Source document: https://docs-lawep.s3.us-east-2.amazonaws.com/1698832973042.pdf (New Zealand)
Reprint as at 1 April 2021 Maritime Security Regulations 2004 (SR 2004/153) Silvia Cartwright, Governor-General Order in Council At Wellington this 31st day of May 2004 Present: Her Excellency the Governor-General in Council Pursuant to section 76 of the Maritime Security Act 2004, Her Excellency the Governor-General, acting on the advice and with the consent of the Executive Coun- cil, makes the following regulations.
Contents Title Commencement Interpretation Persons responsible for complying with requirements imposed on ships Part 1 Declaration of security Declaration of security to be acknowledged Page 5 5 5 5 6 Note Changes authorised by subpart 2 of Part 2 of the Legislation Act 2012 have been made in this official reprint.

Note 4 at the end of this reprint provides a list of the amendments incorporated.

These regulations are administered by the Ministry of Transport.
1 Maritime Security Regulations 2004 Reprinted as at 1 April 2021 Persons who must complete declaration of security Declaration of security to specify responsibility for security requirements Minimum period for ships to keep declaration of security Minimum period for port facilities to keep declaration of security Part 2 Ship security Threats to ships Threats to ships Reporting of security threats and security breaches Ship security levels Commencement level Chief executive to advise ship of certain matters when specifying security level for ship Security level 1 Security level 2 Security level 3 Specification for security level 2 or security level 3 to be acknowledged Additional responsibilities for ship with security level 2 or security level 3 Requirements for non-complying ships Notification of ship with security level 2 or security level 3 in port facility outside New Zealand Requirements for ship with higher security level than port facility Chief executive to advise ships to report certain information Ship security assessment Ship security assessment Ship security assessment may be kept in electronic form Requirements of person conducting ship security assessment On-scene surveys of ships Restricted areas Restricted areas Security measures for restricted areas at security level 1 Security measures for restricted areas at security level 2 Security measures for restricted areas at security level 3 Advice required of ships intending to enter ports Appropriate ship security procedures Other practical security-related matters Ship security plan Ship security plan approval Reprinted as at 1 April 2021 Maritime Security Regulations 2004 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 Chief executive to give notice where ship security plan covers more than 1 ship Language used for ship security plan Matters to be included in ship
 security plan Confidential matters in ship security plan not to be disclosed Security assessment to accompany ship security plan Ship security plan may be kept in electronic form Ship security plan to be audited Audits of ship security plan to be independent Recognised security organisations Competencies of recognised security organisations Ship security alert system Ships to have ship security alert system Requirements for ship security alert system Company security officer Company security officer Duties and responsibilities of company security officer Ship security officer Ship security officer Training, drills, and exercises on ship security Company security officer, ship security officer, and shore-based personnel to have adequate knowledge and training Shipboard personnel to have adequate knowledge and training Company to carry out drills Company to facilitate exercises Company security officer to participate in exercises and drills Ship security records Ship security records Language used for ship security records Ship security records may be kept in electronic form Access to or disclosure of ship security records Communication Communication Control measures Clear grounds for imposing control measures Part 3 Port facility security Port facility security levels 59 Commencement level 17 17 17 17 17 17 18 18 18 19 19 20 26 26 27 27 27 27 28 3 Maritime Security Regulations 2004 Reprinted as at 1 April 2021 Security level 1 Security level 2 Security level 3 Port facility security assessment Port facility security assessment Port facility security plan Port facility security plan approval Chief executive to give notice where port facility security plan covers more than 1 port facility Language used for port facility security plan Matters to be included in port facility security plan When port facility security plan may be kept in electronic form Port facility security plan to be audited Audits of port facility security plan to be independent
 Port facility security officer Port facility security officer Duties and responsibilities of port facility security officer Training, drills, and exercises on port facility security Port facility security officer to have adequate knowledge and training Port facility personnel with duties and responsibilities for port facility security to have adequate knowledge and training Port facility personnel not involved in port facility security to be familiar with port facility security plan Port facility operator to carry out drills Port facility operator to facilitate exercises Port facility security officer to participate in exercises and drills Port security identification Port security identification Signs Part 4 Verification and certification for ships Verifications for ships Verifications for ships Initial verification Renewal verification Intermediate verification International Ship Security Certificate Issue of certificate Reprinted as at 1 April 2021 Maritime Security Regulations 2004 86 87 88 89 90 91 92 93 94 95 96 Duration and validity of certificate Duration of certificate Validity of certificate for renewal verification Validity of certificate for intermediate verification Extension of certificate when ship not in port for verification Extension of certificate for ships engaged on short voyages When certificate ceases to be valid Interim International Ship Security Certificate Issue of interim certificate Requirements before issuing interim certificates Duration and validity of interim certificate Restrictions on issue of further interim certificate Requirements before accepting validity of interim certificate Schedule 1 Matters to be included in ship security plan Schedule 2 Matters to be included in port facility security plan r 4 38 38 39 39 39 39 40 40 41 41 41 41 43 Regulations 1 Title These
 regulations are the Maritime Security Regulations 2004.
2 (1) (2) Commencement Regulations 5 to 22, 31 and 32, 43 and 44, and 58 to 62 come into force on 1 July 2004.

The rest of these regulations come into force on the day after the date of their notification in the Gazette.

3 Interpretation In these regulations, unless the context otherwise requires, Act means the Maritime Security Act 2004.
4 (1) (2) Persons responsible for complying with requirements imposed on ships The master of a ship is responsible for complying with a requirement imposed by these regulations that applies in relation to the ship.

If the ship is a New Zealand ship, the company is responsible for ensuring the master of the ship complies with the requirement.
5 Part 1 r 5 Maritime Security Regulations 2004 Reprinted as at 1 April 2021 Part 1 Declaration of security 5 (1) Declaration of security to be acknowledged The master or ship security officer must acknowledge every requirement of, or request made by, any of the following persons for the ship to complete a declar- ation of security: (a) (b) (c) the chief executive: the master or ship security officer of another ship: a port facility security officer.
(2) The port facility security officer must acknowledge every requirement of, or request made by, any of the following persons for the port facility to complete a declaration of security: (a) (b) the chief executive: the master or ship security officer of a ship.
Compare: Code, Part A s 5.3 6 Persons who must complete declaration of security (1) A declaration of security completed on behalf of a ship must be completed by— (a) (b) (c) the master; or the ship security officer; or a senior ship officer authorised by the master.
(2) A declaration of security completed on behalf of a port facility must be com- pleted by— (a) (b) the port facility security officer; or any other person designated by the port facility operator as responsible for the security of that port facility.
Compare: Code, Part A s 5.4 7 Declaration of security to specify responsibility for security requirements A declaration of security must specify— (a) the security requirements for which a ship and a port facility, or a ship and another ship, as the case may require, are separately responsible; and (b) the security requirements that are to be shared between— (i) (ii) a ship and a port facility; or a ship and another ship; and 6 Reprinted as at 1 April 2021 Maritime Security Regulations 2004 Part 2 r 11 (c) the specific responsibilities (if any) that a ship and a port facility, or a ship and another ship, as the case may require, have in relation to the security requirements that are to be shared; and (d) the duration of the declaration of security.
Compare: Code, Part A s 5.5, Part B s 5.4.1 8 Minimum period for ships to keep declaration of security Every New Zealand ship that has completed a declaration of security must keep the declaration of security for the next 10 calls at a port facility.
Compare: Code, Part A s 5.7 9 (1) Minimum period for port facilities to keep declaration of security Every port facility that completes a declaration of security must keep the dec- laration of security for a period of 12 months after the date on which the dura- tion of the declaration of security has ended.

