Guidance/legal framework

Port security plan (PSP)

The port security plan should be based on the Port Security Assessment (PSA) and include:

The PSP should refer to, and take into account, any other existing port emergency plan or other security plans.

The PSP should be protected from unauthorized access or disclosure.

************

Sample Port Security Plan (PSP)

Introduction

1. The PSP should be compatible with the ISPS Code, ship security plan and port facility security plans.
2. It is not intended that the PSP should duplicate or replace the PFSP. It may however identify the relationship with the port facility and provide the transition of maritime security from the ship through the port facility into and from the port.
3. The PSP should address at least the following for each security level:

3.1. Identify the person in the port designated to receive security-sensitive information affecting the port.
3.2. Measures designed to prevent unauthorized weapons or any dangerous substances and devices intended for use against persons, port assets or infrastructure and facilities from being introduced into the port.
3.3. Identify restricted areas of the port and measures designed to prevent unauthorized access.
3.4. Procedures for responding to security threats to the port, or breaches of security including provisions to maintain critical operations of the port.
3.5. Approve the security measures required at each security level and, in particular, procedures for responding to any security instructions the member State may give at security level 3.
3.6. Procedures for evacuation in the event of a security incident.
3.7. Duties of port personnel assigned security responsibilities.
3.8. Procedures for interfacing with port facility security activities.
3.9. Procedures for periodic review and updating of the plan.
3.10. Procedures for reporting security incidents.
3.11. Identification of the PSO and 24-hour contact details.
3.12. Measures to ensure the security of information contained in the plan including, where appropriate, proprietary information of members of the port community.
3.13. Measures to prevent interference or theft of port property and equipment, and inbound and outbound material, stores and cargo.
3.14. Procedures for auditing the port security plan.
3.15. Procedures for responding to security alarm activation at the port facility or other restricted area in the port.
3.16. Procedures to facilitate the movement and access of seafarers including representatives of seafarer welfare organizations and workers’ organizations to the port, port facility and ship as appropriate.

4. The port security plan may be used in addition to identify and communicate:

4.1. Permitted inbound and outbound passenger routing.
4.2. Inbound and outbound seafarer routing (from/to port facility/between port facilities).
4.3. Holding areas and routing for inbound and outbound (inter-ship/port facility) and transiting cargo, materials, stores and traffic.
4.4. Approved holding areas for dangerous goods and hazardous material.
4.5. The form of the physical interface with the port facility (facilities) and movement of persons, material, stores and cargo between port facilities.
4.6. Safe and secure routes to, and area for holding suspect explosive devices and other suspicious objects.

Roles and tasks
5. The designated authority should require that all ports devise a PSP and nominate a PSO who along with the PSAC should implement the plan.

Format and content of the PSP
6. By way of example the following is given to assist the production of the PSP that may be made up of or contain the following information.
7. Front/header page
Name of port area
List of associated plans
List of members of port security advisory committee
Name, appointment and signature of person approving the plan
Date of approval
Authority for issue
Date of issue
8. Distribution list – for unclassified and classified parts of the plan.
9. Record of changes – explanation of change procedures and tasks of plan holders to amend the plan and implement changes.
10. Table of contents – appendices may be used to segregate classified or commercially sensitive information and only distributed to those members of the port community approved to receive the information.
11. Introduction. An explanation of the background, circumstances and objective of the port security plan. Include major objectives and security policies, e.g. to deter detect and respond through promotion of a high level of security awareness and training.
12. Security policy statement. Include a statement of the port security policy.
13. Assumptions, e.g.:

13.1. That unlawful acts may occur at any time with little or no warning.
13.2. Protection of human life, health and security is the most important consideration in development of the plan.
13.3. Maintaining the free flow of commerce and function of the port is a critical consideration.
13.4. That no single entity can provide all the resources required to provide adequate security measures and response to the consequences of an unlawful act.
13.5. That other disaster and contingency plans (e.g. dangerous goods, hazardous material or natural disaster response) will be activated as appropriate in response to any security incident.
13.6. That all members of the port community will voluntarily support and participate in measures to secure the port and its functions.

14. Port security advisory committee charter if applicable or authority for formation and:

14.1. Brief of role and task of the PSAC, e.g.:
14.1.1. To consult and advise on the implementation of the PSP and other security matters as appropriate.
14.1.2. Develop procedures for sharing and communication of security-related information.
14.1.3. Promote security awareness as the deterrent to unlawful acts.

15. Organization and membership of the PSAC. Make up of members of the PSAC and the relationship with other port and national or local planning committees.
16. The Port. Define the geographical and functional perimeter [boundaries] and make up of the port including all waterways and modes of transport, infrastructure and port and commercial functions.
17. Include associated infrastructure, facilities, functions and secondary ports to which a security threat may relate and that may be included in the main plan or other security plans.
18. List local law enforcement agencies and municipal emergency and support services (include local hospital/medical facilities) that may contribute to response and consequence management.
19. Maps and charts. Provide maps and charts showing all salient features and location of operations, functions and routes and access points including appropriate navigation channels. This may be attached as an annex to the plan.
20. Operations and functions. Detail maritime and non-maritime operations and functions.
21. Critical operations and activities. Identify and describe all critical operations and other significant activities carried out in the port area.

22. Security levels:
22.1. Security level 1. The level for which minimum appropriate protective security measures shall be maintained at all times.
22.2. Security level 2. The level for which appropriate additional protective security measures shall be maintained for a period of time as a result of heightened risk of a security incident.
22.3. Security level 3. The level for which further specific protective security measures shall be maintained for a limited period of time when a security incident is probable or imminent although it may not be possible to identify the specific target.

23. Communications. Describe and detail the means of communicating security level(s), changes to the security level and methods of raising alarm in the event of an incident.
24. Security measures, procedures and operations. Tabulate and list in detail all security measures and operations that are to be implemented in the port at each security level in response to issues identified in the security assessment.
25. This should cover personnel security, perimeter and physical barriers, access control and all approved security measures. It should detail the roles and tasks of all members of the port community to establish/monitor/control, as appropriate, restricted areas and navigation zones.
26. It may be appropriate to use existing procedures to aid communication, implementation and testing. Where appropriate functional operating procedures and working instructions are in existence it may be feasible to add security elements to such procedures and working instructions.
For example if there is an existing written operational procedure for checking contents of inbound vehicles against other documentation or information it may be possible to include security inspection of the contents in the existing procedure.

Roles, resources, authorities and tasks
27. Detail how and by whom security procedures will be implemented.

Relationship to other plans and organizations
28. List all other plans and organizations that may contribute to, relate to or impact on the PSP.

Response and crisis management
29. Identify and list agencies and contacts responsible for responding, to mitigate the cause or consequence of an incident. Devise, tabulate and communicate a response plan for every perceived incident.

PSP review and maintenance policy
30. Define the policy and procedures to review and maintain the PSP.

PSP security and control
31. Define the distribution, dissemination and security of the plan, or parts of the plan, to achieve widest communication of its requirements without compromising security or proprietary information.

Training
32. Detail training requirements for port personnel to fulfil their role and that of their organization in carrying out tasks under the PSP.

Drills, exercises and testing
33. Methods should be detailed to carry out drills and exercises and to test the plan periodically, to check that it remains current and achievable by identifying changes that may impact on any critical response, resource or consequence factor.

Source:
IMO/ILO
Code of practice on security in ports
Tripartite Meeting of Experts on Security, Safety
and Health in Ports
Geneva, 2003