Citadel — an armoured emergency refuge.
• Remote trip — main engine emergency stop from inside the citadel.

Anti-Piracy Engineering & Layered Defense (BMP5)

In High Risk Areas (HRA)—such as the Gulf of Guinea, Gulf of Aden, Red Sea, and Straits of Malacca—physical ship protection is engineered strictly per the Best Management Practices for Protection against Maritime Piracy (BMP5).

Defense is arranged in concentric defensive rings:

• Outer Perimeter: Razor wire concertina coils mounted on outboard steel brackets along the entire freeboard and poop deck, high-pressure water monitors, and evasive high-speed maneuvering.
• Superstructure Envelope: Heavy steel plates welded over lower portholes, deadlights bolted, external stairways secured, and accommodation doors locked with inner quick-release panic bolts.
• The Citadel (Safe Muster Point): A bullet-resistant, gas-tight armored refuge designed to keep the entire crew safe from armed boarders while maintaining radio communication with naval coalition warships.

Designated Restricted Areas & Security Controls

Navigation Bridge & Radio Room. Access strictly restricted to watchkeeping navigation officers. Doors locked in port; electronic key card or cipher lock access with visitor logging.

Machinery Spaces & Steering Flat. Access limited to licensed engineering personnel. Workshop and steering gear escape doors locked from inside with emergency push bars.

Emergency Generator & Fire Station. Critical auxiliary spaces housing life-saving power and emergency fire pumps must be locked and inspected during every security patrol.

HVAC & Ventilation Fan Rooms. Enclosed air-intake rooms are locked with tamper-evident serial cable seals to prevent toxic gas, biological agents, or chemical contamination.

4. Security Governance (SSO, CSO, PFSO) & Covert SSAS Alerts

• SSAS — the Ship Security Alert System.
• Silent — zero on-board visual or acoustic alarm.
• ≥ 2 points — bridge and secondary covert buttons.
• 3 months — the statutory shipboard drill interval.

The Security Triad: SSO, CSO, and PFSO

The human governance of the ISPS Code rests upon three designated statutory officers who maintain an uninterrupted chain of communication:

• Ship Security Officer (SSO): A licensed ship officer on board accountable to the Master, responsible for implementing the Ship Security Plan (SSP), directing drills, maintaining security hardware, and inspecting restricted spaces.
• Company Security Officer (CSO): A designated corporate shore official who performs the Ship Security Assessment (SSA), submits the SSP to the Flag State or Recognized Security Organization (RSO) for approval, and acts as the 24/7 shore emergency contact.
• Port Facility Security Officer (PFSO): An official designated by the port terminal responsible for developing the Port Facility Security Plan (PFSP), controlling waterside gates, and executing Declarations of Security.

Ship Security Plan — Language Rule & Ten Mandatory Contents (Q72a)

The SSP is written in the working language(s) of the ship, with a translation in English, French or Spanish. Recite its ten statutory contents as three groups — guard (3), respond (4), sustain (3):

• Guard — restricted areas + anti-access measures; anti-weapon/-device measures; ship-access control procedures.
• Respond — threat/breach response procedures; security-incident reporting; SSO identity; 24-hour CSO contact.
• Sustain — security duties of shipboard personnel; SSAS activation-point locations; training, drill and exercise procedures.

SSAS Covert Telemetry & Routing

SOLAS Regulation XI-2/6 requires the SSAS to be operable from the navigation bridge and from at least one further location, without giving any on-board indication that an alert has been sent.

• Activation point 1 — navigation bridge console, in the illustrated fit protected by a spring-loaded flap.
• Activation point 2 — a second covert point, in the example shown at the Master's cabin or engine control room, in a position whose location is not disclosed.
• Central SSAS transceiver — independent of the main alarm system; in the illustrated fit it is fed from a dedicated 24 V DC emergency battery and a dedicated Inmarsat-C or Iridium modem, and it produces no on-board buzzer or strobe on activation. The battery and modem arrangement varies with the equipment fitted.
• Switch design — activation switches are arranged so they cannot be operated inadvertently.
• Transmission behaviour — automatic updates continue to be transmitted until the alert is manually cancelled or reset.

The alert is routed to two exclusive recipients — the Flag Administration and the Company Security Officer. In the illustrated arrangement the Flag Administration's national MRCC or coast guard also notifies the naval coalitions (UKMTO, MARLO, MSCHOA), while the CSO's 24/7 crisis response desk coordinates shore support and briefs the boarding party directly.

What the SSAS deliberately does not do: it does not transmit to nearby vessels as a GMDSS distress alert does, it sounds no audible alarm or flashing lamp on board, and it gives the hijackers no indication that a distress signal has escaped.

SSAS Fitment Dates — Four Ship Groups (Q71)

Ships built on or after 1 July 2004 carry SSAS from delivery. Older ships fit it not later than the first radio survey after:

• After 1 July 2004 — passenger ships incl. high-speed passenger craft; oil/chemical/gas/bulk/cargo high-speed craft ≥ 500 GT.
• After 1 July 2006 — other cargo ships ≥ 500 GT and MODUs.

Comparison of Security Roles: SSO vs. CSO vs. PFSO

Surveyor Oral & Written Examination Bank

1. What are the statutory requirements for marking the IMO Ship Identification Number?

   Under SOLAS Regulation XI-1/3, the IMO number must be permanently marked: 1. On the exterior: in a visible place on the stern or either side of the hull amidships above the deepest load line (or on the superstructure), with lettering height not less than 200 mm painted in contrasting color. 2. On the interior: on an end transverse bulkhead of the machinery space, cargo pump room, or steering gear flat, with lettering height not less than 100 mm cut in, raised, or centre-punched into the steel plating.

2. What is the Continuous Synopsis Record (CSR) and what happens to it when a ship is sold?

   The CSR is an official passport issued by the Flag State providing an unbroken chronological history of the ship, recording flag state, registration date, IMO number, ship name, registered owners, charterers, managing companies, classification societies, and audit authorities. Under Regulation XI-1/5.4, when a vessel is sold or changes flag, the complete historical CSR file MUST REMAIN ON BOARD and cannot be removed by the outgoing owner.

3. Who sets the ISPS Security Levels, and can a Master lower the security level below that of the port?

   Security Levels 1, 2, and 3 are set exclusively by Contracting Governments (Flag State for ships at sea; Port Coastal State for ships within territorial waters). The Master can NEVER lower the ship's security level below that set by the port facility. If the port is Level 2 and the ship is Level 1, the ship must immediately elevate to Level 2 and sign a Declaration of Security (DoS). The Master may only set a higher level if circumstances warrant.

4. How does the Ship Security Alert System (SSAS) differ from a standard GMDSS distress alert?

   A GMDSS distress alert is broadcast publicly to all nearby ships and coast stations and sounds audible alarms on board. The SSAS transmits a covert, silent satellite message exclusively to the Flag State competent authority and the Company Security Officer. It transmits NO signal to other ships and triggers NO audible or visual indications on board, preventing hijackers or armed intruders from knowing an alert was transmitted.

5. What are the mandatory specifications for an anti-piracy citadel under BMP5?

   Under BMP5, a citadel must be a hardened, ballistic-resistant space (such as the steering gear flat) with doors locked from inside with heavy dog bolts. It must feature: 1. Independent two-way satellite and VHF communications with dedicated backup power for at least 72 hours. 2. Remote main engine emergency stops to prevent boarders from driving the vessel. 3. Potable water, food rations, and first aid for the entire crew. 4. Independent ventilation or air supply.