(2) A copy of all current declarations of security must be kept with the port facility security plan.
Compare: Code, Part A s 5.6 Part 2 Ship security Threats to ships 10 Threats to ships If a risk of attack to a ship has been identified, the chief executive must advise the master of the ship and the ship’s administration of— (a) (b) (c) the current security level; and any security measures that may, in accordance with the Act and these regulations, be put in place by the ship concerned to protect itself from attack; and security measures that the chief executive has decided to put in place as appropriate.
Compare: Annex to the Convention, Chapter XI-2 r 7.3 11 Reporting of security threats and security breaches (1) A company must, without delay, report to the New Zealand Police any act or circumstance that may threaten a ship’s security.
(2) As soon as possible after complying with subclause (1), the company must make a report in writing, giving a summary of the activity or breach,— (a) to the Designated Authority; and 7 Part 2 r 12 Maritime Security Regulations 2004 Reprinted as at 1 April 2021 (b) if the report relates to cargo or ship stores, to the New Zealand Customs Service.
12 Commencement level Ship security levels Unless otherwise directed by the chief executive, every New Zealand ship must operate at security level 1 from 1 July 2004 unless otherwise directed by— (a) (b) the chief executive; or a state that is a party to the Convention if that ship is in a port within that state.
13 Chief executive to advise ship of certain matters when specifying security level for ship When specifying the security level for a ship, the chief executive must advise the ship of— (a) (b) any security measures that it should take; and if appropriate, any security measures that have been taken by the Desig- nated Authority to provide protection against any potential maritime security threat.
Compare: Code, Part A s 7.9.1 14 Security level 1 (1) At security level 1, a ship must carry out through appropriate measures the fol- lowing activities to identify and take preventive measures against security inci- dents: (a) (b) (c) ensure the performance of all ship security duties: control access to the ship: control the embarkation of persons and their effects: (d) monitor restricted areas to ensure that only authorised personnel have access: (e) monitor deck areas and areas surrounding the ship: (f) (g) supervise the handling of cargo and ship stores: ensure that security communication is readily available.
(2) At security level 1, a ship must implement the security measures and proced- ures for security level 1 as specified in its approved ship security plan.

Compare: Code, Part A s 7.2 8 Reprinted as at 1 April 2021 15 Security level 2 Maritime Security Regulations 2004 Part 2 r 18 At security level 2, a ship must implement the additional protective measures and procedures specified in its approved ship security plan for each activity specified in regulation 14.
Compare: Code, Part A s 7.3 16 Security level 3 At security level 3, a ship must respond to and implement any further specific protective measures and procedures specified in its approved ship security plan for each activity specified in regulation 14.
Compare: Code, Part A s 7.4 17 Specification for security level 2 or security level 3 to be acknowledged A ship whose security level is specified as, or is changed to, security level 2 or security level 3 by the chief executive must— (a) provide acknowledgment to the Designated Authority of the security level specification; and (b) respond, without undue delay, to the security level specification.
Compare: Annex to the Convention, Chapter XI-2 r 4.4; Code, Part A s 7.5 Additional responsibilities for ship with security level 2 or security level 3 Before entering a port, or while in a port, a ship whose security level specifica- tion is security level 2 or security level 3 must— (a) start implementing the appropriate measures and procedures specified in the approved ship security plan (including, in the case of a ship with a security level 3 specification, the further protective measures specified by the chief executive); and (b) inform the port facility security officer that it has started to implement the appropriate measures and procedures referred to in paragraph (a).
If a ship has any difficulties in implementing the appropriate measures and pro- cedures referred to in subclause (1)(a), the master of the ship or a ship security officer must report, as soon as practicable, those difficulties to the port facility security officer.
If the master of a ship or a ship security officer reports difficulties in imple- menting the appropriate measures and procedures referred to in subclause (1)(a) to the port facility security officer, the ship security officer and the port facility security officer must liaise about, and co-ordinate the appropriate response to, those difficulties.
Compare: Code, Part A s 7.6 18 (1) (2) (3) 9 Part 2 r 19 Maritime Security Regulations 2004 Reprinted as at 1 April 2021 19 (1) (2) (3) Requirements for non-complying ships Before conducting any ship-port interface or entering a port (whichever occurs first), a ship that is unable to comply with the Act or these regulations, or to meet the requirements set for its security level by the chief executive or by a State that is a party to the Convention, must notify the port facility security officer of that fact.
If a ship has any difficulties in implementing the appropriate measures and pro- cedures for its security level, the ship must report those difficulties to the port facility security officer.

