SOLAS Chapter IX — ISM Code & Safety Management Systems

1. Chapter IX Scope, Legislative History & The Six Regulations

• Regulations 1–6 — the statutory articles of the chapter.
• ≥ 500 GT — the cargo ship statutory threshold.
• Resolution A.741(18) — the ISM Code foundation mandate.
• 24 / 7 — the DPA emergency contact umbilical.

Legislative Genesis & The Human Factor in Casualties

Formal maritime accident investigations over the 20th century demonstrated that approximately 80% of marine casualties were precipitated not by catastrophic structural design failures, but by organizational breakdowns, lack of clear operational procedures, fatigue, and poor management oversight ashore.

Following the tragic capsize of the ferry Herald of Free Enterprise in 1987 (where corporate shore management failed to implement basic bow-door indicator policies), the IMO developed Resolution A.741(18), formalizing the International Safety Management (ISM) Code. SOLAS Chapter IX entered into force in 1998, embedding management accountability directly into international maritime law.

Shore Support Desks & Shipboard Departments

Behind those statutory roles sits a working organization: a set of specialist support desks ashore reporting into the DPA, and on board the ship two operating departments plus the safety committee that keeps the loop closed at sea.

• Executive board / highest management — allocates corporate resources and approves the safety policy on which the whole SMS rests.
• Technical desk — superintendent oversight of spares, repairs, and shore-based engineering support.
• Marine / QA desk — vetting and audit coordination, and maintenance of the SMS manuals.
• Crewing / HR desk — STCW manning, certification validity, and crew medical fitness.
• Deck department — chief mate and navigating officers covering navigation watches, cargo work, drills, and lifesaving and fire-fighting appliances.
• Engine department — chief engineer and watchkeepers covering planned maintenance, propulsion, bunkering, and the oil water separator.
• Ship's safety committee and all crew — safety meetings, toolbox talks, risk assessments, and near-miss reporting from every rank.

The Six Regulations of SOLAS Chapter IX

Regulation 1: Definitions. Formally defines the ISM Code, Company (owner, bareboat charterer, or manager), and Administration.

Regulation 2: Application. Mandates phased application for passenger ships, tankers, bulk carriers, gas carriers, and all cargo ships ≥ 500 GT.

Regulation 3: Safety Management. Requires both the company and the ship to comply with all mandatory functional requirements of the ISM Code.

Regulation 4: Certification. Establishes the Document of Compliance (DOC) for the company and the Safety Management Certificate (SMC) for the ship.

Regulation 5: Maintenance. Obligates the company and shipboard staff to maintain the Safety Management System in full operational conformity.

Regulation 6: Verification. Grants Flag Administrations and Port State Control officers legal powers to verify, inspect, and detain non-compliant vessels.

2. Certification Framework: DOC, SMC & Audit Lifecycles

• 5 years — full validity of both the DOC and the SMC.
• Annual — the DOC shore verification window.
• Year 2–3 — the SMC intermediate audit window.
• 6 months — maximum duration of an interim SMC.

Dual-Tier Certification Architecture: DOC vs. SMC

The ISM Code functions through an interlocking, dual-tier certification structure. Safety management cannot be evaluated purely on board a ship; it requires audited proof that the corporate shore headquarters provides active managerial oversight and necessary technical resources.

The statutory sequence runs across a five-year cycle. The initial audit is completed in year 0. Thereafter the company must pass a DOC verification audit in each of years 1, 2, 3 and 4, each falling within a window of ± 3 months of the corresponding anniversary date, while the ship's intermediate SMC audit is worked in between the second and third anniversaries. Renewal of both certificates falls in year 5, allowed any time from three months before expiry up to the expiry date itself. The resulting certificates are the DOC, issued to the managing company at its corporate headquarters and scoped to the specific ship types that company operates — oil tanker, bulk carrier, container, and so on — and the SMC, issued to the individual vessel, held on board with a copy ashore, and dependent throughout on an active and verified company DOC.

