AMSA Integrated Rating (AIR)

Correct: According to 33 CFR 105.245, when the MARSEC Level is 2 or 3, the Facility Security Officer must execute a Declaration of Security with the Vessel Security Officer of any vessel prior to beginning any transfer or interface activities. This ensures both parties are aligned on security responsibilities during heightened threat levels.

Incorrect: Suggesting that a DoS is only necessary for dangerous cargo or Level 3 ignores the specific regulatory trigger for Level 2 at OCS facilities. The strategy of assuming a waiver exists for frequent visits is incorrect because MARSEC Level 2 removes the flexibility often found at Level 1. Relying on a single signature from the facility officer fails to meet the requirement for mutual coordination and acknowledgment of security duties between the vessel and the facility.

Takeaway: At MARSEC Level 2, a Declaration of Security must be coordinated and signed by both the VSO and FSO before operations begin.

Correct: Under 33 CFR 104.305, the Vessel Security Assessment must include an identification of vulnerabilities in physical structures, personnel protection systems, and other areas that may be a target. This process requires a systematic evaluation of how current security measures stand up against identified threats, ensuring that any weaknesses—especially after structural changes—are addressed with appropriate mitigation strategies in the Ship Security Plan.

Incorrect: The strategy of relying solely on historical data is insufficient because maritime threats and vessel configurations are dynamic and require current analysis. Focusing only on the exterior of the ship is a flawed approach that ignores critical internal vulnerabilities such as the bridge or engine room which are vital to the vessel’s integrity. Choosing to defer responsibility to port personnel is incorrect because the VSO is federally mandated to maintain the security of the vessel independently of the port facility’s own security measures.

Takeaway: A VSA must systematically compare existing security measures against potential threats to identify and mitigate specific vessel vulnerabilities effectively.

Correct: Under 33 CFR 104.305, the Vessel Security Assessment must be reviewed and updated whenever there are significant changes to the vessel’s operations or environment. Conducting a new on-scene survey is a critical component of the VSA process, as it allows the VSO to identify specific physical and operational vulnerabilities that may be exploited in the new high-risk transit area, ensuring the Vessel Security Plan remains effective.

Incorrect: Simply increasing the frequency of drills focuses on crew readiness but fails to address whether the existing security infrastructure and procedures are actually sufficient for the new threats. The strategy of requesting a permanent MARSEC Level 2 increase is inappropriate because MARSEC levels are generally set by the Commandant of the Coast Guard based on prevailing threat information rather than individual vessel route changes. Focusing only on equipment maintenance ensures that existing tools work but does not evaluate if those tools are the correct ones for the new risks identified on the updated route.

Takeaway: Significant changes in a vessel’s operating environment require a revised on-scene survey to update the Vessel Security Assessment and Plan.

Correct: Under 33 CFR 104.415, the Company Security Officer is responsible for ensuring that any amendments to the Ship Security Plan are submitted to the Coast Guard Marine Safety Center for review and approval. While the VSO identifies the operational need for the change, the CSO maintains the regulatory responsibility for the plan’s integrity and official submission process.

Incorrect: Relying on the VSO to independently update the plan without formal submission ignores the regulatory requirement for Coast Guard approval of all SSP amendments. The strategy of delaying the formal update until an annual audit fails to maintain the legal accuracy of the security documentation required by federal law. Opting to bypass amendment procedures based on the current MARSEC level is a violation of the compliance framework established in 33 CFR Part 104. Choosing to have the VSO contact the Captain of the Port directly for plan changes ignores the CSO’s designated role as the primary coordinator for plan maintenance.

Takeaway: The CSO is responsible for submitting SSP amendments to the Coast Guard, while the VSO identifies and reports the necessary changes.

Correct: Under 33 CFR 104.235 and 104.255, the VSO is responsible for coordinating security activities with the PFSO. When a vessel and a port facility operate at different MARSEC levels, they must coordinate through a Declaration of Security (DoS) to ensure that the vessel implements security measures equivalent to the higher MARSEC level during the interface.