If a ship reports difficulties in implementing the appropriate measures and pro- cedures for its security level to the port facility security officer, the ship secur- ity officer and the port facility security officer must liaise about, and co-ordi- nate the appropriate response to, those difficulties.
Compare: Annex to the Convention, Chapter XI-2 r 4.5; Code, Part A s 7.6 20 Notification of ship with security level 2 or security level 3 in port facility outside New Zealand If the chief executive specifies the security level of a New Zealand ship in a port facility of a State that is a party to the Convention as security level 2 or security level 3, the chief executive must, without undue delay, notify the gov- ernment of the State of that port facility accordingly.
Compare: Code, Part A s 7.8 21 Requirements for ship with higher security level than port facility (1) A ship whose security level specification is higher than the level specified for the port facility that it is about to enter or has already entered, must, without undue delay, advise the Designated Authority and the port facility security offi- cer of the situation.
(2) If a situation described in subclause (1) occurs, the ship security officer and the port facility security officer must liaise about, and co-ordinate the response to, the situation.
Compare: Code, Part A ss 7.7, 7.7.1 22 Chief executive to advise ships to report certain information When the chief executive specifies a security level and provides security level information to a ship that is either operating within the territorial limits of New Zealand or has communicated to the chief executive its intention to enter the territorial limits of New Zealand, the chief executive must advise the master of the ship to report immediately to all the following persons any information that comes to the master’s attention that might affect maritime security in the area: (a) the chief executive: 10 Reprinted as at 1 April 2021 Maritime Security Regulations 2004 Part 2 r 23 (b) the ship’s Administration.
Compare: Code, Part A s 7.9 Ship security assessment 23 Ship security assessment (1) A ship security assessment must include (but is not limited to) the following: (a) (b) (c) (d) (e) include an on-scene survey: identify and evaluate key shipboard operations that require protection: identify possible threats to those key shipboard operations and the likeli- hood of their occurrence in order to establish and prioritise security measures: identify existing security measures, procedures, and operations: identify weaknesses, including human factors, in the infrastructure, policies, and procedures: (f) address the following elements on board or within the ship: (i) (ii) (iii) (iv) (v) (vi) physical security: structural integrity: personnel protection systems: procedural policies: radio and telecommunication systems, including computer sys- tems and networks: other areas that may, if damaged or used for illicit observation, pose a risk to persons, property, or operations on board the ship or within a port facility.
(2) A ship security assessment must consider all possible threats, including the fol- lowing types of security incidents: (a) (b) (c) (d) (e) (f) (g) damage to or destruction of the ship or an interfacing port facility or ship by dangerous substances and devices, arson, sabotage, or vandalism: hijacking or seizure of the ship or of persons on board: tampering with cargo, essential ship equipment or systems, or ship stores: unauthorised access to, or use of, the ship, cargo, essential ship equip- ment or systems, or ship stores: smuggling dangerous substances and ship devices: use of the ship to carry persons intending to cause a security incident: use of a ship to carry equipment intended to cause a security incident: 11 Part 2 r 24 Maritime Security Regulations 2004 Reprinted as at 1 April 2021 (h) (i) (j) (k) use of the ship or its equipment as a weapon or as a means to cause dam- age or destruction: attacks from seaward while at berth or at anchor: attacks while at sea: presence of stowaways.
(3) A ship security assessment must consider the persons, activities, services, and operations that are important to protect, including (but not limited to)— (a) (b) (c) (d) (e) (f) (g) ship personnel and port facility personnel: passengers, visitors, vendors, repair technicians, and other persons work- ing on ships or in port facilities: the capacity to maintain safe navigation and emergency response: the cargo, particularly dangerous goods or hazardous substances: ship stores: the ship security communications equipment and systems (if any): the ship’s security surveillance equipment and systems (if any).
(4) A ship security assessment must consider the continuing relevance of existing security measures and guidance, procedures and operations, under both routine and emergency conditions.
(5) A ship security assessment must take into account all possible vulnerabilities, including (but not limited to)— (a) (b) (c) (d) (e) conflicts between safety and security measures: conflicts between shipboard duties and security assignments: watchkeeping duties, number of ship personnel, particularly with impli- cations for crew fatigue, alertness, and performance: any identified security training deficiencies: any security equipment and systems, including communications systems.
(6) The company must document, review, accept, and retain the ship security assessment.

Compare: Code, Part A ss 8.4, 8.5, Part B, ss 8.3, 8.8–8.10 24 Ship security assessment may be kept in electronic form A ship security assessment may be kept in electronic form, in which case the company must ensure that it is protected from unauthorised deletion, destruc- tion, amendment, disclosure, or access.
Compare: Code, Part B s 4.1 25 Requirements of person conducting ship security assessment The company must ensure that the person who carries out the ship security assessment has appropriate knowledge of the following matters: 12 Reprinted as at 1 April 2021 Maritime Security Regulations 2004 Part 2 r 26 (a) (b) (c) (d) (e) (f) (g) (h) (i) (j) (k) current security threats and patterns: the recognition and detection of weapons, dangerous substances, and devices: the recognition on a non-discriminatory basis of characteristics and behavioural patterns of persons who are likely to threaten security: the techniques used to circumvent security measures: the methods used to cause a security incident: the effects of explosives on ship structures and equipment: ship security: ship-port interface business practices: contingency planning, emergency preparedness, and response: physical security: radio and telecommunications systems, including computer systems and networks: (l) marine engineering: (m) ship and port operations.
Compare: Code, Part B s 8.4 26 On-scene surveys of ships The on-scene survey must examine and evaluate existing ship protective meas- ures, procedures, and operations for— (a) ensuring the performance of all security duties: (b) monitoring restricted areas to ensure that access is only granted to per- sons with appropriate authority: (c) controlling access to the ship, through the use of identification systems or otherwise: (d) monitoring of deck areas and areas surrounding the ship: (e) (f) (g) controlling the embarkation of persons and their effects (including accompanied and unaccompanied baggage and ship personnel personal effects): supervising the handling of cargo and the delivery of ship stores: ensuring that ship security communications, information systems, and equipment are readily available.
Compare: Code, Part B s 8.14 13 Part 2 r 27 Maritime Security Regulations 2004 Reprinted as at 1 April 2021 Restricted areas 27 (1) Restricted areas The ship security plan must identify the restricted areas to be established on the ship, and specify— (a) (b) (c) (d) their extent; and the times of application; and the security measures to be taken to control access to them; and the security measures to be taken to control activities within them.
(2) The purposes of restricted areas are to— (a) (b) (c) (d) prevent unauthorised access; and protect passengers, ship personnel, and personnel from port facilities or other agencies authorised to be on board the ship; and protect security-sensitive areas within the ship; and protect cargo and ship stores from being tampered with.
(3) Restricted areas may include, as appropriate,— (a) (b) (c) (d) (e) (f) (g) (h) (i) the navigation bridge, machinery spaces of category A, and other control stations as defined in Chapter II-2 of the Annex to the Convention: spaces containing security and surveillance equipment and systems and their controls, and lighting system controls: ventilation and air-conditioning systems and other similar spaces: spaces with access to tanks, pumps, or manifolds for potable water: spaces containing dangerous goods or hazardous substances: spaces containing cargo pumps and their controls: cargo spaces and spaces containing ship stores: crew accommodation: any other areas as determined by the company security officer, through the ship security assessment, to which access must be restricted to main- tain the security of the ship.
Compare: Code, Part B ss 9.18, 9.21 28 Security measures for restricted areas at security level 1 At security level 1, the ship security plan must establish the security measures that apply to restricted areas, which may include— (a) (b) (c) locking of security access points: using surveillance equipment to monitor the areas: using guards or patrols: 14 Reprinted as at 1 April 2021 Maritime Security Regulations 2004 Part 2 r 31 (d) using automatic intrusion-detection devices to alert the ship personnel of unauthorised access.
Compare: Code, Part B s 9.22 29 Security measures for restricted areas at security level 2 At security level 2,— (a) (b) the frequency and intensity of the monitoring of, and control of access to, restricted areas must be increased to ensure that only authorised per- sons have access; and the ship security plan must establish the additional security measures that apply, which may include— (i) (ii) (iii) establishing restricted areas adjacent to access points: continuously monitoring surveillance equipment: dedicating additional personnel to guard and patrol restricted areas.
Compare: Code, Part B s 9.23 30 Security measures for restricted areas at security level 3 At security level 3,— (a) (b) the ship must comply with the instructions issued by those responding to the security incident or threat; and the ship security plan must detail the security measures that could be taken by the ship, in close co-operation with those responding and the port facility, which may include— (i) setting up of additional restricted areas on the ship in proximity to the security incident, or the believed location of the security threat, to which access is denied: (ii) searching of restricted areas as part of a search of the ship.
Compare: Code, Part B s 9.24 Advice required of ships intending to enter ports 31 Appropriate ship security procedures When a master provides advice under section 30(2)(e) of the Act concerning whether or not appropriate ship security procedures were maintained in any ship-to-ship activity during the period of its last 10 calls at port, the master— (a) must include in that advice the following matters (if applicable): (i) the measures taken while engaged in a ship-to-ship activity with a ship that is registered in a State that is not a party to the Conven- tion: 15 Part 2 r 32 Maritime Security Regulations 2004 Reprinted as at 1 April 2021 (ii) the measures taken while engaged in a ship-to-ship activity with a ship that is registered in a State that is a party to the Convention but that is not required to comply with any of the provisions of the Act or these regulations, or Chapter XI-2 of the Annex to the Con- vention and Part A of the Code: (iii) any persons or goods rescued at sea and that are on board, includ- ing all known information about the persons or goods; but (b) need not include in that advice the following matters if they are already covered by the port facility security plan: (i) (ii) (iii) (iv) (v) (vi) transfers of pilots: transfers of customs, immigration, or security officials: bunkering: lightering: loading of supplies: unloading of waste by the ship within port facilities.
Compare: Code, Part B s 4.38 32 Other practical security-related matters When a master provides advice under section 30(2)(f) of the Act concerning any other practical security-related matters, the master must include in that advice the following matters (if applicable): (a) (b) (c) (d) (e) (f) (g) information contained in the continuous synopsis record: location of the ship at the time the report is made: expected time of arrival of the ship in port: crew list: general description of cargo aboard the ship: passenger list: information required to be carried under the Annex to the Convention, Chapter XI-2 regulation 5.
Compare: Code, Part B s 4.39 Ship security plan 33 Ship security plan approval A company must submit— (a) (b) 1 copy of the ship security plan to the chief executive for review and approval; and a letter certifying that the ship security plan complies with the Act and these regulations.
16 Reprinted as at 1 April 2021 Maritime Security Regulations 2004 Part 2 r 39 34 Chief executive to give notice where ship security plan covers more than 1 ship If the chief executive agrees that a ship security plan may cover more than 1 ship, he or she must give notice of the arrangement to the International Mari- time Organization.

