Template A - Guidance document template€¦ · Web viewReducing the vulnerability of Australian...

52
Guidance and Templte for Preparing an Offshore Security Plan for Offshore Service Providers, August 2015 1 Guidance and Template for Preparing an Offshore Security Plan for Offshore Service Released August 2015

Transcript of Template A - Guidance document template€¦ · Web viewReducing the vulnerability of Australian...

Page 1: Template A - Guidance document template€¦ · Web viewReducing the vulnerability of Australian ships, ports and other ships within Australia to terrorist attack without undue disruption

Guidance and Templte for Preparing an Offshore Security Plan for Offshore Service Providers, August 2015 1

Guidance and Template for Preparing an Offshore Security Plan for Offshore Service Providers

Released August 2015

Page 2: Template A - Guidance document template€¦ · Web viewReducing the vulnerability of Australian ships, ports and other ships within Australia to terrorist attack without undue disruption

Disclaimer

The Commonwealth Government has prepared this guide with due care. However, the material contained in this guide is made available on the understanding that the Commonwealth Government is not providing professional advice and that users exercise their own skill and care with respect to its use and seek independent advice if necessary.

The Commonwealth Government takes no responsibility for any errors, omissions or changes to the information that may occur and disclaims any responsibility and liability to any person, organisation or the environment in respect of anything done, or omitted to be done, in reliance upon information contained in this guide.

The information contained in this guide is guidance material only. The information in no way overrides Commonwealth or State legislation. Port operators/offshore facility operators/ship operators should refer to the Maritime Transport and Offshore Facilities Security Act 2003 and the Maritime Transport and Offshore Facilities Regulations 2003 before submitting plans for approval.

2 Guidance and Templte for Preparing an Offshore Security Plan for Offshore Service Providers, August 2015

Page 3: Template A - Guidance document template€¦ · Web viewReducing the vulnerability of Australian ships, ports and other ships within Australia to terrorist attack without undue disruption

Introduction

Requirements for Offshore Security Plans for Offshore Service Providers

In accordance with the Act and Regulations, certain offshore service providers are required to submit offshore security plans for review and approval by the Secretary.

The requirements for offshore security plans are set out in sections 100G, 100H and 100I of the Act and further requirements are reflected in Part 5Aof the Regulations. This guide considers offshore security plan requirements for offshore service providers as set out in the Act and Regulations.

Maritime Security Outcomes

The Act establishes an outcomes-based preventive security framework that will enhance Australia's maritime security arrangements.

1. Fulfilling Australia’s obligations under Chapter XI-2 of the Safety of Life at Sea (SOLAS Conven-tion) and the International Ship and Port Facility Security Code (ISPS Code), including those with regard to the rights, freedoms and welfare of seafarers,

a) Reducing the vulnerability of Australian ships, ports and other ships within Australia to terrorist attack without undue disruption to trade;

b) Reducing the risk that maritime transport is used to facilitate terrorist or other unlawful activities; and

c) Ensuring effective communication of security information among maritime industry par-ticipants and government agencies.

Each offshore security plan submitted for approval must demonstrate an appropriate contribution toward these security outcomes.

Offshore Security Plan Requirements

Part 5A of the Regulations contains requirements that must be addressed in all offshore security plans. Division 5A.3 of the Regulations contains requirements that are specific to offshore security plans for offshore service providers. Plans that address these requirements will be considered to adequately contribute to the maritime security outcomes.

Guidance and Templte for Preparing an Offshore Security Plan for Offshore Service Providers, August 2015 3

Page 4: Template A - Guidance document template€¦ · Web viewReducing the vulnerability of Australian ships, ports and other ships within Australia to terrorist attack without undue disruption

The Department recognises that there are many different approaches that offshore service providers can take to prepare an offshore security plan. This guide presents a template that could be used by offshore service providers to prepare an offshore security plan that will meet the requirements of the Act and Regulations.

It is considered that a fully completed offshore security plan that uses this template will provide the Secretary with sufficient information to determine if the plan was made in accordance with the Act and Regulations. The template, which is outcomes based, can also be used to demonstrate that implementation of the plan will make an appropriate contribution towards the achievement of the maritime security outcomes described in the Act.

The template is provided as guidance only and each offshore service provider should consider the suitability of it for their local circumstances prior to adopting it for their own use. Text in italics used in each section of the template describes the type of information expected under the subject headings.

It is suggested that offshore service providers consider:

the information they wish to present in the plan; if the information presented is likely to change frequently during the period of the plan, more

generic information that is not a regulatory requirement may be needed; and whether the plan meets the content and form requirements of the Act and Regulations.

If the Secretary is satisfied that the plan submitted for his approval adequately addresses the specific requirements of the Act and Regulations, the offshore facility operator will receive a written notice of approval.

Contact Details

Regulation 5A.120 requires that a security plan for an offshore service provider be submitted with an accompanying document, separate to the plan and not forming part of the plan, detailing a number of key contact details for use during day-to-day business hours or during an emergency. Contact details submitted as an accompanying document, separate from the plan, may be varied without the variation process described in section 100LA of the Maritime Transport and Offshore Facilities Security Act.

An offshore service provider must, within 2 working days after becoming aware of a change in any of the information given under regulation 5A.120 or 5A.125, notify the Secretary, in writing, of the change.

