The International Safety Management Code is the regulation that turns maritime safety from a hardware problem into a management responsibility. A vessel can have every fire extinguisher serviced, every lifeboat tested, every certificate current — and still be detained at Port State Control if the crew cannot demonstrate familiarity with the Safety Management System. That is the ISM Code's power and its challenge: it requires not just equipment compliance, but a documented, implemented, and continuously improved management system that connects shore-side leadership to shipboard operations. Made mandatory through SOLAS Chapter IX, the ISM Code applies to all passenger ships and all cargo ships of 500 GT and above on international voyages. It requires every company operating ships to develop a Safety Management System (SMS), appoint a Designated Person Ashore (DPA), obtain a Document of Compliance (DOC), and ensure each vessel holds a valid Safety Management Certificate (SMC). This guide covers every ISM Code requirement in practical terms — from building your SMS to passing external audits — written for DPAs and fleet managers who need to implement, not just understand. Start a free trial of Marine Inspection to digitize your SMS documentation, track non-conformities, and manage audit readiness across your fleet.
ISM Code: The Management Standard Behind Maritime Safety
12
Sections in Part A
Mandatory SMS implementation requirements
DOC + SMC
Two Certificates Required
Company-level DOC and ship-level SMC
5 Years
Certification Cycle
With annual and intermediate verifications
~10%
PSC Deficiency Share
ISM/SMS consistently in the top 3 PSC categories
The 12 Sections of the ISM Code (Part A)
Part A of the ISM Code contains 12 sections that define every element your Safety Management System must address. This is the framework external auditors verify against — and the standard PSC officers use when they ask your crew to demonstrate SMS familiarity. Book a Marine Inspection demo to see how digital workflows map to each ISM section.
1
General
Defines the code's objectives (safety at sea, prevent injury/loss of life, avoid environmental damage), application scope, and the 6 functional requirements every SMS must meet.
2
Safety & Environmental Protection Policy
Company must establish a policy describing how safety and environmental objectives will be achieved. Policy must be implemented and maintained at all organizational levels — both shore and ship.
3
Company Responsibilities & Authority
Defines the "Company" — the entity that has assumed responsibility for ship operations. Must document authority structure, responsibility chains, and resource allocation for safety.
4
Designated Person Ashore (DPA)
Company must designate a person with direct access to the highest level of management. The DPA monitors safety and pollution prevention, ensures adequate resources, and serves as the link between company and ship.
5
Master's Responsibility & Authority
Company must define and document the Master's overriding authority to make decisions regarding safety and pollution prevention, and the responsibility to request company assistance when needed.
6
Resources & Personnel
Company must ensure the Master is qualified and familiar with the SMS. All personnel involved in safety must be qualified, trained, and understand relevant rules and regulations. New personnel must receive familiarization training.
7
Shipboard Operations
Company must establish procedures, plans, and instructions for key shipboard operations concerning safety and environmental protection. Tasks must be defined, assigned to qualified personnel, and documented.
8
Emergency Preparedness
Company must identify potential emergency situations and establish procedures to respond. Drills and exercises must be conducted regularly. The SMS must include measures for shipboard emergencies.
9
Non-Conformities, Accidents & Hazardous Occurrences
SMS must include procedures for reporting, investigating, and analyzing non-conformities, accidents, and hazardous occurrences. Corrective and preventive actions must be implemented and tracked.
10
Maintenance of Ship & Equipment
Company must establish procedures to ensure the ship is maintained per regulations and company requirements. Inspections must be held at appropriate intervals, deficiencies reported and corrected with root-cause identification.
11
Documentation
Company must establish procedures to control all documents and data relevant to the SMS. Valid documents must be available at all relevant locations. Obsolete documents must be promptly removed.
12
Company Verification, Review & Evaluation
Company must carry out internal safety audits and management reviews to verify the SMS is functioning effectively. Auditors must be independent of the areas being audited. Findings must trigger corrective actions.
The DPA: Your Most Critical ISM Role
The Designated Person Ashore is not a title — it is the single accountability point that makes the entire ISM framework function. External auditors will verify the DPA's actual involvement in safety management, not just their name on a document. Sign up for Marine Inspection to give your DPA real-time visibility into fleet-wide compliance status.
The DPA must have direct, unimpeded access to the highest level of management. This is not a reporting-line requirement — it means the DPA can raise safety concerns directly to the CEO/MD without intermediaries.
The DPA must actively monitor the company's safety and pollution prevention performance across all vessels. This means reviewing audit findings, incident reports, PSC results, and maintenance records — not just receiving summaries.
The DPA must ensure that ships receive the resources needed for safety — qualified crew, maintained equipment, current documentation, adequate training. Resource gaps are audit findings.
The DPA is the formal communication bridge between shore management and shipboard operations on all safety matters. Auditors verify that this link is active — through communication records, visit logs, and meeting minutes.
DOC & SMC Certification: The ISM Audit Lifecycle
ISM certification operates on a 5-year cycle with intermediate verifications. Understanding this lifecycle prevents certification lapses that immediately make a vessel unseaworthy in regulatory terms.