35 Language used for ship security plan (1) A ship security plan must be written in the working language of the ship.
(2) Despite subclause (1), if the working language of the ship is not English, French, or Spanish, a written translation of the ship security plan into 1 of those languages must be included with the ship security plan.

Compare: Code, Part A s 9.4 36 Matters to be included in ship security plan (1) Without limiting the matters that a ship security plan may contain, a ship secur- ity plan must include the matters specified in Schedule 1.
(2) Despite subclause (1), the chief executive may authorise the company to keep the information on the ship’s security alert system, set out in clauses (m) and (n) of Schedule 1, in a separate document in a location on the ship known only to the master, the ship security officer, and any other senior shipboard person- nel that the company may designate for that purpose.
Compare: Code, Part A s 9.4 37 Confidential matters in ship security plan not to be disclosed The matters referred to in clauses (c), (e), (h), (i)(i), (j), (m), (n), and (o) of Schedule 1 are confidential, and, except as provided in section 32(3) and (4) of the Act, may not be inspected by the chief executive.
Compare: Code, Part A s 9.8 38 Security assessment to accompany ship security plan The following must, when submitted to the chief executive for approval, be accompanied by the security assessment that is the basis for the plan or amend- ments: (a) (b) a ship security plan; and any amendments to a previously approved ship security plan.
Compare: Code, Part A s 9.3 39 Ship security plan may be kept in electronic form A ship security plan may be kept in electronic form, in which case the com- pany must ensure that it is protected from unauthorised deletion, destruction, or amendment.
Compare: Code, Part A s 9.6 17 Part 2 r 40 Maritime Security Regulations 2004 Reprinted as at 1 April 2021 40 (1) (2) Ship security plan to be audited The company must ensure an audit of the ship security plan is performed annu- ally, beginning no later than 1 year from the initial date of approval.
The ship security plan must be audited if there is a change in the ship’s owner- ship or operator, or if there have been modifications to the ship, including but not limited to physical structure, emergency response procedures, security measures, or operations.

(3) An audit of the ship security plan as a result of modifications to the ship may be limited to those sections of the ship security plan affected by the vessel modifications.
41 (1) (2) Compare: Code, Part B s 9.53 Audits of ship security plan to be independent Company or ship personnel who conduct internal audits of the security activ- ities specified in the ship security plan or who evaluate the implementation of the ship security plan must be independent of the activities being audited.

Subclause (1) does not apply if this is impracticable because of the size and the nature of the company or the ship.
Compare: Code, Part A s 9.4.1 Recognised security organisations 42 Competencies of recognised security organisations Before the chief executive may authorise an organisation to be a recognised security organisation under section 9(1)(j) of the Act, the chief executive must ensure that the organisation— (a) (b) (c) (d) (e) (f) has appropriate expertise in relevant aspects of security; and has appropriate knowledge of ship and port operations, including know- ledge of ship design and construction if providing services in respect of ships and port design, and construction if providing services in respect of port facilities; and is competent to assess the likely security risks that could occur during ship and port facility operations, including the ship-port interface and how to minimise those risks; and is competent to maintain and improve the expertise of the organisation’s personnel; and is competent to monitor the continuing trustworthiness of the organisa- tion’s personnel; and is competent to maintain appropriate measures to avoid unauthorised disclosure of, or access to, security-sensitive material; and 18 Reprinted as at 1 April 2021 Maritime Security Regulations 2004 Part 2 r 44 (g) (h) (i) (j) (k) (l) has appropriate knowledge of the Convention and the Code as well as the relevant requirements of New Zealand law and international law; and has appropriate knowledge of current security threats and patterns; and is competent to recognise and detect weapons, dangerous substances, and dangerous devices; and is competent to recognise characteristics and behavioural patterns of per- sons who are likely to threaten security; and has appropriate knowledge of techniques used to circumvent security measures; and has appropriate knowledge of security and surveillance equipment and systems and their operational limitations.
Compare: Code, Part B s 4.5 Ship security alert system 43 Ships to have ship security alert system (1) A ship constructed on or after 1 July 2004 must have a ship security alert sys- tem.

