ISO 20858:2007
(Main)Ships and marine technology — Maritime port facility security assessments and security plan development
Ships and marine technology — Maritime port facility security assessments and security plan development
ISO 20858:2007 establishes a framework to assist marine port facilities in specifying the competence of personnel to conduct a marine port facility security assessment and to develop a security plan as required by the ISPS Code International Standard, conducting the marine port facility security assessment, and drafting/implementing a Port Facility Security Plan (PFSP). In addition, ISO 20858:2007 establishes certain documentation requirements designed to ensure that the process used in performing the duties described above was recorded in a manner that would permit independent verification by a qualified and authorized agency (if the port facility has agreed to the review). It is not an objective of ISO 20858:2007 to set requirements for a contracting government or designated authority in designating a Recognized Security Organization (RSO), or to impose the use of an outside service provider or other third parties to perform the marine port facility security assessment or security plan if the port facility personnel possess the expertise outlined in this specification. Ship operators may be informed that marine port facilities that use this document meet an industry-determined level of compliance with the ISPS Code. Port infrastructure that falls outside the security perimeter of a marine port facility might affect the security of the facility/ship interface. ISO 20858:2007 does not address the requirements of the ISPS Code relative to such infrastructures. State governments have a duty to protect their populations and infrastructures from marine incidents occurring outside their marine port facilities. These duties are outside the scope of ISO 20858:2007.
Navires et technologie maritime — Évaluations de la sécurité des installations portuaires maritimes et réalisation de plans de sécurité
General Information
Relations
Standards Content (Sample)
INTERNATIONAL ISO
STANDARD 20858
First edition
2007-10-15
Ships and marine technology — Maritime
port facility security assessments and
security plan development
Navires et technologie maritime — Évaluation de la sécurité des
installations portuaires maritimes et réalisation de plans de sécurité
Reference number
©
ISO 2007
PDF disclaimer
This PDF file may contain embedded typefaces. In accordance with Adobe's licensing policy, this file may be printed or viewed but
shall not be edited unless the typefaces which are embedded are licensed to and installed on the computer performing the editing. In
downloading this file, parties accept therein the responsibility of not infringing Adobe's licensing policy. The ISO Central Secretariat
accepts no liability in this area.
Adobe is a trademark of Adobe Systems Incorporated.
Details of the software products used to create this PDF file can be found in the General Info relative to the file; the PDF-creation
parameters were optimized for printing. Every care has been taken to ensure that the file is suitable for use by ISO member bodies. In
the unlikely event that a problem relating to it is found, please inform the Central Secretariat at the address given below.
© ISO 2007
All rights reserved. Unless otherwise specified, no part of this publication may be reproduced or utilized in any form or by any means,
electronic or mechanical, including photocopying and microfilm, without permission in writing from either ISO at the address below or
ISO's member body in the country of the requester.
ISO copyright office
Case postale 56 • CH-1211 Geneva 20
Tel. + 41 22 749 01 11
Fax + 41 22 749 09 47
E-mail copyright@iso.org
Web www.iso.org
Published in Switzerland
ii © ISO 2007 – All rights reserved
Contents Page
1 Scope. 1
1.1 General. 1
1.2 Conformance. 1
2 Terms and definitions. 1
3 Performance of the security assessment . 3
3.1 Overview of the security assessment. 3
3.2 Personnel conducting the security assessment . 4
4 Security assessment procedures . 4
4.1 General. 4
4.2 Scope of the security assessment. 4
4.3 Current status of security at the port facility. 5
4.3.1 Identification of assets and infrastructure. 13
4.3.2 Consultations . 13
4.4 Threat scenarios and security incidents. 13
4.5 Classification of consequences . 15
4.6 Classification of likelihood of security scenarios . 15
4.7 Security incident scoring. 15
4.8 Countermeasures . 16
4.8.1 General. 16
4.8.2 Countermeasure exceptions . 16
5 Port Facility Security Plan (PFSP). 16
5.1 General. 16
5.2 Prioritization of countermeasures . 16
5.3 Port Facility Security Plan contents . 17
5.3.1 General. 17
5.3.2 Table of contents . 17
5.3.3 Items in facility plot plan. 17
5.3.4 Security administration and organization of the port facility. 17
5.3.5 Port Facility Security Officer . 17
5.3.6 Changes in security levels. 18
5.3.7 Procedures for interfacing with ships . 18
5.3.8 Declaration of Security (DoS) . 18
5.3.9 Additional requirements for port facility receiving passenger ship at Security Level 1. 18
5.3.10 Communications. 18
5.3.11 Security systems and equipment maintenance . 18
5.3.12 Security measures for access control, including designated public access areas . 18
