ISPS Ship Security Plan Implementation Audit

This template is built to verify whether the Ship Security Plan is being followed on board, not just whether it exists on paper. It covers inspection details, plan implementation, SSO duties, access control, restricted areas, security equipment, and emergency response sign-off. Use it to capture observable evidence of compliance, deviations, and corrective actions. It is designed for vessel audits under the ISPS framework and SOLAS Chapter XI-2.

Run it during scheduled internal audits, pre-arrival security checks, post-incident reviews, or before a flag, port state, or company security review. It also fits after changes to crew, routes, security level, or security equipment. If the vessel has had repeated access-control issues or a security drill failure, this audit helps confirm whether the Ship Security Plan is still being implemented as written. Many operators use it as part of a recurring compliance cadence rather than only after a problem.

A qualified auditor, the Ship Security Officer, a company compliance lead, or another authorized representative can complete it, depending on your internal procedure. The person running it should understand the vessel’s security plan, current security level requirements, and how access control and restricted-area controls are supposed to work. The Master or authorized representative should review and acknowledge the results. If the SSO is being audited, the audit should still preserve independence where your process requires it.

This template supports verification of implementation under SOLAS Chapter XI-2 and the ISPS Code framework. It is also useful for checking whether shipboard security measures, drills, records, and reporting practices match the approved Ship Security Plan. The template does not replace the plan or the regulatory text; it helps you document whether the vessel is actually following them. That makes it useful for internal compliance and for preparing for external inspection.

Common findings include access points left uncontrolled, visitor logs incomplete, credentials not visibly displayed, and restricted areas not clearly marked or physically secured. Auditors also frequently find outdated security records, missed drill frequency, and security equipment that is installed but not tested or maintained on schedule. Another frequent issue is undocumented deviations from the Ship Security Plan. This template helps surface those gaps in a structured way.

Yes. You can tailor the access-control checks, restricted-area list, equipment checks, and evidence fields to match the vessel type, operating area, and company procedures. For example, a passenger vessel may need more emphasis on boarding controls and visitor management, while a cargo vessel may focus more on restricted spaces and watchstanding. You can also add company-specific security level triggers, local port requirements, or additional sign-off fields.

Use the template to verify that drills or exercises are being conducted at the frequency required by the Ship Security Plan and applicable security procedures. The exact cadence should come from the vessel’s approved plan and company policy, so the audit should confirm both the schedule and the recorded evidence. If a drill was delayed, the audit should capture the reason and any corrective action. That helps distinguish a one-time delay from a recurring non-conformance.

Record the deviation clearly, note who approved it, and document any compensating controls or corrective actions. A good audit trail should show whether the deviation was temporary, how long it remained in effect, and whether it affected access control, monitoring, or response readiness. If the deviation creates a security gap, escalate it through the Master and Company Security Officer immediately. This template is designed to make that follow-up easy to track.