Most people encounter ISPS only when it appears as a line item on a freight invoice.. Yet behind that acronym lies a mandatory global maritime security framework adopted under SOLAS that governs how ships and ports operate every single day.. Understanding the ISPS Code clarifies both compliance obligations and the commercial implications that follow..
All of you no doubt have heard of ISPS, and all you know is that you are “paying” for it.. This article explains what ISPS actually means, what it does, and why it exists..
Why was the ISPS Code introduced under SOLAS
In the wake of the 9/11 attacks in the USA, the IMO decided to develop, recommend, and implement a set of security measures applicable to ships and port facilities around the world..
These measures, known as the International Ship and Port Facility Security (ISPS) Code, were incorporated into Chapter XI-2 of the International Convention for the Safety of Life at Sea (SOLAS), 1974, and entered into force on 1 July 2004 to enhance maritime security globally..

Structure of the ISPS Code: Mandatory Provisions and Guidance
The Code consists of two parts: Part A, which contains mandatory provisions, and Part B, which guides implementation..
The purpose of the ISPS Code is to :
provide a standardised, consistent global framework across the maritime world
- this enables various countries (that have subscribed to the code) to evaluate, detect, and assess the security risks to the ships calling at their ports, and allows them to take appropriate measures to determine the security levels they must follow and the corresponding security/preventive measures to be taken
- to institute respective roles and responsibilities of all parties (governments and government agencies subscribed to the code, port administration, and the shipping and port agencies) concerned, at a global and domestic level, to ensure maritime security
- to exchange/share relevant security-related information
- and to assure shipowners that adequate and proportionate maritime security measures are in place for their ships
As per the code, each of the entities above is required to place appropriate security officers/personnel on each ship, in each port facility, and in each shipping company to prepare and to put into effect the security plans that will be implemented..
The ISPS Code requires the appointment of key security roles, including the Company Security Officer (CSO), Ship Security Officer (SSO), and Port Facility Security Officer (PFSO)..
Each role has defined responsibilities for developing, maintaining, and implementing the respective security plans and ensuring coordination between the ship and the port facility..
Understanding Security Levels and Operational Implications
The ISPS Code consists of two parts & three levels of security..
The parts of the ISPS code are :
- Part A – These are the mandatory provisions adopted under SOLAS Chapter XI-2.. Part A establishes the obligations of Contracting Governments, shipping companies, and port facilities.. It requires the appointment of Company Security Officers, Ship Security Officers, and Port Facility Security Officers.. It sets out the requirements for Ship Security Plans and Port Facility Security Plans, including verification and certification procedures..
- Part B – These are guidance provisions that provide recommended measures and implementation guidance to assist Governments, companies, and port facilities in meeting the requirements of Part A..
Security levels are set by the Contracting Government in accordance with SOLAS Chapter XI-2.. Port facilities and ships are required to implement and comply with the security level communicated by the competent authority.. The security level applied at a port facility must be coordinated with ships operating at that port to ensure alignment of protective security measures..
The security levels are implemented by the local port authority under consultation with the government authorities.. The security level adopted by the port facility must be coordinated with the ship for synergy..
The three levels of ISPS security are :
Security Level 1 – normal – this is the level at which ships and port facilities operate under normal conditions..
Minimum appropriate protective security measures are maintained at all times in accordance with the approved Ship Security Plan (SSP) and Port Facility Security Plan (PFSP)..
At Security Level 1, measures typically include:
• Controlled access to the ship and port facility
• Monitoring and surveillance of restricted or “no access” areas
• Verification of the identity of persons seeking access
• Supervision of cargo handling and delivery of the ship’s stores
• Routine security patrols or inspections
• Implementation of the approved security plan procedures
These measures are maintained continuously as baseline security controls..
Security Level 2 – heightened – this level applies when there is an increased risk of a security incident..
Additional protective security measures are implemented and maintained for the duration of the elevated risk..
At Security Level 2, measures may include:
• Increased frequency of security patrols and monitoring
• Enhanced control of access points
• Restriction of access to specific areas
• Escorting visitors and stricter identification checks
• Increased supervision of cargo handling and the ship’s stores
• Preparation for partial or full search of the ship
• Execution of a Declaration of Security (DoS), where required
Security Level 2 measures are proportionate to the assessed threat and remain in effect until downgraded by the competent authority..
Security Level 3 – exceptional – this level is imposed when a security incident is probable or imminent.. Further specific protective security measures are implemented for a limited period under the direction of the competent Government authority..
At Security Level 3, measures may include:
• Restriction or suspension of cargo handling operations
• Restriction or suspension of embarkation or disembarkation
• Restriction of ship movements
• Suspension of access to all or part of the port facility
• Intensified monitoring and security patrols
• Full or partial search of the ship or port facility
• Underwater hull inspection where required
• Controlled single access point to the ship
• Preparation for evacuation of ship or port personnel
• Execution of a Declaration of Security
Operational measures at this level are directive-based and proportionate to the threat.. They may involve suspension or restriction of operations in whole or in part, depending on instructions issued by the competent authority..
My Take
The ISPS Code is not merely a compliance checklist.. It is a governance framework embedded into the daily operational fabric of global shipping..
While many view it through the lens of a surcharge, its true purpose is risk mitigation and coordinated security management between Governments, ports, and vessels..
The commercial implications follow the regulatory obligation, not the other way around.. Understanding that distinction elevates the conversation from cost to compliance and from paperwork to protection..
Article FAQ
What is the ISPS Code..??
Why are there three ISPS security levels..??
How are ISPS security levels implemented..??
Critical Note: Does the ISPS Code mandate an ISPS charge..??



provide a standardised, consistent global framework across the maritime world
















am paying ISPS cost to vessel owners. Can I recover from my oil buyers?
Hi Leena if you are the seller and paying certain costs, what you can invoice buyer etc will depend on the sales terms agreed..
I still cannot get why it is paid? Why it is a charge?
Hi Amira, in the past before ISPS, many of the people were able to go into different areas of the port, even get on board the ships etc.. This was because there was not really much security to control this as people were not aware of the risks and security threat levels were not not so high.. This lack of security was a serious threat to cargo and ships.. This amplified after 9/11..
After the implementation of ISPS, each port, shipping line had to employ security personnel to ensure that there is no unauthorised access to ships, ports etc.. These extras cost money and as the shipping lines and ports are employing these security personnel to safeguard the cargo belonging to customers and facilities that are serving the customers and hence it is necessary for the shipping lines to charge these extra..
Trust this is clear now..
Thank you
I’m keyur thakor , mulund , mumbai , india 2018
do you have any crash course test online now?
Hello Alonzo, not yet, but its in the pipeline..
do they have isps clases in the Bahamas?
In a CIF purchase, who is the responsible to pay it? (ISP)
Hello Luis, ISP is generally linked with the freight and therefore in any sales contract CIF, FCA, CFR etc whoever pays the freight will pay ISP as well.. But there may also be cases where there is a specific agreement between buyer and seller..
Thanks for the Info!!!, Great Article!!
Excellent article and great blog.
Best of luck in 2013!
Irina
Seattle, WA
Very good information and education, thank you.
Kingson
which routes is ISPS imposed?