S.L. 499.35 ст. 32Port facility security assessments.

(1) The designated authority must carry out a port facility security assessment of each port facility within its control.

(2) The designated authority may authorize a recognised security organisation to carry out a port facility security assessment.

(3) If a port facility security assessment is carried out by a recognised security organisation, the designated authority -

(a) must review it for compliance with subregulation (5); and

(b) if satisfied that it complies with subregulation (5), may approve the assessment.

(4) A port facility security assessment must -

(a) be periodically reviewed and updated, taking into account changing threats or minor changes in the port facility; and

(b) if major changes take place to the port facility, be reviewed and updated as soon as practicable: Provided that the periodic review of the port facility security assessment shall be carried out at the latest five years after the assessments were carried out or last reviewed.

(5) A security assessment for a port facility security plan must include the following matters:

(a) the date when the assessment was completed or reviewed;

(b) the scope of the assessment, including assets, infrastructure and operations assessed;

(c) a summary of how the assessment was conducted, including details of the risk management process adopted;

(d) the skills and experience of the key persons who completed or participated in the assessment;

(e) a statement outlining the risk context or threat situation for the port facility;

(f) identification and evaluation of important assets, infrastructure and operations that need to be protected;

(g) identification of possible risks or threats to assets, infrastructure and operations, and the likelihood and consequences of their occurrence;

(h) identification of existing security measures, procedures and operations;

(i) identification of weaknesses, including human factors, in the infrastructure, policies and procedures;

(j) identification, selection and prioritization of possible risk treatments (for example, counter-measures and procedural changes that need to be implemented) and their effectiveness in reducing risk levels and vulnerabilities.

(6) A security assessment for a port facility operator’s operation must consider -

(a) the types of ships, and the types of cargoes transported by ships, served by the port facility;

(b) any special risks or threats associated with such ships and cargoes; and

(c) the elements identified in paragraphs 15.3 and 15.4 in Part B of the Code.

(7) A port facility security assessment may cover more than one port facility if -

(a) the operator, location, operation, equipment, and design of those port facilities are similar; and

(b) the designated authority agrees.

(8) When a port facility security assessment is completed, the person carrying out the port facility security assessment must prepare a report for the designated authority that consists of -

(a) a summary of how the assessment was conducted;

(b) a description of each vulnerability found during the assessment; and

(c) a description of counter measures that could be used to address each vulnerability.

(9) The report and the security assessment must be protected from unauthorised access or disclosure.