4 Guidance and Templte for Preparing an Offshore Security Plan for Offshore Service Providers, August 2015

Page 5: Template A - Guidance document template€¦ · Web viewReducing the vulnerability of Australian ships, ports and other ships within Australia to terrorist attack without undue disruption

Submitting the Template

Upon completion, submit your Plan electronically (minus these introductory pages) to:

[email protected]

or by mail to:

National Coordinator

Office of Transport Security

GPO Box 1966

CANBERRA ACT 2601

Guidance and Templte for Preparing an Offshore Security Plan for Offshore Service Providers, August 2015 5

Page 6: Template A - Guidance document template€¦ · Web viewReducing the vulnerability of Australian ships, ports and other ships within Australia to terrorist attack without undue disruption

The Maritime, Ship and Offshore Security Plan And Security Plan Variation Approval Process

Guidance and Templte for Preparing an Offshore Security Plan for Offshore Service Providers, August 2015 6

Page 7: Template A - Guidance document template€¦ · Web viewReducing the vulnerability of Australian ships, ports and other ships within Australia to terrorist attack without undue disruption

Guidance and Templte for Preparing an Offshore Security Plan for Offshore Service Providers, August 2015 7

Page 8: Template A - Guidance document template€¦ · Web viewReducing the vulnerability of Australian ships, ports and other ships within Australia to terrorist attack without undue disruption

Contact Details

This section accompanies [insert title of plan], but is not part of it

Contact Details for the <Osshore Service ProviderName>

Legal Name < Legal Name>

ACN < ACN>

Trading Name < Trading Name>

ABN <ABN>

Physical Address < Physical Address>

Mailing Address (if different) < Mailing Address (if different)>

Business Phone Number <Phone>

Fax Number <Fax>

Email Address <Email>

Chief Executive Officer <Name>

Offshore Service Provider Security Officer

<Name>

Business Address <Address>

Mailing Address (if different) <Address>

Business Phone Number <Phone>

Guidance and Templte for Preparing an Offshore Security Plan for Offshore Service Providers, August 2015 8

Page 9: Template A - Guidance document template€¦ · Web viewReducing the vulnerability of Australian ships, ports and other ships within Australia to terrorist attack without undue disruption

Mobile Number <Mobile>

Fax Number <Fax>

Email Address <Email>

24 Hour Security Contact Number

<Phone>

Contact details for Offshore Facility Security Officers (OFSO) for each offshore facility where the offshore service provider operates

OFSO Name <Name>

Business Address <Address>

Mailing Address (if different) <Address>

Business Phone Number <Phone>

Mobile Number <Mobile>

Fax Number <Fax>

Email Address <Email>

24 Hour Security Contact Number

<Phone>

Guidance and Templte for Preparing an Offshore Security Plan for Offshore Service Providers, August 2015 9

Page 10: Template A - Guidance document template€¦ · Web viewReducing the vulnerability of Australian ships, ports and other ships within Australia to terrorist attack without undue disruption

Contact details for Port Security Officers in each port where the offshore service provider has a supply base or operates

OFSO Name <Name>

Business Address <Address>

Mailing Address (if different) <Address>

Business Phone Number <Phone>

Mobile Number <Mobile>

Fax Number <Fax>

Email Address <Email>

24 Hour Security Contact Number

<Phone>

Contact details for Airport Security Contact Officers in each airport where the offshore service provider has a supply base or operates

ASO Name <Name>

Business Address <Address>

Mailing Address (if different) <Address>

Business Phone Number <Phone>

Mobile Number <Mobile>

Fax Number <Fax>

10 Guidance and Templte for Preparing an Offshore Security Plan for Offshore Service Providers, August 2015

Page 11: Template A - Guidance document template€¦ · Web viewReducing the vulnerability of Australian ships, ports and other ships within Australia to terrorist attack without undue disruption

Email Address <Email>

24 Hour Security Contact Number

<Phone>

Note: An offshore service provider must, within 2 working days after becoming aware of a change in any of the information given under Regulation 5A.120, notify the Secretary, in writing, of the change.

Guidance and Templte for Preparing an Offshore Security Plan for Offshore Service Providers, August 2015 11

Page 12: Template A - Guidance document template€¦ · Web viewReducing the vulnerability of Australian ships, ports and other ships within Australia to terrorist attack without undue disruption

This section accompanies [insert title of plan], but is not part of it

Offshore service provider may provide the Secretary information required under Regulation 5A.20 in an accompanying document, separate from the plan, which may be varied without the variation process described in section 100LA of the Act.

An offshore service provider that is required to have a security plan must give to the operator of each offshore facility to which the service provider conducts operations:

a) the information set out in regulation 5A.120; andb) a description of the boundaries of the service provider’s supply base and the arrangements made

to ensure the security of goods that are to be transported to the facility; andc) details of each vessel or aircraft operated by the service provider to service the facility; andd) the measures to be used by the service provider to inform persons of the security arrangements,

including any security zones, at the service provider’s supply base; ande) details of the measures to be used to confirm the identity of persons who are allowed to enter:

i. the supply base; andii. any security zone established in the supply base; andiii. a vessel or aircraft operated by the service provider.

