← Back to Blog
31 Aug 2026·Administrator·19 min read

ISM Code Standards and Ship Safety: A Complete Guide

ISM Code Standards and Ship Safety: A Complete Guide

Introduction: Why the ISM Code Decides How Smoothly Your Ship Operates

Every year thousands of merchant vessels call at Indonesian ports, from Tanjung Priok and Tanjung Perak to Belawan, Balikpapan, and Bitung. Almost all of them are measured against the same framework, the ISM Code. For ship operators this standard is not merely a stack of files produced when an auditor climbs the gangway, but the management system that decides whether a vessel sails on schedule or sits alongside for days after a Port State Control finding.

This guide explains what the ISM Code is, which vessels must comply, how a Safety Management System is structured, and how Document of Compliance and Safety Management Certificate audits work in Indonesian practice. It also covers operational realities that rarely appear in convention text, such as the most frequent causes of non-conformities and how to prepare a vessel before an annual verification. The material is drawn from field experience handling ship agency operations across nine major Indonesian ports, so the emphasis is on real implementation rather than quotation of regulations.

What Is the ISM Code? Legal Basis and Background

The ISM Code stands for the International Safety Management Code, formally titled the International Management Code for the Safe Operation of Ships and for Pollution Prevention. It was adopted by the International Maritime Organization through Assembly Resolution A.741(18) in 1993 and became legally binding once incorporated into SOLAS Chapter IX on Management for the Safe Operation of Ships. It entered into force in phases from 1 July 1998, which means compliance is an obligation rather than a recommendation for vessels subject to SOLAS.

The code emerged from a series of major casualties in the late 1980s, most notably the capsizing of the ferry Herald of Free Enterprise at Zeebrugge in 1987. Investigations found that the root causes were not purely technical but organisational, involving a weak safety culture and blurred lines of responsibility between shore management and the crew. The IMO concluded that safety could not be secured through construction and equipment standards alone, and had to be managed systematically by the shipping company itself.

For that reason the philosophy of the code differs from other maritime instruments. Instead of prescribing highly detailed technical specifications, it sets objectives to be achieved and leaves each company to design a system suited to its vessel types, trading routes, and scale of operation. The stated objectives are to ensure safety at sea, prevent human injury and loss of life, and avoid damage to the marine environment and to property.

Which Ships and Companies Must Comply

Implementation followed two phases. The first, from 1 July 1998, covered passenger ships including high-speed passenger craft, oil tankers, chemical tankers, gas carriers, bulk carriers, and high-speed cargo craft of 500 GT and above. The second, from 1 July 2002, extended the requirement to other cargo ships and mobile offshore drilling units of 500 GT and above.

It is important to understand that the code binds two entities at once, the ship and the company. The term Company does not always mean the registered owner; it refers to the party that has assumed operational responsibility for the vessel, whether owner, ship manager, or bareboat charterer. That party must formally agree in writing to take on the full duties involved, and its name must appear on the vessel certificate.

In Indonesia, oversight rests with the Directorate General of Sea Transportation under the Ministry of Transportation, based on Law Number 17 of 2008 on Shipping and its implementing regulations on ship safety management. For Indonesian-flagged vessels, audits and certificates may be handled directly by the Directorate General or delegated to a Recognized Organization such as Biro Klasifikasi Indonesia. Indonesian regulators also apply safety management principles to certain domestic vessels below the 500 GT threshold, so domestic operators should not assume they fall automatically outside the scope.

The Sixteen Elements and What Goes Into a Safety Management System

The code is divided into two parts. Part A contains elements 1 to 12 governing implementation, while Part B contains elements 13 to 16 governing certification and verification. Together these sixteen elements form the backbone of the Safety Management System, or SMS, that every company must establish and maintain.

Element 1 sets out general provisions and definitions. Element 2 requires a documented safety and environmental protection policy. Element 3 addresses company responsibility and authority, including a written definition of the organisational structure. Element 4 requires the appointment of a Designated Person Ashore, or DPA, who has direct access to the highest level of management and acts as the link between ship and office. Element 5 confirms the master's responsibility and authority, including overriding authority to take any decision in the interest of safety without waiting for office approval.

Element 6 covers resources and personnel, including crew qualifications, familiarisation, and training. Element 7 requires procedures for critical shipboard operations such as bunkering, enclosed space entry, and berthing manoeuvres. Element 8 covers emergency preparedness together with the drill and exercise programme. Element 9 governs reporting and analysis of non-conformities, accidents, and hazardous occurrences, which is the engine of continuous improvement. Element 10 addresses maintenance of the ship and equipment, element 11 covers document control, and element 12 requires internal audits and periodic management review.

In practice the quality of an SMS depends on how realistic its procedures are, not how thick the manual is. Documentation copied from a generic template without adaptation to vessel type and trade becomes a source of findings rather than protection. Auditors will ask about procedures the crew has never actually performed, and that gap becomes obvious within minutes of an interview.