Statutory Certificate Comparison Matrix

3. Safety Management System (SMS) Architecture & Functional Rules

• PDCA — the continuous improvement cycle.
• Part A — 12 implementation elements.
• Part B — 4 certification elements.
• 12 months — the internal audit interval.

Closed-Loop Deming Architecture: Plan-Do-Check-Act

The heart of the ISM Code is the Safety Management System (SMS)—a living, documented operational regime that translates abstract international safety rules into everyday deck and engine room working habits.

The SMS is structured around the classic Deming Continuous Improvement Cycle:

• Plan: Formulate safety policies, identify hazards, conduct formal risk assessments, and establish Safe Operating Procedures (SOPs).
• Do: Execute key shipboard operations using checklists, tool-box talks, permits to work, and structured emergency drills.
• Check: Conduct daily maintenance inspections, near-miss logging, accident investigations, and mandatory annual internal audits.
• Act: Implement corrective and preventive actions (CAPA), hold Master-Management Reviews, and revise procedures to prevent recurrence.

Daily ISM Proof — The Seven-Point Round (Q70g)

When asked "how do I know this ship follows ISM every day?", walk the round: job procedure pasted at the machine (e.g. fresh-water generator start-up posted beside it) — valid ISM certificates and DOC — SMS followed step by step — planned maintenance kept current — every crew member knows the safety procedure — drills run on schedule — new joiners familiarised before sailing. Every point is a document the PSC inspector can ask to see.

The Records Each Quadrant Must Produce

The cycle is judged on the evidence it generates rather than on the policy statement, so each quadrant leaves behind a defined set of records that an auditor or PSCO can inspect:

• Plan produces: the safety and environmental policy, hazard identification records, formal risk assessments, standard operating procedures, and the DPA's terms of reference.
• Do produces: permits to work, pre-job toolbox talks, planned maintenance (PMS) schedules, emergency drills for fire and MOB, and checklists for critical operations.
• Check produces: the incident and near-miss log, non-conformity reports, annual internal audit records, equipment defect alarms, and third-party vetting findings.
• Act produces: corrective actions (CAPA), root cause analysis (RCA), the Master's annual SMS review, the company management review, and revised operating manuals.

The two operation classes compared below are drawn from this loop. Critical operations fail immediately and visibly — beyond the enclosed-space and hot-work cases already tabulated, the recurring examples are navigation in dense fog, narrow straits or shallow waters; ship-to-ship transfer operations; and heavy weather navigation with ballast exchange at sea. Special operations fail silently and are only uncovered later — the recurring examples are watertight door, scupper and hatch cover seal maintenance; main engine lubricating oil purification and centrifugal separator overhaul; testing of the standby auxiliary steering gear and the emergency generator; and calibration of cargo tank high-level radar and oxygen sensors.

Comparison of Critical vs. Special Shipboard Operations

4. DPA Governance, Non-Conformity Escalation & Port State Control

• Element 4 — the Designated Person Ashore mandate.
• Element 5 — the Master's overriding authority.
• MNC — a major non-conformity requiring an immediate stop.
• Code 30 — the port State control detention action code.

The Dual Pillars of Governance: DPA & Master's Authority

The ISM Code places immense legal responsibility on two pivotal individuals:

• The Designated Person Ashore (DPA - Element 4): Serves as the independent safety guarantor ashore. The DPA must have direct access to the CEO and Board of Directors, ensuring that safety deficiencies reported by shipboard staff cannot be buried or ignored by commercial operations managers. The DPA verifies adequate provision of spares, safety gear, and qualified manning.
• Master's Overriding Authority (Element 5): Codified in international law, the Master holds absolute overriding authority to make decisions with respect to safety and pollution prevention, and to request the company's assistance as required. No commercial pressure from charterers or owners can supersede the Master's professional judgment.

Audit findings are escalated in three grades, set out in the comparison below. An MNC is the grade that stops the ship: it cannot sail until it is either rectified before departure or formally downgraded to a Non-Conformity by the Flag Administration or the recognised organisation. A downgrade requires immediate temporary compensating mitigations approved by that authority — shore technicians embarked, a temporary generator fitted — together with a mandatory re-audit within 3 months.