Note: The information for paragraph (a) must include the contact details for the Offshore Provider Security Officer (OSPSO).

It is recommended that the information provided by the offshore service provider to the offshore facility operator accompanies the plan. This indicates to the Secretary that the offshore service provider has complied with this requirement and advises the Secretary of the information provided.

12 Guidance and Templte for Preparing an Offshore Security Plan for Offshore Service Providers, August 2015

Page 13: Template A - Guidance document template€¦ · Web viewReducing the vulnerability of Australian ships, ports and other ships within Australia to terrorist attack without undue disruption

Offshore Security Plan

For

<OFFSHORE SERVICE PROVIDER NAME>

At

<PORT/AIRPORT/LOCATION NAME>

Date: DD/MM/YYYY

Submitted by [Name of authorised person]

Position [Position]

Signature [Signature]

Date [DD/MM/YY]

Security Classification [Classification]

Revision Number [Revision Number]

Copy Number [Copy Number]

<<Name of Offshore Service Provider>> Offshore Security Plan, Version #, Month and Year 13

Page 14: Template A - Guidance document template€¦ · Web viewReducing the vulnerability of Australian ships, ports and other ships within Australia to terrorist attack without undue disruption

Contents

Offshore Security Plan............................................................................................................................12

Contents...................................................................................................................................................13

1. Administrative Details......................................................................................................................15

1.1 Authority......................................................................................................................................15

1.2 Document Protection...................................................................................................................15

1.3 Document Control.......................................................................................................................15

2. Scope.................................................................................................................................................17

2.1 Port Service Provider Operations...............................................................................................17

3. Consultation, Communication and Coordination.........................................................................18

3.1 Communication and Consultation...............................................................................................18

3.2 Offshore Service Provider Employees and Contractors.............................................................18

3.3 Declaration of Security................................................................................................................19

4. Operation of the Plan.......................................................................................................................20

4.1 Review and Audit........................................................................................................................20

4.2 Modification and Updating of Plan..............................................................................................20

4.3 Qualifications and Responsibilities.............................................................................................21

4.4 Knowledge and Training.............................................................................................................22

4.5 Drills and Exercises.....................................................................................................................23

4.6 Occupational Health and Safety.................................................................................................23

5. Security Measures and Procedures...............................................................................................24

5.1 Security Assessment...................................................................................................................24

5.2 Security Measures and Procedures............................................................................................25

5.2.1 Maritime Security Level 1....................................................................................................29

14 <<Name of Offshore Service Provider>> Offshore Security Plan, Version #, Month and Year

Page 15: Template A - Guidance document template€¦ · Web viewReducing the vulnerability of Australian ships, ports and other ships within Australia to terrorist attack without undue disruption

5.2.2 Maritime Security Levels 2 and 3.........................................................................................30

Attachment 1 - Offshore Service Provider Security Assessment.......................................................33

Attachment 2 - Security Measures and Procedures............................................................................34

Annex 1 - Declaration of Security (Sample only).................................................................................35

Annex 1 - Offshore Security Incident Report Form..............................................................................38

<<Name of Offshore Service Provider>> Offshore Security Plan, Version #, Month and Year 15

Page 16: Template A - Guidance document template€¦ · Web viewReducing the vulnerability of Australian ships, ports and other ships within Australia to terrorist attack without undue disruption

1. Administrative Details1.1 AuthoritySection 100B of the Maritime Transport and Offshore Facilities Security Act 2003 (the Act) together with regulation 5A.110 of the Maritime Transport and Offshore Facilities Security Regulations (the Regulations) requires certain offshore industry participants, including offshore service providers, to have an offshore security plan. The Regulations also set out certain requirements which must be met or addressed in offshore security plans.

Regulation 1.06 prescribes the offshore industry participants known as offshore service providers.

The plan must be submitted for approval to the Secretary of the Department of Infrastructure, Transport, Regional Development and Local Government (the Department) with the authority of the offshore service provider. This section of the plan must outline who has authorised the offshore security plan on behalf of the offshore service provider and may also include the organisation’s security policy. The intention is to demonstrate that the organisation supports the implementation of the plan.

1.2 Document ProtectionRegulation 5A.175 requires that the offshore service provider ensure the offshore security plan is protected against unauthorised access, amendment and disclosure.

This section must be used to explain how the offshore service provider will protect the security plan from unauthorised disclosure. It should refer to the security classification of the document for internal purposes and to specific procedures to be taken to prevent unauthorised access, amendment and disclosure of the document.

1.3 Document ControlThe offshore service provider may wish to include a document control statement in their plan. This may include specific procedures for the revision and update of the plan should modification be required. The table below can be used to identify particular amendments to the document.

16 <<Name of Offshore Service Provider>> Offshore Security Plan, Version #, Month and Year

Page 17: Template A - Guidance document template€¦ · Web viewReducing the vulnerability of Australian ships, ports and other ships within Australia to terrorist attack without undue disruption

Document Revision Record

Version Section Number(s)

Page Numbers Revision/ Variation Date

Date of Approval

A All All November 2005 NA

1 All All February 2006 30 June 2006

2 All All December 2007 26 January 2008

For unissued versions and updates, letters A, B, C etc. to be used.

For original issued versions and updates, numbers 0, 1, 2 etc. to be used.