Certification: DOC, SMC, Validity, and the Audit Cycle

Two principal certificates exist under this framework. The Document of Compliance is issued to the company once its management system has been audited and found compliant, and it lists the ship types covered. The Safety Management Certificate is issued to each individual vessel once it has been demonstrated that the ship genuinely operates the company system day to day.

A DOC is valid for a maximum of five years and must be verified annually within a window of three months before or after the anniversary date. An SMC is likewise valid for up to five years, but its verification is intermediate, carried out once between the second and third anniversary dates. A copy of the company DOC must be carried on board so it can be produced to inspecting officers. For new companies or ships newly entering a fleet, an Interim DOC valid for up to twelve months and an Interim SMC valid for up to six months are available.

Audit findings are graded as observations, non-conformities, and major non-conformities. A major non-conformity is a serious deviation that poses a threat to personnel or the vessel, and it must be corrected before the ship sails. If left unaddressed, certificates may be suspended or withdrawn, which effectively halts commercial operation until corrective action has been verified.

Day-to-Day Reality: PSC, Port Operations, and Crew Change

In Indonesia, compliance is most often tested through Port State Control inspections under the Tokyo MOU framework. Inspectors verify the validity of the DOC and SMC, then test whether the system is genuinely alive by asking for drill records, maintenance history, non-conformity reports, and evidence of familiarisation for newly joined crew. Systemic weaknesses, for example several minor findings that together indicate SMS failure, can lead to detention.

The connection with agency work is direct. When a vessel carries out a crew change service, relieving crew must receive familiarisation under element 6 before taking watchkeeping duties, and their competence documents must match what the SMS records. Similarly, PKKA services and port clearance require consistency between ship documents, the crew list, and certificate records, so even a small administrative discrepancy can trigger further questions from inspectors.

A ship agent who understands the framework can help operators assemble paperwork before arrival, coordinate surveyors for interim audits, and arrange logistics for spare parts needed to close maintenance findings. That kind of on-the-ground assistance normally runs through support services covering documentation, coordination with port authorities, and attendance during inspections.

Common Mistakes and Practical Audit Preparation

The most frequent failure is documentation that does not match practice. A manual may state that fire drills are held monthly while the record book shows only four entries in a year. The second common failure is closing non-conformity reports without root cause analysis, which guarantees the same finding reappears at the next audit.

The third involves treating the DPA appointment as a formality. If crew members cannot name the DPA or explain how to make contact, an auditor will conclude that the element 4 communication line does not function. The fourth is weak document control, such as superseded manual revisions still circulating on board after the office has issued an updated version.

Preparation can be reduced to three practical steps. Run a simulated internal audit at least one month before the scheduled verification and treat it as the real thing. Ensure drill records, maintenance logs, rest hour records, and familiarisation checklists are complete for the full preceding twelve months. Finally, brief the crew on the safety policy, the master's authority, and reporting procedures, because auditors frequently test understanding through direct interview rather than paperwork alone.

FAQ

Q: What is the essential difference between a DOC and an SMC?

A: The DOC is issued to the company and proves that its safety management system has been audited and found compliant for specified ship types. The SMC is issued to an individual vessel and proves that the ship actually operates that same system in practice. A copy of the DOC must be kept on board, while the original SMC stays with the vessel it covers.

Q: Do ships below 500 GT need this certification?

A: Under SOLAS Chapter IX, the international obligation applies to vessels of 500 GT and above engaged on international voyages. Flag states may nevertheless impose additional requirements on smaller domestic vessels, and Indonesia applies safety management requirements to several categories of domestic shipping. Operators should confirm their vessel status directly with the Directorate General of Sea Transportation or through the agent handling their certification.

Q: How long does initial certification take?

A: For a new company, developing and implementing an SMS typically takes three to six months before it is ready for audit. The code also expects the system to have been in operation for a period, generally around three months on board, before the initial audit can take place. Interim DOC and Interim SMC certificates exist precisely so that operations can continue through this transition.

Q: What happens if Port State Control identifies a major non-conformity?

A: The vessel will normally not be permitted to sail until the finding is corrected, or at least downgraded through corrective action accepted by the inspector. In serious cases the flag state may suspend the SMC and review the company DOC. The commercial impact is significant because detentions are recorded in the Tokyo MOU database and affect the vessel risk profile at subsequent inspections.

Conclusion

At its core the ISM Code asks for one simple thing, consistency between what is written and what is done. Companies that build an SMS around the real conditions of their fleet pass audits smoothly, while those treating the system as an administrative formality keep meeting the same findings year after year. Investment in safety culture is always cheaper than the cost of detention, schedule disruption, and insurance claims.

For operators trading in Indonesian waters, document readiness and local coordination make the difference. An agent who understands port authority procedures, immigration workflows, and certification requirements is valuable precisely when an audit window collides with a tight cargo schedule. Planning ahead consistently costs less than emergency remediation at the last minute.

Butuh bantuan crew change di Indonesia? Hubungi Nusantika via WhatsApp — kami siap 24/7.