Ship security
How ship security is managed in the UK, and how to comply with UK regulations on ship security.
Overview
The maritime community has a series of special measures to enhance maritime security. These are contained in the International Convention for Safety of Life at Sea (SOLAS) Chapter XI-2 and the International Ship and Port Facility (ISPS) Code.
This guide explains how maritime security is managed in the UK, how security measures are applied and how you should comply with them. It also provides guidance on how to deal with stowaways and deter acts of violence against merchant ships, such as piracy and armed robbery.
You can find guidance and information on maritime security training. It also explains how Ship Identification Numbers (SINs) and Continuous Synopsis Records (CSRs) work.
Maritime security management
The Audit and Verification Operations branch is part of the Maritime and Coastguard Agency (MCA) and co-ordinates a series of special measures to ensure security in the maritime community.
Audit and Verification Operations
The branch provides technical advice and guidance to make sure that SOLAS Chapter XI-2 and the ISPS Code are consistently applied and maintained.
The Department for Transport and the Audit and Verification Operations branch
Department for Transport (DfT) is responsible for security across all forms of transport, including maritime.
As policy leaders and advisers, DfT implements measures in UK ports that security arrangements meet UK standards.
The MCA is responsible to DfT for:
- implementing the ISPS Code for all UK-registered ships
- undertaking security aspects of Port State Control (PSC) inspections of foreign vessels in UK ports, including passenger ships where this is a logical extension of the PSC inspection
- receiving and handling ship security alerts in line with agreed standard operating procedures
- approving and auditing training providers for Ship Security Officer (SSO) and Company Security Officer (CSO) courses
The ISPS Code is a comprehensive set of measures designed to strengthen the security of ships and port facilities.
It was historically implemented in UK through the EU regulation on enhancing ship and port facility security (725/2004). The Ship and Port Security (Amendment etc.) (EU Exit) Regulations 2019 came into force on EU exit day. At this time, SI 2019 No. 0308 amends 2004/0725 (Regulation), SI 2004 No. 1495, SI 2009 No. 2048 and revokes 2008/0324 (Regulation).
The code takes the approach that ensuring the security of ships and port facilities is a risk management activity and that, to determine what security measures are appropriate, an assessment of the risks must be made in each particular case.
The purpose of the code is to provide a standardised, consistent framework for evaluating risk. This enables governments to counteract changes in threat with changes in vulnerability for ships and port facilities by adopting the appropriate security levels and corresponding security measures.
For further information please email hq_maritimesecurity@mcga.gov.uk.
In the case of urgent technical enquiries outside normal office hours, you may contact the MCA Duty Surveyor on +44 (0)7810 528504.
This duty surveyor number must not be used for urgent or routine enquiries during normal office hours.
Ship Security Plans
To comply with the ISPS Code requirements, every company or ship must have a Ship Security Plan (SSP). As a minimum, this must address the requirements in paragraphs A/9.4 and B/9.2.
The purpose of an SSP is to:
- help prevent illegal acts against the ship, crew and passengers
- minimise damage to the marine environment and port facilities
SSPs for UK-registered vessels must be approved by the MCA or by a Recognised Security Organisation (RSO) when ISSC certification for those EAS vessels is delegated to RSOs.
When you submit an SSP it must be accompanied by a Ship Security Assessment (SSA). The SSA is an essential and integral part of the process of developing and updating an SSP. In addition, MCA form MSF5611 must be completed by the CSO and submitted along with the SSP.
While formulating an SSP, CSOs should take guidance on UK ship security requirements from Maritime Security Measures (MSM), which are available from the Audit and Verification Operations Branch or CSM. MSMs show CSOs for UK-registered ships what must be contained within SSPs.
For further information please email hq_maritimesecurity@mcga.gov.uk.
You should send your SSP to hq_maritimesecurity@mcga.gov.uk for approval. There is currently no charge for approving SSPs.
Ship Security Alert Systems (SSAS)
The SSAS is part of the ISPS Code. It is a system that contributes to the International Maritime Organization’s (IMO’s) efforts to strengthen maritime security and suppress acts of terrorism and piracy against shipping.
The SSAS for UK-registered ships should be programmed to send an alert to a nominated 24-hour contact and to the UK Joint Rescue Coordination Centre (UK-JRCC).