(2) A passenger ship, including high-speed passenger craft, constructed before 1 July 2004 must have a ship security alert system not later than the first survey of the radio installation after 1 July 2004.
(3) An oil tanker, chemical tanker, gas carrier, bulk carrier, or cargo high-speed craft, of 500 gross tonnage or more, constructed before 1 July 2004 must have a ship security alert system not later than the first survey of the radio installa- tion after 1 July 2004.
(4) Cargo ships of 500 gross tonnage or more, other than those specified in sub- clause (3) or mobile offshore drilling units, constructed before 1 July 2004 must have a ship security alert system not later than the first survey of the radio installation after 1 July 2006.
Compare: Annex to the Convention, Chapter XI-2 r 6.1 44 Requirements for ship security alert system (1) A ship security alert system must— (a) (b) be capable of being activated from the navigation bridge and at least 1 other location; and conform to performance standards that are not inferior to those adopted by the International Maritime Organization.
(2) A ship security alert system of a New Zealand ship, when activated, must ini- tiate and transmit a ship-to-shore alert to a competent authority designated by the chief executive, which may include the company, that— (a) identifies the ship and its location; and 19 Part 2 r 45 Maritime Security Regulations 2004 Reprinted as at 1 April 2021 (b) indicates that the security of the ship is under threat or is compromised; and (c) continues the alert until deactivated or reset.
(3) A ship security alert system, when activated, must not— (a) (b) send the alert to any other ship; or raise any alarm on board the ship sending the alert.

(4) (5) The activation points of the ship security alert system must be designed so as to prevent the inadvertent initiation of the alert.
The requirement for a ship security alert system may be met by using the radio installation fitted in compliance with Chapter IV of the Annex to the Conven- tion as long as all the requirements of this regulation are met.