Operators that adopt this amendment record-keeping process should submit the plan revision/variation for approval using the next due version or update (in anticipation of the plan being approved). Plans should not be submitted as un-issued versions/update or draft.

<<Name of Offshore Service Provider>> Offshore Security Plan, Version #, Month and Year 17

Page 18: Template A - Guidance document template€¦ · Web viewReducing the vulnerability of Australian ships, ports and other ships within Australia to terrorist attack without undue disruption

2. Scope2.1 Port Service Provider OperationsThis section should describe what operations are covered in the plan. The offshore service provider plan should cover those activities that involve offshore facility / ship interfaces. This section must also describe the boundaries of the supply base (see Regulation 5A.20(b)) and identify whether operations are conducted within a security regulated port or airport.

18 <<Name of Offshore Service Provider>> Offshore Security Plan, Version #, Month and Year

Page 19: Template A - Guidance document template€¦ · Web viewReducing the vulnerability of Australian ships, ports and other ships within Australia to terrorist attack without undue disruption

3. Consultation, Communication and Coordination1

Regulation 5A.155 requires that offshore security plans for offshore service providers set out a mechanism for consultation between the offshore service provider and:

a) each offshore facility operator serviced by the service provider; andb) the operator of each security regulated port and each airport from which the service provider op-

erates; andc) any other stakeholder who may be affected by the implementation of the plan; andd) the service provider’s employees (or their representatives) regarding security measures and pro-

cedures to be implemented.

3.1 Communication and ConsultationIt is critical that the operation of the security plan does not hinder or obstruct compliance with another operator’s security plan. Offshore security plans for offshore service providers should complement the security plan for offshore facility operators.

In this section of the plan the offshore service provider must explain the procedures taken to consult with other offshore industry participants (OIPs) and stakeholders.

3.2 Offshore Service Provider Employees and ContractorsAs offshore service provider’s employees and contractors will need to assist with the implementation of security measures and procedures, this section of the security plan must detail the mechanism by which the offshore service provider will consult with its employees and contractors regarding security measures and procedures to be implemented.

1 This section of the plan will provide information on how the offshore service provider will contribute to the achievement of the Maritime Security Outcomes at section 3(4)(d) of the MTOFSA and how security information is communicated effectively among Offshore Industry Participants and government agencies with maritime transport security responsibilities.

<<Name of Offshore Service Provider>> Offshore Security Plan, Version #, Month and Year 19

Page 20: Template A - Guidance document template€¦ · Web viewReducing the vulnerability of Australian ships, ports and other ships within Australia to terrorist attack without undue disruption

3.3 Declaration of SecurityThe Declaration of Security (DOS) is an agreement between an offshore service provider and another OIP on the types of security measures and procedures that will be put in place when interfacing with the participant. It outlines who has responsibility for providing security measures required under the agreement. The requirements for a DOS can be found in Regulation 5A.170.

The offshore security plan must identify circumstances when a DOS may be requested, eg. when interfacing with a ship at a higher security level. The offshore security plan must also detail the procedures for negotiating the security measures and responsibilities in the DOS and must explain how the measures in the DOS will be implemented to ensure compliance. A template for a DOS is at Annex 1. The template has been adopted from Part B Appendix 1, of the ISPS code. The DOS template is available from the Department’s website and need not to be included with the security plan.

20 <<Name of Offshore Service Provider>> Offshore Security Plan, Version #, Month and Year

Page 21: Template A - Guidance document template€¦ · Web viewReducing the vulnerability of Australian ships, ports and other ships within Australia to terrorist attack without undue disruption

4. Operation of the Plan4.1 Review and AuditRegulations 1.50 and 5A.10 set out the requirements for audits and reviews of offshore security plans.

This section should be used to explain how the offshore service provider will ensure that the plan is effective and adequate and has been implemented correctly.

Offshore security plans for offshore service providers must include:

a) a schedule of security plan audits by internal and external auditors; andb) the circumstances, in addition to the occurrence of a security incident, in which a security plan re-

view must be conducted; andc) the procedures for conducting a security plan audit including a process for selecting auditors who

are independent of the matters being audited; andd) the procedures for conducting a security plan review including a process for consultation during

the review.

Note: External audits are those which are conducted by external organisations or consultants on behalf of the offshore service provider.

4.2 Modification and Updating of PlanRegulation 5A.150(1)(i) requires offshore service providers to include in their plan procedures for modifying the plan to correct deficiencies or to update the plan to take into account changes to a relevant facility and to the service provider.

This section of the plan should outline the mechanisms in place to ensure appropriate and timely modification and updating of a security plan, should deficiencies in the plan be identified or any material changes made to a facility’s physical environment or procedures that impact on provisions in the plan.

Methods for communicating such modifications and updates to all affected parties should also be disclosed.

<<Name of Offshore Service Provider>> Offshore Security Plan, Version #, Month and Year 21

Page 22: Template A - Guidance document template€¦ · Web viewReducing the vulnerability of Australian ships, ports and other ships within Australia to terrorist attack without undue disruption

4.3 Qualifications and ResponsibilitiesRegulations 5A.140 and 5A.145 set out the requirements for responsibilities and training of offshore service provider security officers and offshore service provider personnel with a responsibility for security. Regulation 1.34(3) provides more information on the mandatory duties of an offshore service provider security officer.