To notify the MCA of changes in contact details of the nominated contact or the CSO, the CSO should complete MSF5608 and send it to the address detailed on the form.
SSAS is not required to be fitted on board ships where the ISPS Code does not apply. However, if a shipowner decides to fit a SSAS on board those ships, the master and key crew members must receive training and familiarisation on activating, deactivating and limiting false alerts from the SSAS unit fitted on board. MSF5608 (ISPS Code Contact Details) must be completed and sent to the MCA for recording the details of the CSO and vessel.
For further information please email HQ_maritimesecurity@mcga.gov.uk.
Ships that must comply with maritime security requirements
The SOLAS Chapter XI-2 and the ISPS Code apply to the following types of ships engaged on international voyages:
- passenger ships, including high-speed passenger craft
- cargo ships, including high-speed craft, of 500 gross tonnage and upwards
- mobile offshore drilling units
The UK has extended the ISPS Code to include:
- domestic Class A passenger ships (domestic ships which travel more than 20 miles from a place of refuge)
- domestic Class B passenger ships certified to carry more than 250 passengers and tankers
For further information please email HQ_maritimesecurity@mcga.gov.uk.
Your application for ISPS Code verification (survey of ship security systems) will usually be undertaken at the same time as an International Safety Management Code audit and MLC 2006 inspection.
To apply for an ISPS Code verification, you should complete and send an application form to your local Marine Office.
There is no fee for undertaking the ISPS verification.
https://www.gov.uk/government/publications/application-for-survey-of-ships-and-fishing-vessels-msf-5100.
https://www.gov.uk/government/organisations/maritime-and-coastguard-agency/about/access-and-opening.
For further information please email HQ_maritimesecurity@mcga.gov.uk.
Deter piracy, armed robbery and other acts of violence against merchant ships
DfT has responsibility for counter-piracy policy.
Marine Guidance Note (MGN) 440 (M) Amendment 1 aims to help ship owners, operators, masters and seafarers understand the risks posed by piracy, armed robbery and other acts of violence against merchant shipping. DfT has identified steps you can take to reduce the risk of such acts and advises on how to deal with and report them if they occur.
This MGN and associated national and international guidance covers:
- specific guidance for Somalia, the Northwest Indian Ocean, the Gulf of Aden and the Gulf of Guinea
- recommended practices to deter acts of piracy
- recommended practices to deter acts of armed robbery
- jurisdiction and intervention
- the role of the port and coastal state
- reporting incidents
Key points include:
- planning the voyage by carrying out a risk assessment and assessing the measures required when transiting high-risk areas
- training and planning, as many attempted piracy and armed robbery attacks are unsuccessful because crews have planned and trained in advance
- being vigilant
- maintaining a high speed where possible in high-risk areas
- using effective communications with relevant authorities and reporting incidents before, during or after an attack
To read the full notice and associated guidance, https://www.gov.uk/government/publications/mgn-440-m-amendment-1-measures-to-counter-piracy-armed-robbery.
High threat of piracy in the Gulf of Aden and off the coast of Somalia
There is a growing need for CSOs to remain aware of piracy threats in the Gulf of Aden, off the coast of Somalia and elsewhere in the world. If your vessel will be passing through the area, you should:
- register in advance with the European Naval Force through the Maritime Security Centre Horn of Africa (MSCHOA): https://www.mschoa.org/
- report frequently to the UK Maritime Trade Organisation in Dubai (UKMTO Dubai) and email info@ukmto.org for the latest information
UKMTO Dubai can provide advice and information on other maritime security issues in the Gulf of Aden, the Strait of Hormuz and the wider Gulf area, including information on naval operations and exercises.
For further information, email the Maritime Security Division of the Department for Transport at maritimesecurity@dft.gov.uk.
Stowaways
The UK Border Agency has responsibility for dealing with stowaways.
Marine Guidance Note (MGN) 70 (M), as amended, offers guidance to ship owners, operators, charterers, managers, shipping agents, port authorities, masters and ship’s officers on managing stowaway incidents. It also provides practical advice on the procedures to follow if you find a stowaway on board.
MGN 70 (M) reminds you of the need:
- for continuous vigilance against stowaways
- to carry out adequate searches, especially when a hold is to be sealed or fumigated
- to provide feedback on the practical effectiveness of the guidance
You can https://www.gov.uk/government/publications/mgn-70-m-amendment-1-guidelines-on-responsibilities-resolution-of-stowaways.