Compare: Annex to the Convention, Chapter XI-2 rr 6.2–6.5 Company security officer 45 Company security officer (1) A person may be designated as the company security officer for 1 or more ships if all the ships for which the company security officer is responsible are clearly identified.
(2) A company may designate more than 1 person as company security officer for a ship if the ship for which each company security officer is responsible is clearly identified in the designation.
Compare: Code, Part A s 11.1 46 Duties and responsibilities of company security officer The duties and responsibilities of a company security officer in relation to each ship for which he or she is responsible include— (a) (b) (c) (d) (e) (f) advising the level of threats likely to be encountered by the ship, using appropriate security assessments and other relevant information; and ensuring that ship security assessments are carried out; and ensuring the development, the submission for approval and, after its approval, the implementation and maintenance of the ship security plan; and ensuring that the ship security plan is modified, as appropriate, to correct deficiencies in the plan and satisfy the security requirements of the ship; and arranging for internal audits and reviews of security activities; and arranging for the initial and subsequent verifications of the ship by the chief executive; and 20 Reprinted as at 1 April 2021 Maritime Security Regulations 2004 Part 2 r 47 47 (1) (2) (g) (h) (i) (j) (k) (l) ensuring that deficiencies and non-conformities identified during inter- nal audits, periodic reviews, security inspections, and verifications of compliance are promptly addressed and dealt with; and enhancing security awareness and vigilance; and ensuring adequate training for personnel responsible for the security of the ship; and ensuring effective communication and co-operation between the ship security officer and the relevant port facility security officer; and ensuring consistency between security requirements and safety require- ments; and ensuring that, if sister-ship or fleet security plans are used, the plan for each ship reflects the ship-specific information accurately; and (m) ensuring that any alternative or equivalent arrangements approved for a ship or class of ships are implemented and maintained.
Compare: Code, Part A s 11.2 Ship security officer Ship security officer The company must designate a ship security officer on each ship.
The duties and responsibilities of the ship security officer include— (a) undertaking regular security inspections of the ship to ensure that appro- priate security measures are maintained; and (b) maintaining and supervising the implementation of the ship security plan, including any amendments to the plan; and (c) (d) (e) (f) (g) (h) (i) co-ordinating the security aspects of the handling of cargo and ship stores with other shipboard personnel, the relevant port facility security officer, and the New Zealand Customs Service; and proposing modifications to the ship security plan; and reporting to the company security officer any deficiencies and non-con- formities identified during internal audits, periodic reviews, security inspections, and verifications of compliance, and implementing any cor- rective actions; and enhancing security awareness and vigilance on board; and ensuring that adequate training has been provided to shipboard person- nel, as appropriate; and reporting all security incidents; and co-ordinating implementation of the ship security plan with the company security officer and the relevant port facility security officer; and 21 Part 2 r 48 Maritime Security Regulations 2004 Reprinted as at 1 April 2021 (j) ensuring that all security equipment is properly operated, tested, calibra- ted, and maintained.
Compare: Code, Part A s 12 Training, drills, and exercises on ship security 48 (1) Company security officer, ship security officer, and shore-based personnel to have adequate knowledge and training The company must ensure that the company security officer, the ship security officer and appropriate shore-based personnel have an adequate knowledge of, and relevant training in the following ship security procedures (if applicable): (a) (b) (c) (d) (e) (f) (g) (h) (i) (j) (k) (l) (m) (n) (o) (p) (q) (r) (s) security administration: the relevant international conventions, codes, and recommendations: the relevant New Zealand and international legislation: the responsibilities and functions of relevant security organisations: the methodology of ship security assessment: the methods of ship security surveys and inspections: ship and port operations and conditions: ship and port facility security measures: emergency preparedness and response and contingency planning: the instruction techniques for security training and education, including security measures and procedures: the handling of sensitive security-related information and security-rela- ted communications: current security threats and patterns: the recognition and detection of weapons, dangerous substances, and dangerous devices: the recognition, on a non-discriminatory basis, of characteristics and behavioural patterns of people who are likely to threaten security: the techniques used to circumvent security measures: security equipment and systems and their operational limitations: the methods of conducting audits, inspection, control, and monitoring: the methods of searches and non-intrusive inspections: security drills and exercises, including drills and exercises with port facilities: (t) the assessment of security drills and exercises.
(2) The company must ensure that the ship security officer has adequate know- ledge of, and training in the following matters: 22 Reprinted as at 1 April 2021 Maritime Security Regulations 2004 Part 2 r 49 (a) (b) (c) (d) (e) the layout of the ship: the ship security plan and related procedures (including scenario-based training on how to respond): crowd management and control techniques: operations of security equipment and systems: testing, calibrating, and, while at sea, maintaining security equipment and systems.
(3) The company must ensure that— (a) (b) the company security officer has completed the standard International Maritime Organization course for company security officers; and the ship security officer has completed the standard International Mari- time Organization course for ship security officers.
Compare: Code, Part A ss 13.1, 13.2, Part B ss 13.1, 13.2 49 (1) Shipboard personnel to have adequate knowledge and training The company must ensure that shipboard personnel who have specific security duties and responsibilities— (a) (b) understand their responsibilities for ship security as described in the ship security plan; and have an adequate knowledge of, and ability to perform, their assigned security duties, including the following if they are applicable: (i) (ii) (iii) (iv) (v) (vi) current security threats and patterns: the recognition and detection of weapons, dangerous substances, and dangerous devices: the recognition, on a non-discriminatory basis, of characteristics and behavioural patterns of people who are likely to threaten security: the techniques used to circumvent security measures: crowd management and control techniques: security-related communications: (vii) emergency procedures and contingency plans: (viii) the operation of security equipment and systems: (ix) (x) (xi) testing, calibrating, and, while at sea, maintaining security equip- ment and systems: inspection, control, and monitoring techniques: the methods of searches and non-intrusive inspections.
23 Part 2 r 50 Maritime Security Regulations 2004 Reprinted as at 1 April 2021 (2) The company must ensure that all shipboard personnel who are not covered by subclause (1) have an adequate knowledge of, and are familiar with, the rele- vant provisions of the ship security plans, including— (a) (b) (c) (d) the meaning and requirements of security level 1, security level 2, and security level 3; and emergency procedures and contingency plans; and the recognition and detection of weapons, dangerous substances, and dangerous devices; and the recognition, on a non-discriminatory basis, of characteristics and behavioural patterns of people who are likely to threaten security; and (e) the techniques used to circumvent security measures.
Compare: Code, Part A s 13.3, Part B ss 13.3, 13.4 Company to carry out drills Taking into account the ship type, ship personnel changes, port facilities to be visited, and other relevant factors, the company must ensure the effective implementation of the ship security plan by carrying out drills at least every 3 months.
If, as a result of a change in shipboard personnel, more than 25% of the ship- board personnel have not participated within the previous 3 months in an exer- cise or drill on that ship, a drill must be conducted within 1 week of the change in shipboard personnel.
The drills referred to in subclause (2) must test the separate elements of the ship security plan and cover all possible threats to the security of the ship, including, but not limited to, the following types of security incidents: (a) (b) (c) (d) (e) (f) (g) (h) (i) (j) damage to or destruction of the ship or an interfacing port facility or ship by dangerous substances and devices, arson, sabotage, or vandalism: hijacking or seizure of the ship or of persons on board: tampering with cargo, essential ship equipment or systems, or ship stores: unauthorised access to, or use of, the ship, cargo, essential ship equip- ment or systems, or ship stores: smuggling dangerous substances and ship devices: use of the ship to carry persons intending to cause a security incident: use of a ship to carry equipment intended to cause a security incident: use of the ship or its equipment as a weapon or as a means to cause dam- age or destruction: attacks from seaward while at berth or at anchor: attacks while at sea: 50 (1) (2) (3) 24 Reprinted as at 1 April 2021 Maritime Security Regulations 2004 Part 2 r 52 (k) presence of stowaways.
Compare: Code, Part A s 13.4, Part B ss 8.9, 13.6 51 Company to facilitate exercises (1) A company must, at least once every calender year (with no more than 18 months between the exercises), facilitate the holding of exercises that test com- munication, co-ordination, resource availability, and response.
(2) The exercises may involve— (a) (b) (c) (d) (e) representatives of the Designated Authority; and representatives of the chief executives of the organisations listed in sec- tion 59(1)(a)(ii) of the Act; and the company security officer; and depending on the security and work implications for the New Zealand ships to which the Act applies, the ship security officer; and depending on the security and work implications for the port facility, the port facility security officer.
(3) The exercises may be— (a) (b) (c) full scale or live, or both; or tabletop simulations or seminars, or both; or combined with other exercises held, such as emergency response or other exercises involving state and port authorities.
(4) The chief executive may direct that the requirements of subclauses (1) to (3) may alternatively be satisfied by— (a) (b) (c) (d) participation of company staff in an emergency response or crisis man- agement exercise conducted by another government agency or private sector entity, provided that the exercise addresses components of the ship security plan; or an actual increase in security level; or implementation of enhanced security measures enumerated in the ship security plan during periods of critical port operations or special events; or participation of company staff in an exercise with another contracting government.
Compare: Code, Part B ss 13.7, 13.8 52 Company security officer to participate in exercises and drills The company security officer must, taking into account the guidance given in Part B of the Code, ensure the effective co-ordination and implementation of 25 Part 2 r 53 Maritime Security Regulations 2004 Reprinted as at 1 April 2021 ship security plans by participating in drills and exercises under regulations 50 and 51 at appropriate intervals.
Compare: Code, Part A s 13.5 Ship security records Ship security records The master and the company must ensure that records of the following matters included in the ship security plan (ship security records) are kept on board the ship that cover, at least, the last 10 calls at a port facility: 53 (1) (a) (b) (c) (d) (e) (f) (g) (h) (i) (j) training, drills, and exercises: security threats and security incidents: breaches of security: changes in security level: communications relating to the direct security of the ship such as spe- cific threats to the ship or to port facilities the ship is, or has been, in: internal audits and reviews of security activities: periodic review of the ship security assessment: periodic review of the ship security plan: implementation of any amendments to the plan: maintenance, calibration, and testing of any security equipment provided on board, including testing of the ship security alert system.
(2) A master of a ship and its company must ensure that the ship has available on board, at all times, information through which a person authorised by the chief executive or officers duly authorised by the Designated Authorities of other parties to the Convention may establish— (a) who is responsible for appointing the members of the crew or other per- sons currently employed or engaged on board the ship in any capacity on the business of that ship; and (b) who is responsible for deciding the employment of the ship; and (c) if the ship is employed under terms of a charter party, who are the parties to that charter party.
Compare: Annex to the Convention, Chapter XI-2 r 5; Code, Part A s 10.1 54 Language used for ship security records (1) All ship security records must be written in the working language of the ship.

(2) Despite subclause (1), if the working language of the ship is not English, French, or Spanish, a written translation of the ship security records into 1 of those languages must be included with the ship security records.
Compare: Code, Part A s 10.2 26 Reprinted as at 1 April 2021 Maritime Security Regulations 2004 Part 2 r 58 55 Ship security records may be kept in electronic form Ship security records may be kept in electronic form, in which case they must be protected from unauthorised deletion, destruction, or amendment.
Compare: Code, Part A s 10.3 56 Access to or disclosure of ship security records The master and the company must ensure that all ship security records are— (a) available to the chief executive and to officers duly authorised by the Designated Authorities of other parties to the Convention to verify that the provisions of the ship security plan are being implemented; and (b) protected from unauthorised access or disclosure.
Compare: Code, Part A s 10.4, Part B s 10.1 Communication 57 Communication (1) A company must ensure that effective means are available to notify personnel of changes in security conditions on board the ship.
(2) A company must ensure that there are effective communications systems and procedures to permit continuous communication between the ship security per- sonnel, port facilities interfacing with the ship, ships interfacing with the ship, and national or local authorities with security responsibilities.