Incorrect: The strategy of seeking a waiver to remain at a lower security level is incorrect because federal regulations require the vessel to meet the higher security standard during a port interface. Simply documenting the discrepancy in a logbook while maintaining lower security measures fails to address the immediate vulnerability and violates the requirement for a coordinated Declaration of Security. Choosing to remain at anchor indefinitely is an extreme operational delay that ignores the VSO’s primary duty to facilitate a secure interface through established regulatory procedures.

Takeaway: The VSO must coordinate with the PFSO via a Declaration of Security to match the higher MARSEC level during an interface.

Correct: The Continuous Synopsis Record (CSR) is mandated by SOLAS Regulation XI-1/5. It serves as an onboard record of the ship’s history, including information about its flag state, registered owner, charterer, and the company responsible for safety management.

Incorrect: Relying on the International Ship Security Certificate is incorrect because that document only certifies that the ship’s security system complies with the ISPS Code. Simply presenting the Safety Management Certificate is insufficient as it pertains to the ISM Code and safety operations rather than historical registration data. Choosing to provide the Ship Security Plan Annex is also wrong because while it contains security procedures, it does not serve as the official regulatory history of the vessel’s ownership.

Takeaway: The Continuous Synopsis Record is the mandatory SOLAS Chapter XI-1 document used to provide a continuous history of a ship’s registration and ownership details.

Correct: Under 33 CFR 104 and the ISPS Code, maritime security is defined as the preventive measures taken to protect the maritime domain against threats of intentional unlawful acts, such as terrorism, sabotage, or smuggling. This scope encompasses the vessel itself, the people on board, and the cargo being transported, ensuring that security levels are maintained to mitigate identified risks through the implementation of the Ship Security Plan.

Incorrect: Focusing on environmental protection and spill prevention relates to maritime safety and MARPOL compliance rather than security against intentional threats. The strategy of monitoring labor standards and crew performance falls under general ship management and labor conventions instead of security protocols. Relying on navigational safety and collision avoidance addresses operational hazards and safety of navigation, which are distinct from the security measures designed to counter hostile or criminal activities.

Takeaway: Maritime security focuses on protecting the vessel and its occupants from intentional unlawful acts rather than accidental hazards or operational safety issues.

Correct: According to 33 CFR 104.415, any amendment to a Vessel Security Plan, especially those involving changes to the vessel’s physical layout or security measures, must be submitted to the Marine Safety Center (MSC) for review and approval to ensure the plan remains effective and compliant.

Incorrect: The strategy of documenting changes only in a logbook while waiting for a five-year renewal fails to address the immediate regulatory requirement for an accurate and approved security plan. Relying on verbal notifications to the Captain of the Port is insufficient because the regulations require formal written amendments for structural or procedural changes. Opting for an internal waiver from a Company Security Officer is not a valid substitute for federal regulatory approval from the Coast Guard. Simply waiting for an annual audit to address physical modifications leaves the vessel in a state of non-compliance during the intervening period.

Takeaway: Significant modifications to a vessel’s layout or security procedures require formal amendments and approval from the Marine Safety Center per 33 CFR 104.415.

Correct: In accordance with the ISPS Code and 33 CFR Part 104, when a vessel and a port facility have different security levels, the vessel must adjust its security measures to match the higher level. Furthermore, a Declaration of Security (DoS) is mandatory when the vessel or the facility is operating at a higher security level than the other, ensuring that security responsibilities are clearly coordinated and documented during the interface.

Incorrect: Relying on a new on-scene survey to justify staying at a lower security level is incorrect because the vessel is legally obligated to match the higher level of the facility it is interfacing with. Choosing to wait at an offshore anchorage is an unnecessary operational delay, as the regulations provide a framework for vessels to operate safely at higher security levels through increased measures. The strategy of requesting a waiver to maintain a lower security level is not a standard regulatory procedure, as MARSEC levels are set based on threat intelligence that the vessel must respect to ensure port-wide safety.

Takeaway: Vessels must always match the higher security level of the port facility and document the coordination through a Declaration of Security.

Correct: Under 33 CFR 106.210, a Declaration of Security (DoS) is mandatory when a vessel and an OCS facility are operating at different MARSEC levels. This document ensures that both the Vessel Security Officer and the OCS Facility Security Officer have coordinated their respective security measures. It clearly defines who is responsible for specific security tasks during the interface.