Comparison of Audit Findings: Observation vs. NC vs. Major NC

How Port State Control Inspects an SMS

A port State control inspection of the safety management system proceeds in stages, and the outcome of each stage decides whether the inspection closes as a paper check or escalates into a full audit and detention.

• Stage 1 — document validity: the PSCO inspects the original SMC on board and the certified copy of the DOC, then verifies the annual DOC endorsements and the intermediate SMC audit stamp.
• Stage 2 — crew familiarity and working language: officers are interviewed to confirm that they know the identity of the DPA and its 24/7 contact phone and email, that the SMS manuals are written in the crew's designated working language, and that new joiners' safety familiarisation checklists are in place.
• Stage 3 — clear grounds for an expanded audit: serious technical defects such as a dead fire pump or a tampered oily water separator; a crew unable to demonstrate a basic fire or abandon-ship drill; or the same defect recurring across consecutive PSC inspections.
• Action Code 30 — detention: where technical defects point to a breakdown of the SMS itself, the PSCO records an ISM Major Non-Conformity and detains the ship under Action Code 30, making a re-audit by the Flag State or recognised organisation a condition of release.

Port State Control MOUs — Eight Regional Regimes

For "how is port state control organised worldwide?", answer: coastal states group into regional Memoranda of Understanding that share inspection data so a substandard ship cannot hop ports. Recite the eight MOUs as founders — followers — neighbours:

• Founders — Paris MOU 1982; Tokyo MOU 1993.
• Followers — Latin American Agreement (Viña del Mar) 1992; Caribbean MOU 1996; Mediterranean MOU 1997; Indian Ocean MOU 1998.
• Neighbours — USCG (US Coast Guard control); Black Sea MOU 2000.

Surveyor Oral & Written Examination Bank

1. What is the exact role and statutory authority of the Designated Person Ashore (DPA)?

   Under ISM Code Element 4, the DPA provides the operational link between the company and the shipboard staff. The DPA must have direct access to the highest level of management (CEO/Board), monitors the safety and pollution prevention aspects of all vessels, verifies that adequate shore-side technical resources and financial support are applied, and ensures that mandatory internal audits are completed annually.

2. Explain the statutory difference between a DOC and an SMC.

   The Document of Compliance (DOC) is issued to the shore management company following an audit of its shore-based safety management system; it is valid for 5 years and requires mandatory annual endorsements. The Safety Management Certificate (SMC) is issued to each individual ship confirming that shipboard operations comply with the approved SMS; it is valid for 5 years and requires an intermediate audit between the 2nd and 3rd anniversaries. A valid DOC is a legal prerequisite for an SMC.

3. What happens to a ship's SMC if the managing company's DOC is withdrawn?

   Under SOLAS Chapter IX Regulation 4.3 and ISM Code 13.9, the withdrawal of a company's Document of Compliance automatically invalidates all Safety Management Certificates issued to any ships operated by that company. All vessels in the fleet are immediately grounded and subject to detention by Port State Control.

4. What constitutes a Major Non-Conformity, and how can it be downgraded to permit a vessel to sail?

   A Major Non-Conformity is an identifiable deviation posing a serious threat to crew safety, ship survival, or the marine environment, or the systemic failure to implement an ISM requirement (e.g. uncertified crew, dead emergency generator, falsified maintenance records). It can only be downgraded to a minor Non-Conformity by the Flag Administration or RO auditor if immediate temporary compensating mitigations are put in place prior to departure (e.g. temporary shore generator embarked), with a mandatory re-audit within 3 months.

5. What is the legal basis of the Master's Overriding Authority under the ISM Code?

   Codified in ISM Code Element 5.2 and SOLAS Regulation XI-1/1, the company must ensure that the SMS explicitly emphasizes the Master's overriding authority and responsibility to make decisions with respect to safety and pollution prevention, and to request assistance from the company as required. This legal principle ensures that the Master's professional judgment cannot be overruled by commercial, schedule, or charterer pressures.