Each offshore security plan for an offshore service provider must detail the specific duties and responsibilities of the offshore service provider security officer and other security personnel. For example, the duties and responsibilities of any maritime security guards employed or contracted by the offshore service provider.

A table to record information on the responsibilities of security related positions could be formatted as follows:

Position Responsibilities

<insert the position title>

<insert the responsibilities >

Offshore Service Provider Security Officer

Refer to Regulation 1.34(3) for mandatory duties

Maritime Security Guards

Security Duty Officer

22 <<Name of Offshore Service Provider>> Offshore Security Plan, Version #, Month and Year

Page 23: Template A - Guidance document template€¦ · Web viewReducing the vulnerability of Australian ships, ports and other ships within Australia to terrorist attack without undue disruption

4.4 Knowledge and TrainingThe offshore service provider must ensure that personnel with responsibility for security have adequate knowledge, or have received appropriate training, to be able to carry out their duties.

The security plan must provide the following information for security personnel as per Regulations 5A.140 and 5A.145:

a) the knowledge, skills and other requirements for the security-related aspects of their positions;b) the training or qualifications that satisfy those requirements; andc) the training that must be given to such personnel.

The table below can be used to record the training requirements for each position.

Position Required Knowledge or Training

<Insert the Position title>

<insert the knowledge and training requirements for the position here

Maritime Security Guards

Knowledge / Skills

Ability to conduct security patrols

Ability to maintain access control points for pedestrians and vehicles

Ability to monitor and control people’s behaviour

Self defence and restraint skills

Qualifications

Certificate II in Security Operations or appropriate industry equivalent such as state and territory licensing.

Each plan should also include, or make reference to, a training register to record which staff have received appropriate training or have sufficient knowledge to perform their duties. Details of the training should be documented as well as how the offshore service provider has determined staff have the required knowledge to undertake their security duties.

<<Name of Offshore Service Provider>> Offshore Security Plan, Version #, Month and Year 23

Page 24: Template A - Guidance document template€¦ · Web viewReducing the vulnerability of Australian ships, ports and other ships within Australia to terrorist attack without undue disruption

4.5 Drills and ExercisesRegulation 5A.150(1)(g) requires that each offshore security plan for an offshore service provider include procedures for conducting drills and exercises associated with the plan.

This should include a timetable of when the drills are to be conducted and how records of the results of drills and exercises will be kept and secured.

4.6 Occupational Health and SafetySection 100G(1)(f) of the Act requires that the provision of an offshore security plan complement, to the fullest extent possible, the occupational health and safety requirements under the laws of the Commonwealth, a State or Territory applying at a facility.

This section should contain a statement to this effect, describing the alignment of security measures outlined in the plan with applicable occupational health and safety requirements.

24 <<Name of Offshore Service Provider>> Offshore Security Plan, Version #, Month and Year

Page 25: Template A - Guidance document template€¦ · Web viewReducing the vulnerability of Australian ships, ports and other ships within Australia to terrorist attack without undue disruption

5. Security Measures and Procedures5.1 Security AssessmentAn offshore service provider security plan must include a security assessment. The security assessment must be prepared in accordance with Regulations 5A.05 and 5A.135. Also, in accordance with section 100G(2) of the Act, a security assessment must take into account any documents required by the Secretary. Further information on conducting a security risk assessment may be found in the Offshore Security Assessment Guidance Paper located at the Department website.

The Secretary has developed the Offshore Oil and Gas Risk Context Statement to provide the offshore oil and gas industry sector with information on the maritime strategic risk context and the current security environment in Australia. Offshore oil and gas service providers must explicitly consider each of the risks identified in the Offshore Oil and Gas Risk Context Statement.

The Offshore Oil and Gas Risk Context Statement is available for offshore service providers by contacting: [email protected]

For further information, refer to Standards Australia and Standards New Zealand’s HB 436, Risk Management Guidelines – Companion to AS/NZS 4360:1999 Risk Management; which updates AS/NZS 4360:1999 and provides greater emphasis on:

the importance of embedding risk management practices in the organisations culture and pro-cesses,

the management of potential gains as well as potential losses;

HB 436 and AS/NZS 4360:1999 are available from www.standards.com.au

The risk treatments identified in the security assessment should be referred to in Security Measures and Procedures at 5.2 below. The completed security assessment must be attached to the plan at Attachment 2.

Note: Submissions of revised offshore service provider plans require the submission of a revised or reviewed security assessment.

<<Name of Offshore Service Provider>> Offshore Security Plan, Version #, Month and Year 25

Page 26: Template A - Guidance document template€¦ · Web viewReducing the vulnerability of Australian ships, ports and other ships within Australia to terrorist attack without undue disruption

5.2 Security Measures and ProceduresThis section must be used to identify each security measure and/or procedure to be implemented under the plan. However the specific details of each security measure and/or procedure could be included in Attachment 4. It is expected that a security plan for an offshore service provider will include security arrangements to treat a range of different security risks and that individual measures and procedures may address a number of the risks that have been identified.

This section should identify who is responsible for each of the measures and procedures. If responsibility for implementation of a measure or procedure is not identified, then the Secretary will request further information from the offshore service provider which may cause delays in the approval process.