Correct: Under the ISPS Code Part A and 33 CFR 104, any significant change to the vessel’s physical structure, security equipment, or operational procedures requires a review of the Ship Security Assessment (SSA). Because the SSA forms the foundation of the Ship Security Plan (SSP), any changes to the vessel’s vulnerabilities must lead to an amended SSP. This amended plan must then be submitted to the U.S. Coast Guard for review and approval to ensure the vessel remains in compliance and its International Ship Security Certificate remains valid.

Incorrect: Relying on logbook entries and verbal briefings is insufficient because regulatory frameworks require formal documentation and administrative approval for security-critical modifications. The strategy of issuing a temporary addendum without a formal assessment process fails to meet the legal standard for plan maintenance and ignores the requirement for official re-validation of security measures. Focusing only on crew training records is inadequate because it neglects the mandatory requirement that the physical and procedural descriptions within the approved SSP must accurately reflect the vessel’s current configuration.

Takeaway: Major structural changes require a new security assessment and formal amendment of the Ship Security Plan to maintain regulatory compliance and safety standards.

Correct: A defense-in-depth strategy is the recognized standard for maritime cybersecurity, as it creates multiple layers of security. Segmenting Operational Technology (OT) from Information Technology (IT) networks ensures that a compromise in the administrative system does not automatically grant access to critical vessel controls. The addition of an Intrusion Detection System (IDS) provides the necessary visibility to identify anomalous patterns and potential breaches that static firewall rules might miss.

Incorrect: The strategy of relying on a single shore-side perimeter firewall is insufficient because it does not protect against threats originating from local physical access or vulnerabilities within the vessel’s own wireless access points. Simply securing the crew’s recreational network while leaving critical systems on a flat, unsegmented network allows for easy lateral movement by an attacker once the initial perimeter is breached. Opting for commercial antivirus software as a primary network defense is ineffective because antivirus is designed to detect malicious files on individual hosts rather than identifying or stopping sophisticated network-level intrusions and unauthorized traffic flows.

Takeaway: Robust maritime network security requires a layered approach combining network segmentation, firewalls, and active monitoring to protect critical shipboard systems.

Correct: Under 33 CFR Part 104 and the ISPS Code, security measures must be compatible with safety requirements. A cross-functional review is essential because it identifies potential conflicts where security hardware or procedures might hinder safety-critical operations, such as emergency evacuations or damage control. This approach ensures that the company meets its obligations under both the Maritime Transportation Security Act (MTSA) and the International Safety Management (ISM) Code by maintaining a balanced management system where safety and security are mutually reinforcing.

Incorrect: The strategy of keeping the CSP and SMS entirely separate is flawed because it ignores the physical and operational overlaps between safety and security, which can lead to dangerous contradictions during an actual emergency. Choosing to prioritize security over safety is incorrect because maritime regulations and international conventions generally maintain that safety of life at sea is the primary concern and should not be compromised by security measures. Focusing only on the Vessel Security Officer for integration ignores the Company Security Officer’s regulatory responsibility to provide shore-based support and ensure consistency across the entire fleet’s management systems.

Takeaway: The Company Security Officer must ensure that security measures are integrated with safety systems to prevent security protocols from compromising emergency response capabilities.

Correct: Under 33 CFR 104.305 and the ISPS Code, the Ship Security Assessment must include a vulnerability assessment. This process identifies specific weaknesses in physical security, structural integrity, and personnel protection systems. By identifying these gaps, the CSO can ensure the Company Security Plan (CSP) is updated with appropriate mitigation strategies tailored to the vessel’s specific operational environment.

Incorrect: Relying solely on increased frequency of equipment testing like the SSAS does not address the underlying vulnerabilities or the effectiveness of physical barriers. Simply delegating the entire risk analysis to the SSO ignores the CSO’s regulatory responsibility to oversee and coordinate the assessment across the fleet. The strategy of limiting the scope to historical data fails to account for emerging or asymmetric threats that have not yet resulted in documented incidents in that specific area.

Takeaway: A compliant Ship Security Assessment must identify specific vulnerabilities in physical, structural, and personnel systems to effectively mitigate maritime security risks.

Correct: Under 33 CFR Part 104 and the ISPS Code, the vessel is responsible for its own security during cargo handling. Verifying seal integrity at the point of transfer ensures that any tampering is detected before the cargo is accepted onto the vessel, maintaining a continuous chain of custody and meeting regulatory standards for cargo monitoring and documentation.

