| 11. | Common requirements for security assessments |
A security assessment for a maritime security plan must include the following matters:
| (a) | the date when the assessment was completed or reviewed, |
| (b) | the scope of the assessment, including assets, infrastructure and operations assessed; |
| (c) | a summary of how the assessment was conducted, including details of the risk management process adopted; |
| (d) | the skills and expertise of the key persons who completed or participated in the assessment. |
| 12. | Common requirements for security plan audits and reviews |
A maritime security plan for a port operator, port facility operator or port service provider must set out—
| (a) | a schedule of security plan audits by internal and external auditors; |
| (b) | the circumstances, in addition to the occurrence of a maritime transport security incident following which a security plan review must be conducted; |
| (c) | the procedures for conducting a security plan audit, including a process for selecting auditors who are independent of the matters being audited; and |
| (d) | the procedures for conducting a security plan review, including a process for consultation during the review. |
| 13. | Port operator to give information |
A port operator required to have a maritime security plan must give to each port facility operator and port service provider conducting operations within the security regulated port—
| (a) | the information set out in item 17 (including contact details for the PSO); |
| (b) | the measures to be used by the port operator to inform persons of the location of security zones established within the boundaries of the security regulated port; and |
| (c) | the measures to confirm the identity of persons who are authorised to have access to security zones established within the boundaries of the security regulated port. |
| 14. | Port facility operator to give information |
| (1) | A port facility operator required to have a maritime security plan must give the port operator of, and each port service provider conducting operations within, the security regulated port— |
| (a) | the information set out in item 28 (including contact details for the PFSO); |
| (b) | the measures to be used by the port facility operator to inform persons of the location of any security zones established within the boundaries of the port facility; and |
| (c) | the measures to confirm the identity of persons who are authorised to have access to the port facility, to ships moored at the facility and to any security zoiies established within the boundaries of the port facility. |
| (2) | A port facility operator required to have a maritime security plan must also give to the port operator details of the boundaries of the facility. |
| 15. | Port service provider to give information |
A port service provider required to have a maritime security plan must give to the port operator of the security regulated port in which the provider conducts operations and to each port facility operator conducting operations within the security regulated port—
| (a) | the information set out in item 40 (including contact details for the PSPSO); |
| (b) | the boundaries of the area under the control of the port service provider; |
| (v) | details of the vessels operated by the provider (including the name, identification number, type, date, port of registry, and construction year of each vessel); |
| (4) | the measures to be used by the port service provider to inform persons of the location of any security zones established within the boundaries of the land under the control of the port service provider, and |
| (e) | the measures to confirm the identity of persons who are authorised to have access to the land under the control of the port service provider, to any security zones established within the boundaries of that land and to vessels operated by the provider. |