Note: Regulation 5A.150 sets out a range of items that must be addressed in the offshore service provider security plan. While some of these items have been addressed in other sections of the security plan, the items below should be addressed in the Security Measures and Procedures part of the document. In general, it would be expected that measures and procedures addressing these items would be listed for maritime security levels 1, 2 and 3.

Regulation 5A.150(1)(a)

Measures to prevent unauthorised carriage or possession of weapons or prohibited items at a supply base of the service provider or on board vessels or aircraft operated by the service provider;

If appropriate, these measures could include but are not limited to:

random checks on cargo to be transferred to a security regulated offshore facility/ship; bag searches of passengers when offshore service providers are transferring passengers to se-

curity regulated offshore facilities/ships; screening and clearing procedures to prevent weapons and prohibited items from transfer onto

offshore service provider vessels.

26 <<Name of Offshore Service Provider>> Offshore Security Plan, Version #, Month and Year

Page 27: Template A - Guidance document template€¦ · Web viewReducing the vulnerability of Australian ships, ports and other ships within Australia to terrorist attack without undue disruption

Regulation 5A.150(1)(b) Measures to prevent unauthorised access to a supply base of, or a vessel or aircraft operated by, the service provider;If appropriate, these measures could include but are not limited to:

perimeter access control of any land controlled by the service provider; access prevention arrangements, eg agreement with the State police on response arrangements; limiting unauthorised access to vessels under the control of the offshore service provider; procedures for checking the bona-fide's of people that wish to enter the offshore service

provider’s area, vessels or helicopters.

Note: For determining measures for regulations 5A.150(1)(a) and (b), regulation 5A.150(2) requires the service provider to have regard to special risk or threats associated with the types of vessels and aircraft and the types of cargoes transported by vessels and aircraft serving an offshore facility.

Regulation 5A.150(1)(c) Procedures for responding to security threats or breaches of security, including procedures for maintaining critical operations of the offshore service provider;

If appropriate, these procedures could include but are not limited to procedures for the handling of bomb and other threats.

Regulation 5A.150(1)(d)

Procedures for responding to security threats or breaches of security occurring during any inter-face between a vessel or aircraft and a facility;

Identify measures for reporting security threats or breaches of security when interfacing with a security regulated offshore facility. Refer to any reciprocal measures to be implemented in agreement with offshore facilities serviced by the service provider.

<<Name of Offshore Service Provider>> Offshore Security Plan, Version #, Month and Year 27

Page 28: Template A - Guidance document template€¦ · Web viewReducing the vulnerability of Australian ships, ports and other ships within Australia to terrorist attack without undue disruption

Regulation 5A.150(1)(e)

Procedures for responding to any security directions given by the Secretary;Part 2 Division 4 of the Act sets out the requirements for the Secretary to give security directions. In the case of an offshore service provider, the security direction may be given directly from the Secretary or may be given to the offshore facility operator of the security regulated offshore facility who is then required to pass the direction on to the appropriate offshore industry participants which may include an offshore service provider.

If appropriate, these procedures could include but are not limited to:

management procedures to ensure that a security direction is implemented as soon as possible after it is given;

procedures for communicating the security direction to employees and any other stakeholders.

Regulation 5A.150(1)(f) Procedures for evacuation of a supply base of the service provider in case of security threats or breaches of security;This should include reference to a current evacuation plan. The evacuation plan does not need to be included with the security plan.

Regulation 5A.150(1)(g) Procedures for drills and exercises associated with the plan;This should include a timetable of when the drills are to be conducted and how records of the results of drills and exercises will be kept and secured.

Regulation 5A.150(1)(h) Procedures for interfacing with the security activities of vessels and offshore facilities serviced by the service provider;Detail agreed measures for interfacing with the security activities of offshore facilities and maritime industry participants such as security regulated ships and aircraft operators which the service provider may interface with.

28 <<Name of Offshore Service Provider>> Offshore Security Plan, Version #, Month and Year

Page 29: Template A - Guidance document template€¦ · Web viewReducing the vulnerability of Australian ships, ports and other ships within Australia to terrorist attack without undue disruption

Regulation 5A.150(1)(j) Procedures for reporting occurrences which threaten the security of the offshore service provider;Part 9 of the Act sets out the requirements for offshore facility security incidents. Offshore service providers are required under section 175(4) to report incidents. Section 181 of the Act requires the offshore service provider to report incidents to the Secretary and where appropriate the offshore facility operator or the ship operator or master of the ship.

Section 182 of the Act suggests that the Secretary may publish a notice in the Gazette setting out the information required in the incident report, and the method of submitting an incident report. Advice on submitting incident reports will be provided on the Department’s website.

If appropriate, these procedures could include but are not limited to:

procedures for reporting of security incidents in accordance with the Act; internal procedures for employees to report security incidents to management or the offshore ser-

vice provider security officer; procedures for raising the awareness of staff of their responsibilities for reporting incidents.

Regulation 5A.150(1)(l)

Measures to ensure the security of passengers, cargo and cargo handling equipment under the control of the offshore service provider;

Where the offshore service provider is involved in moving passengers and/or cargo to and from offshore facilities, the security plan should describe measures to protect the passengers, cargo and the cargo handling equipment.