(3) Communications systems and procedures must enable ship personnel to notify, in a timely manner, the port facility operator or other ships of a security threat or incident on board.
58 Clear grounds for imposing control measures Control measures For the purposes of section 31(1) of the Act, the chief executive has clear grounds to believe that a ship is not in compliance with the requirements of the Act if the chief executive has reasonable grounds for believing that— (a) (b) (c) (d) the certificate that is produced when required under section 29 of the Act is not valid: serious deficiencies exist in the ship’s security equipment, documenta- tion, or arrangements required by the Act or these regulations: the ship does not comply with the requirements of the Act or these regu- lations: the master or the ship personnel are not familiar with essential shipboard security procedures or cannot carry out drills related to the security of the ship or that such procedures or drills have not been carried out: 27 Part 3 r 59 Maritime Security Regulations 2004 Reprinted as at 1 April 2021 (e) key ship personnel are not able to establish proper communications with any other key ship personnel with security responsibilities on board the ship: (f) the ship— (i) (ii) has embarked persons or loaded stores or goods at a port facility or from another ship where either the port facility or the other ship is in breach of the Act or these regulations; and has not completed a declaration of security, or taken appropriate, special, or additional security measures, or maintained appropriate ship security procedures: (g) the ship— (i) has embarked persons, or loaded stores or goods at a port facility or from another source where either the port facility or the other source is not required to comply with the Act or these regulations; and (ii) has not taken appropriate, special, or additional security measures, or has not maintained appropriate security procedures: (h) if the ship holds a later, consecutively issued interim certificate, the interim certificate was requested to avoid full compliance with the Act or these regulations beyond the period that the interim certificate is valid.
Compare: Code, Part B ss 4.32, 4.33 Part 3 Port facility security Port facility security levels 59 Commencement level Unless otherwise directed by the chief executive, every port facility shall oper- ate at security level 1 from 1 July 2004.
60 Security level 1 (1) At security level 1, a port facility operator must carry out through appropriate measures the following activities to identify and take preventive measures against security incidents: (a) (b) ensure the performance of all port facility security duties; and control access to the port facility; and (c) monitor the port facility, including anchoring and berthing areas; and (d) monitor restricted areas to ensure that access is only granted to persons with appropriate authority; and 28 Reprinted as at 1 April 2021 (e) (f) (g) Maritime Security Regulations 2004 Part 3 r 64 supervise the handling of cargo; and supervise the handling of ship stores; and ensure that security communications are readily available.
(2) At security level 1, a port facility operator must implement the security meas- ures for security level 1 as specified in their approved port facility security plan.

Compare: Code, Part A s 14.2 61 Security level 2 At security level 2, the additional measures specified in the port facility secur- ity plan must be implemented for each activity specified in regulation 60.
Compare: Code, Part A s 14.3 62 Security level 3 At security level 3,— (a) (b) the further specific measures specified in the port facility security plan must be implemented for each activity specified in regulation 60; and port facilities must respond to and implement immediately any security instructions given by the chief executive.
Compare: Code, Part A ss 14.4, 14.4.1 Port facility security assessment 63 (1) Port facility security assessment Every person who carries out a port facility security assessment must have the appropriate skills or qualifications to evaluate the security of the port facility.
(2) Without limiting the matters that a port facility security assessment may include, a port facility security assessment must— (a) (b) (c) (d) identify and evaluate assets and infrastructure that need protecting; and identify possible threats to those assets and infrastructure and the likeli- hood of their occurrence in order to establish and prioritise security measures; and identify, select, and prioritise countermeasures and procedural changes and their level of effectiveness in reducing vulnerability; and identify weaknesses, including human factors, in the infrastructure, policies, and procedures.
Compare: Code, Part A ss 15.3, 15.5 Port facility security plan 64 Port facility security plan approval A port operator must submit— 29 Part 3 r 65 Maritime Security Regulations 2004 Reprinted as at 1 April 2021 (a) (b) 1 copy of their port facility security plan to the chief executive for review and approval; and a letter certifying that the port facility security plan complies with the Act and these regulations.
65 Chief executive to give notice where port facility security plan covers more than 1 port facility If the chief executive agrees that a port facility security plan may cover more than 1 port facility, he or she must give notice of the arrangement to the Inter- national Maritime Organization.

Compare: Code, Part A s 16.9 66 Language used for port facility security plan A port facility security plan must be written in English.
Compare: Code, Part A s 16.3 67 Matters to be included in port facility security plan Without limiting the matters that a port facility security plan may contain, a port facility security plan must include the matters specified in Schedule 2.

Compare: Code, Part A ss 16.1, 16.3 68 When port facility security plan may be kept in electronic form A port facility security plan may be kept in electronic form, in which case it must be protected from unauthorised deletion, destruction, or amendment.
Compare: Code, Part A s 16.7 69 Port facility security plan to be audited (1) A port facility operator must ensure an audit of the port facility security plan is performed annually, beginning no later than 1 year from the initial date of approval by the chief executive.
(2) The port facility security plan must be audited if there is a change in the facili- ty’s ownership or operator, or if there have been modifications to the facility, including but not limited to physical structure, emergency response procedures, security measures, or operations.

(3) An audit of the port facility security plan as a result of modifications to the port facility may be limited to those sections of the port facility security plan affected by the modifications.
Compare: Code, Part A s 16.3.13, Part B ss 16.3.5, 16.58, 16.59 Audits of port facility security plan to be independent Port facility personnel who conduct internal audits of the security activities specified in the port facility security plan or who evaluate the implementation 70 (1) 30 Reprinted as at 1 April 2021 Maritime Security Regulations 2004 Part 3 r 72 of the port facility security plan must be independent of the activities being audited.
(2) Subclause (1) does not apply if the requirement to be independent is impractic- able due to the size and the nature of the port facility.

Compare: Code, Part A s 16.4 Port facility security officer 71 Port facility security officer (1) A port facility operator must designate a port facility security officer for each port facility.
(2) A person may be designated as the port facility security officer for 1 or more port facilities if the port facilities for which the port facility security officer is responsible are clearly identified.