5.3.13 Security measures for access control, including designated public access areas at
Security Level 2. 20
5.3.14 Security measures for access control, including designated public access areas at
Security Level 3. 20
5.3.15 Security measures for restricted areas . 20
5.3.16 Access to restricted areas . 20
5.3.17 Security measures for handling cargo at Security Level 2 . 21
5.3.18 Security measures for delivery of ship's stores/spare parts and bunkers. 22
5.3.19 Security measures for monitoring . 22
5.3.20 Security incident procedures . 22
5.3.21 Additional requirements for passenger and ferry port facilities . 23
5.3.22 Additional requirements at cruise ship terminals . 23
5.3.23 Audits and security plan amendments. 24
5.3.24 Skills, knowledge and competencies of security and port facility personnel. 24
5.3.25 Drills and exercises . 26
5.4 Execution of the supply chain security plan. 26
6 Documentation . 26
6.1 Safeguarding the documents. 26
6.2 Port Facility Security Assessment Report . 26
6.3 Marine Port Facility Security Plan . 27
6.4 Security operations and security training records. 27
6.5 Retention of records . 28
Annex A (informative) Guidance for obtaining advice and certification. 29
A.1 General. 29
A.2 Demonstrating conformance with ISO 20858 by audit. 29
A.3 Certification of ISO 20858 by third party certification bodies . 29
iv © ISO 2007 – All rights reserved
Foreword
ISO (the International Organization for Standardization) is a worldwide federation of national standards bodies
(ISO member bodies). The work of preparing International Standards is normally carried out through ISO
technical committees. Each member body interested in a subject for which a technical committee has been
established has the right to be represented on that committee. International organizations, governmental and
non-governmental, in liaison with ISO, also take part in the work. ISO collaborates closely with the
International Electrotechnical Commission (IEC) on all matters of electrotechnical standardization.
International Standards are drafted in accordance with the rules given in the ISO/IEC Directives, Part 2.
The main task of technical committees is to prepare International Standards. Draft International Standards
adopted by the technical committees are circulated to the member bodies for voting. Publication as an
International Standard requires approval by at least 75 % of the member bodies casting a vote.
Attention is drawn to the possibility that some of the elements of this document may be the subject of patent
rights. ISO shall not be held responsible for identifying any or all such patent rights.
ISO 20858 was prepared by Technical Committee ISO/TC 8, Ships and marine technology.
This first edition of ISO 20858 cancels and replaces ISO/PAS 20858:2004, which has been technically revised.
Introduction
This International Standard addresses the execution of marine port facility security assessments, marine port
facility security plans (including countermeasures) and the skills and knowledge required of the personnel
involved. This International Standard is designed to ensure that the completed work meets the requirements
of the International Maritime Organization (IMO) International Ships and Port Facility Security Code (ISPS)
and the appropriate maritime security practices that can be verified by an outside auditor. Since other ISO
standards may address non-marine port facilities the word “marine” usually appears before port facilities in
this standard. This standard is intended to address port facilities as defined in the ISPS.
vi © ISO 2007 – All rights reserved
INTERNATIONAL STANDARD ISO 20858:2007(E)
Ships and marine technology — Maritime port facility security
assessments and security plan development
1 Scope
1.1 General
This International Standard establishes a framework to assist marine port facilities in specifying the
competence of personnel to conduct a marine port facility security assessment and to develop a security plan
as required by the ISPS Code International Standard, conducting the marine port facility security assessment,
and drafting/implementing a Port Facility Security Plan (PFSP).
In addition, this International Standard establishes certain documentation requirements designed to ensure
that the process used in performing the duties described above was recorded in a manner that would permit
independent verification by a qualified and authorized agency (if the port facility has agreed to the review). It is
not an objective of this International Standard to set requirements for a contracting government or designated
authority in designating a Recognized Security Organization (RSO), or to impose the use of an outside service
provider or other third parties to perform the marine port facility security assessment or security plan if the port
facility personnel possess the expertise outlined in this specification. Ship operators may be informed that
marine port facilities that use this document meet an industry-determined level of compliance with the ISPS
Code.
Port infrastructure that falls outside the security perimeter of a mari
...
Questions, Comments and Discussion
Ask us and Technical Secretary will try to provide an answer. You can facilitate discussion about the standard in here.