If appropriate, these measures could include but are not limited to:

security barriers around cargo storage and/or passenger embarkation areas; security guard patrols to protect cargo while it is under the control of the offshore service

provider, and to protect the equipment used by the offshore service provider; closed circuit TV systems to monitor areas where cargo is stored.

<<Name of Offshore Service Provider>> Offshore Security Plan, Version #, Month and Year 29

Page 30: Template A - Guidance document template€¦ · Web viewReducing the vulnerability of Australian ships, ports and other ships within Australia to terrorist attack without undue disruption

Regulation 5A.150(1)(m)

Procedures in case the ship security alert system of a ship is activated while interfacing with the service provider;

The ship security alert system of a ship may be activated in the event of a security incident occurring on board the ship. This alert will be received by the ship operator and the alert will be passed on to the appropriate authorities in the country where the ship is located.

An offshore service provider may be asked to assist the authorities in dealing with a ship that has activated its security alert system. The offshore security plan should include measures to ensure that the offshore service provider will co-operate with authorities in dealing with this situation.

5.2.1 Maritime Security Level 1

Regulation 5A.160 sets out the requirements for maritime security level 1 security measures. This must include security measures identified in the security assessment for the operation for implementation at level 1. (See Regulation 5A.160(a)).

In this section, the offshore service provider must identify the specific security measures and procedures to be undertaken or implemented at maritime security level 1 - which is the level at which the offshore service provider normally operates.

This table can be used to record the security measures.

Table: Security Measures and Procedures at Security Level 1

Description of security measure or procedure Person or organisation with responsibility for implementing the measure or procedure

Eg, employee security clearances, security guard patrols

offshore service provider security officer

30 <<Name of Offshore Service Provider>> Offshore Security Plan, Version #, Month and Year

Page 31: Template A - Guidance document template€¦ · Web viewReducing the vulnerability of Australian ships, ports and other ships within Australia to terrorist attack without undue disruption

Note: Where implementation of a security measure or procedure includes a shared responsibility, then the responsibility of each party should be clearly identified. Written evidence of shared responsibilities, such as memorandums of understanding or contracts should be attached to confirm security arrangements.

This section should also include an implementation timetable to meet the requirements of Regulation 5A.160(c). This table must show which measures and procedures are already in place and if not in place indicate when they will be implemented, and what interim measures will be put in place until they are ready. A sample table for this purpose is provided on page 22. Alternatively, an implementation timetable may be included as an attachment to the plan.

5.2.2 Maritime Security Levels 2 and 3

Regulation 5A.165 requires that the security plan for the offshore service provider include a list of the additional security measures that will be implemented if the Secretary declares that maritime security level 2 or 3 is in force.

The following tables can be used to record the security measures and procedures.

Table: Security Measures and Procedures at Security Level 2

Description of security measure or procedure Person or organisation with responsibility for implementing the measure or procedure

eg. increased number of security patrols, limit access for non essential personnel

eg. offshore service provider security officer

Note: Maritime security level 2 measures or procedures are in addition to all of the measures and procedures in force at security level 1.

<<Name of Offshore Service Provider>> Offshore Security Plan, Version #, Month and Year 31

Page 32: Template A - Guidance document template€¦ · Web viewReducing the vulnerability of Australian ships, ports and other ships within Australia to terrorist attack without undue disruption

Table: Security Measures and Procedures at Security Level 3

Description of security measure or procedure Person or organisation with responsibility for implementing the measure or procedure

ie. cease operations interfacing with security regulated offshore facilities/ships

eg. offshore service provider security officer

Note: Security level 3 measures or procedures are in addition to all of the measures and procedures in force at maritime security levels 1 and 2.

32 <<Name of Offshore Service Provider>> Offshore Security Plan, Version #, Month and Year

Page 33: Template A - Guidance document template€¦ · Web viewReducing the vulnerability of Australian ships, ports and other ships within Australia to terrorist attack without undue disruption

Table: Implementation Timetable

Alternatively, an implementation timetable may be included as an attachment to the plan.

Security Measure or Procedure

Status (Operational / To be established)

Date of expected implementation

(if status is to be established)

Interim measures / procedures2

Lighting around supply vessel berth

To be established To be in place by March 2006 Additional guard patrols to monitor and deter any unauthorised access. Additional security sweeps of the supply vessel prior to leaving the berth.

2 Interim measures must be indicated for all measures and procedures that are yet to be established. These interim measures and procedures must be in place by the time the plan is sent to the Department.

<<Name of Offshore Service Provider>> Offshore Security Plan, Version #, Month and Year 33

Page 34: Template A - Guidance document template€¦ · Web viewReducing the vulnerability of Australian ships, ports and other ships within Australia to terrorist attack without undue disruption

Attachment 1 - Offshore Service Provider Security AssessmentThe offshore service provider must complete a security assessment in accordance with the Regulations and must take into account any documents required by the Secretary.

The Secretary has developed the Offshore Oil and Gas Risk Context Statement to provide the offshore oil and gas industry sector with information on the maritime strategic risk context and the current security environment in Australia. Offshore oil and gas service providers must explicitly consider each of the risks identified in the Maritime Risk Context Statement.

The Offshore Oil and Gas Risk Context Statement is available for offshore service providers by contacting: [email protected]

For further guidance on the requirements of security assessments, refer to the Offshore Security Assessment Guidance Paper available on the Department website.

