The new requirements form the international framework through which Governments, ships and port facilities can co-operate to detect and deter acts, which threaten security in the maritime transport sector. In order to determine what security measures are appropriate, Governments must assess the threat and evaluate the risk of a potential unlawful act. The ISPS Code provides a standardized, consistent framework for managing
risk and permitting the meaningful exchange and evaluation of information between Contracting Governments, companies, port facilities, and ships. The requirements also include provisions, which establish the right of a State to impose control and compliance measures on ships in or intending to visit its ports. It also provides for Contracting Governments to take further action when relevant requirements are not met or when there are other clear grounds for taking such action. In addition, where a risk of attack has been identified, the coastal State concerned shall advise the ships concerned of the current security level; of any security measures that should be put in place by the ships concerned to protect themselves from attack; and of the security measures that the coastal State has decided to put in place.
Following adoption of SOLAS Chapter XI-2 and the ISPS Code in late 2002 Governments had until July 2004 to implement the mandatory element in their national laws and to make the necessary administrative and organizational alterations to facilitate the implementation of these maritime security instruments. Many Governments achieved this target though a number of interim arrangements were made which were subsequently altered and, in many States, later enhancements were made in the light of experience. A number of Governments have also applied security requirements to port facilities and ships not covered by the SOLAS Security Measures, including application to domestic shipping services and adoption of elements drawn from the ILO/IMO Code of Practice. However, gaps in their implementation and application can persist.