Always refer to the latest IMO guidance on the allocation of responsibilities for the successful resolution of stowaway cases.
For further information please email HQ_maritimesecurity@mcga.gov.uk.
Ship Identification Numbers and Continuous Synopsis Records
SINs and CSRs are special measures to ensure maritime safety contained in SOLAS Chapter XI-1. They are also closely associated with the application of the ISPS Code.
SOLAS Chapter XI-1 Regulation 3/4.1 requires that a SIN be permanently marked in visible places on the vessel, as applicable:
- on the stern
- on either side of the hull, amidships port and starboard, above the deepest assigned load line
- on either side of the superstructure, port and starboard
- on the front of the superstructure
- on a horizontal surface visible from the air, in the case of passenger ships
Identification for large commercial yachts
UK-registered large commercial yachts are authorised to display the SIN on a horizontal surface visible from the air, in the same way as passenger ships.
Continuous Synopsis Record
The CSR is intended to provide an onboard record of the ship’s history. Every ship to which SOLAS Chapter I applies must have an updated CSR containing specified information, including:
- the name of the state whose flag the ship is entitled to fly
- the date of ship registration
- the SIN
- the port of registry
- the name, registered address and unique identification number of the owner
The Registry of Seamen and Shipping issues CSRs. https://www.gov.uk/topic/ships-cargoes/ship-registration.
For further information please email HQ_maritimesecurity@mcga.gov.uk.
Training for Company Security Officers and Ship Security Officers
Shipping companies are required to designate a CSO to co-ordinate the security activities of the company and its ships, and to liaise with port facilities and governments. All ships must have a properly trained SSO on board.
CSO training and duties
The ISPS Code defines the CSO as the person designated by the company to make sure that:
- a Ship Security Assessment is carried out
- a SSP is developed, submitted for approval, and then implemented and maintained
- liaison with port facility security officers and the SSO is maintained
There is no requirement for these duties to be included in the SSP, but evidence that the activities have taken place will be sought during verification visits.
A key requirement of the ISPS Code is that people with security responsibilities are appropriately trained. The government requires CSOs and SSOs associated with UK-registered ships to undergo approved training in accordance with Maritime Safety Committee (MSC) Circular 1154.
For companies with more than 50% of ships registered in the UK, the training provider must have been approved by the MCA.
SSO training and duties
You should designate an SSO on each ship and include the SSO’s duties in the SSP.
A key requirement of the ISPS Code is that people with security responsibilities are appropriately trained. The government requires CSOs and SSOs associated with UK-registered ships to undergo approved training.
An SSO requires a certificate of proficiency.
An SSO on a UK-registered ship can take one of two routes to obtain a certificate of proficiency required by STCW VI/5:
- hold a certificate issued by a training provider recognised by the MCA
- hold a certificate of proficiency as an SSO issued in accordance with STCW VI/5, as set out in MSN 1865 (M)
Approval of training providers
If you are a training provider and want to have your SSO or CSO courses approved by the MCA, you can read information about approval of security training courses on GOV.UK.
For further information, call the MCA Training and Certification Helpline on +44 (0)203 8172 200 or email stc.courses@mcga.gov.uk.
Further information
MCA Navigational Safety Branch
Email navigationsafety@mcga.gov.uk or call +44 (0)203 8172 425.
Audit and Verification Operations branch
Email HQ_maritimesecurity@mcga.gov.uk.
DfT Maritime Helpdesk
Email maritimesecurity@dft.gov.uk.
MCA Training and Certification helpline
+44 (0)203 8172 200
Marine Office contact details on the MCA website
Download MGN 440 (M) Amendment 1 Measure to counter piracy, armed robbery
European Naval Force registration information on the MSCHOA website
Download the Annex to MGN 70 (M)
Security training course approval information on the MCA website
Download MSC/Circular 1154 from the MCA website (PDF, 161KB)
Updates to this page
-
Replaced references to the Maritime Security and MLC Branch with the Audit and Verification Operations branch and updated contact details.
-
Contact details and some content changed.
-
Altered contact details and amended broken links
-
Contact details for various MCA branches updated.
-
Amended telephone number on DfT Maritime Helpdesk
-
First published.