Note: Submissions of revised offshore service provider plans require the submission of a revised or reviewed security assessment.

<<Name of Offshore Service Provider>> Offshore Security Plan, Version #, Month and Year 34

Page 35: Template A - Guidance document template€¦ · Web viewReducing the vulnerability of Australian ships, ports and other ships within Australia to terrorist attack without undue disruption

Attachment 2 - Security Measures and ProceduresFor each of the security measures to be implemented, specific details of the security measure or procedure should be provided. These details may include the physical and or operational requirements of each particular security measure and procedure.

For example, if the security measure to be implemented is for perimeter fencing then the offshore service provider would describe where the fencing has been or is to be erected and what design is to be used.

This section should be used to describe how the particular security measure or procedure will be carried out. It is entirely appropriate to reference national or international standards, where they exist. Where there is no recognised standard, or the organisation wishes to implement a different approach, then this section should include a thorough operational description such that it is clear how the measure or procedure is to be implemented.

Further, where the procedure or measure involves particular qualifications, training or prior knowledge, this section should be used to describe that knowledge, training or qualifications. For example, a security measure could be the patrol of a security zone by maritime security guards. The details should include the particular state or territory qualifications for security guards that will be required by the offshore service provider when hiring them.

<<Name of Offshore Service Provider>> Offshore Security Plan, Version #, Month and Year 35

Page 36: Template A - Guidance document template€¦ · Web viewReducing the vulnerability of Australian ships, ports and other ships within Australia to terrorist attack without undue disruption

Annex 1 - Declaration of Security (Sample only)For use between a ship or offshore facility and offshore service provider.

Note: This template is available from the Department’s website and need not to be included with the security plan.

Name of Ship/Offshore Facility: [Name]

Port of Registry: [Port]

IMO Number: [Number]

Name of offshore service provider: [Name]

This Declaration of Security is valid from …………… until ……………, for the following activities ……………………………………………………

(list the activities with relevant details)

under the following security levels

Security level(s) for the ship/offshore facility: [Security Level(s)]

Security level(s) for the offshore service provider:

[Security Level(s)]

The offshore service provider and ship/offshore facility agree to the following security measures and responsibilities to ensure compliance with the requirements of Australian maritime security legislation.

36 <<Name of Offshore Service Provider>> Offshore Security Plan, Version #, Month and Year

Page 37: Template A - Guidance document template€¦ · Web viewReducing the vulnerability of Australian ships, ports and other ships within Australia to terrorist attack without undue disruption

The affixing of the initials of the SSO/OFSO or OSPSO under these columns indicates that the activity will be done, in accordance with relevant approved plan, by

Activity The offshore service provider:

The ship/offshore facility:

Ensuring the performance of all security duties

Monitoring restricted areas to ensure that only authorised personnel have access

Controlling access to offshore service provider vessel/helicopter

Controlling access to the ship/offshore facility

Monitoring of offshore service provider, including berthing areas and areas surrounding the vessel/helicopter

Monitoring of the ship/offshore facility, including berthing areas and areas surrounding the ship/offshore facility

Handling of cargo

Delivery of stores

Handling unaccompanied baggage

Controlling the embarkation of persons and their effects

Ensuring that security communication is readily available between the ship/offshore facility and offshore service provider

<<Name of Offshore Service Provider>> Offshore Security Plan, Version #, Month and Year 37

Page 38: Template A - Guidance document template€¦ · Web viewReducing the vulnerability of Australian ships, ports and other ships within Australia to terrorist attack without undue disruption

The signatories to this agreement certify that security measures and arrangements for both the offshore service provider and the ship/offshore facility during the specified activities meet the provisions of Australian maritime security legislation and will be implemented in accordance with the provisions already stipulated in their approved plan(s) or the specific arrangements agreed to and set out in the attached annex.

Dated at …………………………………… on the ……………………………………

Signed for and on behalf of

the offshore service provider: the ship/offshore facility:

(Signature of Offshore Service Provider Security Officer)

(Signature of Master or Ship Security Officer/Offshore Facility Security Officer)

Name and title of person who signed

Name: Name:

Title: Title

Contact Details

(to be completed as appropriate)

(indicate the telephone numbers or the radio channels or frequencies to be used)

for the offshore service provider: for the ship/offshore facility:

Offshore Service Provider Master (if applicable)

Offshore Service Provider Security Officer Ship Security Officer/Offshore Facility Security officer

Company

Company Security Officer/Head Security Officer

38 <<Name of Offshore Service Provider>> Offshore Security Plan, Version #, Month and Year

Page 39: Template A - Guidance document template€¦ · Web viewReducing the vulnerability of Australian ships, ports and other ships within Australia to terrorist attack without undue disruption

Annex 1 - Offshore Security Incident Report FormThis template is available from the Department’s website and need not to be included with the security plan.

<<Name of Offshore Service Provider>> Offshore Security Plan, Version #, Month and Year 39

Page 40: Template A - Guidance document template€¦ · Web viewReducing the vulnerability of Australian ships, ports and other ships within Australia to terrorist attack without undue disruption

40 <<Name of Offshore Service Provider>> Offshore Security Plan, Version #, Month and Year