Marine Transportation Security Regulations

233 (1) The vessel security assessment shall be written in English or French and shall contain

• (a) a summary of how the on-site survey was conducted;

• (b) details of existing security procedures and operations;

• (c) a description of each vulnerability found during the assessment;

• (d) a description of security procedures that should be used to address each vulnerability;

• (e) a list of the key vessel operations that are important to protect;

• (f) conclusions as to the likelihood of possible security threats to key vessel operations; and

• (g) a list of identified weaknesses, including human factors, in the infrastructure, policies and procedures relating to the vessel.

(2) A vessel security assessment shall address the following elements in respect of the vessel:

• (a) its physical security;

• (b) its structural integrity;

• (c) personnel protection systems;

• (d) security procedures;

• (e) its radio and telecommunication systems, including computer systems and networks; and

• (f) any other element on board the vessel that might, if damaged or used illicitly, pose a risk to people, property or operations on board the vessel or at a marine facility.

(3) The vessel security assessment shall consider the security of all persons and the activities, services, operations, capacities and goods that are important to protect, including

• (a) the capacity to maintain safe navigation and emergency response;

• (b) cargo, particularly dangerous goods or substances;

• (c) ships’ stores;

• (d) the vessel’s security communication and surveillance systems, if any; and

• (e) any other security systems on the vessel.

(4) The vessel security assessment shall take into account all possible vulnerabilities, including those resulting from

• (a) any conflict between safety and security requirements;

• (b) any conflict between duties on board and security assignments;

• (c) the impact of watchkeeping duties and fatigue on vessel personnel alertness and performance;

• (d) security training deficiencies; and

• (e) deficiencies in security equipment and systems, including communication systems.