Incorrect: Relying solely on terminal personnel shifts the vessel’s regulatory responsibility to an external party without direct oversight, which fails to meet the ship’s specific security obligations under the CSP. Focusing only on high-value or hazardous cargo leaves the vessel vulnerable to security breaches or smuggling via standard containers, violating the principle of comprehensive cargo monitoring. Choosing to delegate all security tasks to stevedores ignores the requirement for the CSO and SSO to maintain active control over the vessel’s security environment as mandated by federal maritime security regulations.

Takeaway: CSOs must ensure the CSP includes active verification of cargo integrity at the point of transfer to maintain vessel security compliance.

Correct: In accordance with 33 CFR 104.265, the vessel owner or operator must ensure that security measures are in place to deter the unauthorized introduction of dangerous substances and devices. A critical component of this is access control, which requires the vessel to verify the identity of every person seeking to board. This is typically achieved by checking government-issued photo identification against a passenger manifest or crew list to ensure that only authorized individuals gain entry to the vessel.

Incorrect: The strategy of delegating security verification to travel agencies is insufficient because the vessel remains legally responsible for controlling access at the actual point of embarkation. Relying on a fixed five percent screening rate is non-compliant because screening protocols must be flexible and increase in intensity as MARSEC levels rise, as dictated by the approved Company Security Plan. Opting to leave secondary access points unmonitored for crew convenience creates a major security vulnerability and violates the requirement to secure all potential points of entry into the vessel’s restricted areas.

Takeaway: The Company Security Officer must ensure the CSP mandates positive identification and authorized access for all individuals boarding a vessel under USCG jurisdiction.

Correct: As the CSO, you must ensure that the vessel complies with both the ISPS Code and U.S. Coast Guard regulations under 33 CFR. When a Port State Control Officer identifies a security deficiency, the CSO must facilitate transparent communication with the Flag State (USCG). Notifying the USCG allows the administration to provide official support, verify the proposed corrective actions, and potentially issue a letter of authorization that satisfies the Port State’s concerns, thereby preventing or lifting a detention.

Incorrect: The strategy of providing unrelated safety management certificates fails to address the specific security regulatory requirements and will likely be viewed as non-compliance by the inspector. Choosing to unilaterally modify the Ship Security Plan is a violation of maritime law because the SSP is a controlled document that requires formal approval from the USCG or an authorized Recognized Security Organization. Relying on diplomatic channels through an embassy is inappropriate for technical maritime security deficiencies and ignores the established regulatory framework for Flag State and Port State interactions.

Takeaway: The CSO must coordinate with the USCG to resolve Port State deficiencies through official regulatory channels and approved corrective actions.

Correct: The Maritime Transportation Security Act (MTSA) is codified in 33 CFR, where Part 104 specifically addresses vessel security. For U.S.-flagged vessels, the Vessel Security Plan must be submitted to and approved by the U.S. Coast Guard Marine Safety Center. While the U.S. regulations are designed to be consistent with the International Ship and Port Facility Security (ISPS) Code, they include specific domestic requirements that must be met to ensure compliance with federal law.

Incorrect: Relying solely on an International Ship Security Certificate is insufficient because U.S. law requires specific plan approval by the Coast Guard for domestic flagged vessels. Assuming that requirements only apply in high-risk waters is a misunderstanding of the law, as MTSA compliance is mandatory for all regulated vessels regardless of their current geographic location. The strategy of treating the plan as a strictly internal document fails to meet the legal requirement for formal federal oversight and regulatory validation.

Takeaway: U.S.-flagged vessels must maintain a USCG-approved Vessel Security Plan that satisfies both 33 CFR Part 104 and international ISPS standards.

Correct: Under 33 CFR Part 104 and the Maritime Transportation Security Act, the Company Security Officer must ensure that effective communication is maintained between the vessel and the company. This includes establishing redundant systems to ensure reliability and clear procedures for the immediate notification of the National Response Center (NRC) in the event of a security threat or incident. Standardized reporting helps ensure that all federally required information is transmitted accurately during high-stress events.