Table 1: ISM Certification & Verification Schedule
Non-Conformity Management: From Finding to Closure
ISM Section 9 requires a systematic process for handling non-conformities — and this is where many companies fail during external audits. A well-run non-conformity process demonstrates that the SMS is a living system, not shelf documentation. Book a demo to see how Marine Inspection automates non-conformity tracking from identification through root cause analysis to verified closure.
1
Identification
NC reported via internal inspection, external audit, PSC finding, near-miss, or incident investigation
2
Root Cause Analysis
Determine why the NC occurred — not just what happened. Systemic causes (training, procedures, resources) must be identified.
3
Corrective Action
Implement fix with deadline, assigned responsible person, and required evidence of completion
4
Preventive Action
Address root cause to prevent recurrence. May involve procedure updates, additional training, or system changes.
5
Verification & Close-Out
Independent verification that corrective and preventive actions are effective. NC closed with documented evidence.
Major Non-Conformity
A deviation posing serious threat to personnel/vessel safety or the environment. Also: lack of effective and systematic implementation of an ISM Code requirement. Must be corrected before DOC/SMC can be issued or maintained.
Non-Conformity
An observed situation where objective evidence shows non-fulfilment of a specified requirement. Must be corrected within an agreed timeframe. Failure to close becomes a major NC at next audit.
Observation
A finding that does not constitute a non-conformity but indicates a potential weakness or improvement opportunity. Not mandatory to address, but auditors track trends across observations.
Manage Your Entire ISM Audit Cycle Digitally
Non-conformity tracking, corrective action workflows, internal audit scheduling, drill records, management review documentation — Marine Inspection connects every ISM requirement into one audit-ready platform with real-time fleet dashboards.
What PSC Officers Check for ISM Compliance
Port State Control officers don't audit your full SMS — but they verify that the system is implemented and that crew can demonstrate familiarity. These are the specific checks they perform.
Table 2: PSC ISM Verification Points
ISM Compliance Checklist for DPAs & Fleet Managers
Use this before external audits, internal verifications, and when preparing for PSC arrivals. These items map directly to the areas where ISM deficiencies are most commonly found. Sign up for Marine Inspection to run these checklists digitally across your entire fleet.
ISM Code Compliance — Audit Readiness Checklist
Certification & Documentation
DOC valid with annual verification endorsements current
SMC valid on each vessel with intermediate verification complete
Copy of DOC available onboard every vessel
Safety Management Manual available onboard and at shore office — current revision
DPA Function
DPA formally appointed with documented qualifications and authority
DPA has demonstrated direct access to top management
Communication records between DPA and vessels available
DPA involvement in incident reviews and audit follow-up documented
Operational Implementation
Procedures exist for all key shipboard operations (cargo, navigation, mooring, bunkering)
Emergency procedures — crew can locate, explain, and demonstrate response actions
Drill records complete — fire, abandon ship, oil spill, security — at required frequencies
Master's overriding authority documented and understood by all officers
Continuous Improvement
Internal audits conducted per schedule — findings documented with corrective actions
Management review completed — evidence of review of audit results, incidents, KPIs
Non-conformities tracked from identification through root cause to verified closure
Lessons learned from incidents shared fleet-wide with documented distribution
Frequently Asked Questions
What is the ISM Code and why is it mandatory?
The International Safety Management (ISM) Code is the IMO's management standard for safe ship operations and pollution prevention. Made mandatory through SOLAS Chapter IX since 1998, it recognizes that most maritime accidents are caused by human error and requires companies to implement a documented Safety Management System (SMS). It applies to all passenger ships and cargo ships of 500 GT+ on international voyages.
What is the difference between DOC and SMC?
The Document of Compliance (DOC) is issued to the company after verifying its shore-side SMS meets ISM Code requirements. The Safety Management Certificate (SMC) is issued to each individual ship after verifying that the SMS is effectively implemented onboard. Both are valid for 5 years — the DOC requires annual verification, the SMC requires one intermediate verification between the 2nd and 3rd anniversary.
What does a Designated Person Ashore (DPA) do?
The DPA is the person designated by the company with direct access to the highest level of management. Their role is to monitor safety and pollution prevention operations across the fleet, ensure adequate resources are provided to ships, and serve as the formal link between company management and shipboard operations on all safety matters. The DPA must have appropriate qualifications, training, and experience.
What is a major non-conformity under the ISM Code?
A major non-conformity is an identifiable deviation posing a serious threat to personnel/vessel safety or a serious environmental risk requiring immediate corrective action. It also includes the lack of effective and systematic implementation of any ISM Code requirement. A major NC must be corrected before a DOC or SMC can be issued or renewed. During external audits, three months is typically allowed for correction.
How can digital tools help with ISM Code compliance?
Digital platforms like Marine Inspection address the core ISM challenge: proving the SMS is implemented, not just documented. Automated drill scheduling ensures required frequencies are met. Non-conformity workflows track every finding from identification through root cause to closure with evidence. Maintenance records prove the planned maintenance system is functioning. And real-time dashboards give the DPA fleet-wide visibility — exactly what auditors verify.
Prove Your SMS Is Implemented — Not Just Documented
The ISM Code's biggest challenge isn't writing procedures — it's proving they work. Marine Inspection turns your SMS from paper documentation into a living, auditable system with real-time evidence of implementation across every vessel in your fleet.