Incorrect: Relying solely on safety-oriented distress systems is insufficient because security incidents often require specific reporting channels and data points not covered by standard maritime distress protocols. The strategy of requiring the Master to wait for shore-side authorization before contacting authorities is flawed as it creates dangerous delays that may violate federal requirements for immediate reporting of suspicious activities. Choosing to route all communications through a facility officer is inappropriate because the vessel and company have independent regulatory obligations to maintain direct communication with federal authorities during an incident.

Takeaway: Security communication protocols must prioritize redundancy and provide clear, direct procedures for immediate notification of the National Response Center during incidents.

Correct: In accordance with the Maritime Transportation Security Act (MTSA) and 33 CFR Part 104, the CSO is responsible for ensuring that the Company Security Plan includes effective procedures for communication. Implementing end-to-end encryption and multi-factor authentication ensures the confidentiality and integrity of sensitive security information, preventing unauthorized parties from intercepting or tampering with data that could compromise the vessel’s security posture.

Incorrect: Relying solely on third-party satellite provider defaults is insufficient as these generic measures may not address the specific vulnerabilities identified in the ship security assessment or protect against targeted cyber threats. The strategy of using open VHF radio frequencies for sensitive data is highly insecure because VHF is a non-private broadcast medium that can be monitored by anyone within range. Opting for the physical delivery of unencrypted removable media creates significant delays in operational security and introduces new risks related to the physical loss or theft of sensitive data drives.

Takeaway: CSOs must implement robust encryption and authentication to protect the confidentiality and integrity of sensitive maritime security communications and data transfers.

Correct: In a man overboard situation, the most critical immediate action is to maintain visual contact while alerting the rest of the crew. Shouting ‘Man Overboard’ with the specific side ensures the bridge and deck crew are immediately aware of the emergency, while keeping the person in sight prevents losing them in the wake or swells, which is the leading cause of failed rescues.

Incorrect: The strategy of jumping into the water to assist is dangerous as it creates two victims for the crew to rescue instead of one and is strictly prohibited in professional maritime procedures. Choosing to leave the rail to find a phone is incorrect because the observer must never lose sight of the victim’s position in the water, as finding a person in the open sea is extremely difficult once contact is broken. Opting to deploy a life raft as the first step is premature and can create a navigational hazard for the vessel’s maneuvering during the recovery turn.

Takeaway: Maintaining visual contact while loudly raising the alarm is the most vital step in ensuring a successful man overboard recovery.

Correct: In the maritime chain of command, an Ordinary Seaman must report to their immediate supervisor, such as the Able Seaman or Boatswain, to maintain orderly communication and allow the Deck Department to manage the response. This hierarchy ensures that the person most familiar with the immediate work area can evaluate the risk and escalate the matter to the Chief Mate or Master as required by the vessel’s safety management system.

Incorrect: Relying on direct communication with the Master for a localized maintenance issue bypasses the established hierarchy and distracts the vessel’s command from critical navigational duties. Choosing to bypass the deck department to notify the Chief Engineer creates confusion in task management and ignores the OS’s primary reporting line within their own department. Opting for external notification to the United States Coast Guard before informing shipboard leadership is an inappropriate escalation that violates internal safety and reporting protocols.

Takeaway: The maritime chain of command ensures operational efficiency by requiring personnel to report issues through their immediate departmental supervisors.

Correct: Class B fires involve flammable liquids and require an extinguishing agent that smothers the fire by displacing oxygen or interrupting the chemical reaction. Carbon dioxide and dry chemical extinguishers are specifically rated for these hazards and are the standard equipment for paint locker protection under USCG regulations.

Incorrect: Using a portable stored-pressure water extinguisher is ineffective because water is denser than most flammable liquids and will cause the fire to float and spread. Applying a high-velocity solid stream of water is hazardous as it can splash the burning chemicals onto the operator or surrounding bulkheads. Choosing to use a standard blanket on a spreading chemical fire is insufficient for the heat intensity and risks the material catching fire or melting.

Takeaway: Flammable liquid fires require smothering agents like CO2 or dry chemicals to safely extinguish the flames without spreading the fuel.

Correct: According to the Navigation Rules (COLREGS), a vessel at anchor must display a single black ball in the forward part of the ship where it can best be seen by other vessels.

Incorrect: Displaying two black balls in a vertical line is the signal for a vessel not under command, which indicates a loss of maneuverability due to exceptional circumstances. Using a single black cone with the apex pointing down identifies a vessel proceeding under sail that is also being propelled by machinery. Choosing to display three black balls in a vertical line signifies that the vessel is aground, which is a different status than being safely at anchor.

Takeaway: A single black ball displayed forward is the mandatory day shape for any vessel at anchor to ensure maritime safety and visibility.

Correct: The magnetic compass relies solely on the Earth’s natural magnetic field to indicate direction. Because it does not require an external power source or complex mechanical motors to function, it serves as the primary reliable backup for navigation when the vessel’s electrical systems or gyrocompass fail.

Incorrect: The idea that a magnetic compass automatically corrects for variation and deviation is incorrect, as these must be manually applied by the navigator using charts and deviation cards. Suggesting the compass is unaffected by steel structures is false, as the ship’s own metal causes deviation that must be compensated for. Claiming it is more stable during maneuvers is inaccurate, as magnetic compasses are prone to swinging and lag during rapid turns compared to the dampened movement of a gyrocompass.

Takeaway: The magnetic compass is a critical fail-safe because it functions without electricity, unlike the more complex gyrocompass system.

Correct: Under U.S. Coast Guard security regulations and the vessel’s Security Plan, the watchstander must verify the identity of all persons seeking to board. This involves checking a valid Transportation Worker Identification Credential (TWIC) or other government-issued ID and ensuring the person has a legitimate reason to be on board by cross-referencing the authorized visitor list or contacting the Ship Security Officer (SSO).

Correct: Standard maritime security protocols and United States Coast Guard guidelines dictate that any suspicious or unidentified object should remain undisturbed to prevent accidental activation of a device or exposure to hazardous materials. The immediate priority is to secure the perimeter and notify the chain of command, specifically the Officer of the Watch or the Ship Security Officer, who is trained to handle security breaches according to the Ship Security Plan.

Incorrect: The strategy of moving the object to a common area like the galley is dangerous because it risks triggering a potential explosive or spreading contaminants throughout the ship’s living quarters. Choosing to open the package for self-verification is a severe safety violation that puts the individual and the entire crew at risk of injury from unknown contents. Opting to store the item in a paint locker is inappropriate because it fails to address the security threat and could lead to a dangerous chemical reaction if the package contains incompatible substances.

Takeaway: Always report suspicious items immediately without touching or moving them to ensure crew safety and proper security response procedures are followed.

Correct: Atmospheric testing is the most critical safety step before entering a confined space. A competent person must use calibrated equipment to ensure oxygen levels are between 19.5% and 22%, flammable vapors are below 10% of the Lower Explosive Limit (LEL), and toxic substances are within permissible exposure limits. This sequence is vital because oxygen levels can affect the accuracy of other gas sensors.

Incorrect: Relying on a specific duration of ventilation without subsequent gas testing is dangerous because pockets of hazardous gas may remain trapped in the structure. Focusing only on physical equipment like harnesses ignores the primary cause of confined space fatalities, which is atmospheric hazards. The strategy of having a standby person enter first is a violation of safety protocols, as the standby person must remain outside the space at all times to maintain communication and initiate an emergency rescue if needed.

Takeaway: Never enter a confined space until a competent person has verified the atmosphere is safe using calibrated testing equipment.

Correct: Securité is the international safety signal used to transmit messages concerning the safety of navigation or important meteorological warnings. According to USCG and FCC radio protocols, this prefix is specifically designated for reporting hazards like debris, malfunctioning aids to navigation, or weather alerts that do not pose an immediate threat to the reporting vessel.

Incorrect: Using the distress signal is strictly reserved for situations involving grave and imminent danger to a vessel or person requiring immediate assistance. The urgency signal is inappropriate here because it is intended for cases where the safety of a vessel or person is in jeopardy but does not yet constitute a distress situation. Opting for informal phrases like safety alert fails to comply with standardized Global Maritime Distress and Safety System (GMDSS) procedures required for official maritime communications.

Takeaway: Use Securité for navigational hazards, Pan-Pan for urgent safety concerns, and Mayday only for life-threatening distress situations.