(3) A port facility operator must ensure that a port facility security officer is given the necessary support to fulfil his or her duties and responsibilities under these regulations.
Compare: Code, Part A ss 17.1, 17.3 72 Duties and responsibilities of port facility security officer The duties and responsibilities of a port facility security officer include— (a) (b) (c) (d) (e) (f) (g) (h) (i) (j) conducting an initial comprehensive security survey of the port facility, taking into account the relevant port facility security assessment; and ensuring the development and maintenance of the port facility security plan; and implementing and exercising the port facility security plan; and undertaking regular security inspections of the port facility to ensure the continuation of appropriate security measures; and recommending and incorporating, as appropriate, modifications to the port facility security plan in order to correct deficiencies and to update the plan to take into account relevant changes to the port facility; and enhancing security awareness and vigilance of the port facility person- nel; and ensuring adequate training has been provided to personnel responsible for the security of the port facility; and reporting to the relevant authorities and maintaining records of occurren- ces that threaten the security of the port facility; and co-ordinating implementation of the port facility security plan with the appropriate company and ship security officer; and co-ordinating with security services, as appropriate; and 31 Part 3 r 73 Maritime Security Regulations 2004 Reprinted as at 1 April 2021 (k) (l) ensuring that standards for personnel responsible for security of the port facility are met; and ensuring that security equipment is properly operated, tested, calibrated, and maintained; and (m) when requested, assisting a ship security officer to identify persons who seek to board the ship.
Compare: Code, Part A s 17.2 Training, drills, and exercises on port facility security 73 (1) Port facility security officer to have adequate knowledge and training The port facility operator must ensure that the port facility security officer has an adequate knowledge of, and relevant training in the following matters relat- ing to port facility security if they are applicable: (a) (b) (c) (d) (e) (f) (g) (h) (i) (j) (k) (l) (m) (n) (o) (p) (q) (r) (s) (t) security administration: the relevant international conventions, codes, and recommendations: the relevant New Zealand legislation: the responsibilities and functions of other security organisations: the methodology of port facility security assessment: the methods of ship and port facility security surveys and inspections: ship and port operations and conditions: ship and port facility security measures: emergency preparedness and response and contingency planning: the instruction techniques for security training and education, including security measures and procedures: the handling of sensitive security-related information and security-rela- ted communications: current security threats and patterns: the recognition and detection of weapons, dangerous substances, and dangerous devices: the recognition, on a non-discriminatory basis, of characteristics and behavioural patterns of people who are likely to threaten security: the techniques used to circumvent security measures: security equipment and systems, and their operational limitations: the methods of conducting audits, inspection, control, and monitoring: the methods of searches and non-intrusive inspections: security drills and exercises, including drills and exercises with ships: the assessment of security drills and exercises.
32 Reprinted as at 1 April 2021 Maritime Security Regulations 2004 Part 3 r 75 (2) The port facility operator must ensure that the port facility security officer has completed the standard International Maritime Organization course for port security facility officers.
Compare: Code, Part A s 18.1, Part B s 18.1 74 Port facility personnel with duties and responsibilities for port facility security to have adequate knowledge and training The port facility operator must ensure that port facility personnel who have duties and responsibilities for port facility security, as described in the port facility security plan,— (a) (b) (c) understand those duties and responsibilities; and have the ability to perform those duties and responsibilities; and have an adequate knowledge of, and receive appropriate training in the following matters relating to port facility security (if applicable): (i) (ii) (iii) (iv) (v) (vi) current security threats and patterns: the recognition and detection of weapons, dangerous substances, and devices: the recognition, on a non-discriminatory basis, of characteristics and behavioural patterns of people who are likely to threaten security: the techniques used to circumvent security measures: crowd management and control techniques: security-related communications: (vii) the operation of security equipment and systems: (viii) testing, calibrating, and maintaining security equipment and sys- tems: (ix) (x) inspection, control, and monitoring techniques: the methods of searches and non-intrusive inspections.
Compare: Code, Part A s 18.2, Part B s 18.2 75 Port facility personnel not involved in port facility security to be familiar with port facility security plan The port facility operator must ensure that port facility personnel who do not have duties or responsibilities for port facility security, as described in the port facility security plan, are familiar with the following matters: (a) (b) the meaning and the requirements of security level 1, security level 2, and security level 3: the recognition and detection of weapons, dangerous substances, and dangerous devices: 33 Part 3 r 76 Maritime Security Regulations 2004 Reprinted as at 1 April 2021 (c) the recognition, on a non-discriminatory basis, of the characteristics and behavioural patterns of people who are likely to threaten security: (d) the techniques used to circumvent security measures.
Compare: Code, Part B s 18.3 Port facility operator to carry out drills Taking into account the types of operation of the port facility, port facility per- sonnel changes, the type of ship the port facility is serving, and other relevant factors, the port facility operator must ensure the effective implementation of the port facility security plan by carrying out, at least every 3 months, drills that test the separate elements of the port facility security plan.
The drills referred to in subclause (1) must test the separate elements of the port facility security plan and cover all possible threats to the security of the port facility, including, but not limited to, the following types of security inci- dents: (a) (b) (c) (d) (e) (f) (g) (h) (i) damage to, or destruction of, the ship or of a port facility (for example, by explosive devices, arson, sabotage, or vandalism): hijacking or seizure of the ship or of persons on board: tampering with the cargo, essential ship equipment or systems, or ship stores: unauthorised access or use, including presence of stowaways: smuggling weapons or equipment, including weapons of mass destruc- tion: use of the ship to carry those persons who intend to cause a security inci- dent and their equipment: use of the ship itself as a weapon or as a means to cause damage or destruction: blockage of port entrances, locks, approaches, etc: nuclear, biological, and chemical attack.
Compare: Code, Part A s 18.3, Part B s 18.5 Port facility operator to facilitate exercises The port facility operator must, at least once every calender year (with no more than 18 months between the exercises), facilitate exercises that test communi- cation, co-ordination, resource availability, and response.
76 (1) (2) 77 (1) (2) The exercises may involve— (a) (b) representatives of the Designated Authority; and representatives of the chief executives of the organisations listed in sec- tion 59(1)(a)(ii) of the Act; and (c) the port facility security officer; and 34 Reprinted as at 1 April 2021 Maritime Security Regulations 2004 Part 3 r 79 (d) (e) depending on the security and work implications for the New Zealand ships to which the Act applies, the company security officer; and depending on the security and work implications for the New Zealand ships to which the Act applies, the ship security officer.
(3) The exercises may be— (a) (b) (c) full scale or live, or both; or tabletop simulations or seminars, or both; or combined with other exercises held, such as emergency response or other exercises involving the Designated Authority.
(4) The chief executive may direct that the requirements of subclauses (1) to (3) may alternatively be satisfied by— (a) (b) (c) participation of the port facility security staff and appropriate port stake- holders in an emergency response or crisis management exercise con- ducted by another government agency or private sector entity, provided that the exercise addresses components of the port facility security plan; or an actual increase in security level; or implementation of enhanced security measures enumerated in the port facility security plan during periods of critical port operations or special events.
(5) Port security drills and exercises must test the proficiency of port facility per- sonnel in assigned security duties at all security levels and the effective imple- mentation of the port facility security plan.

They must enable the port facility security officer to identify any related security deficiencies that need to be addressed.
Compare: Code, Part B ss 18.4, 18.6 78 Port facility security officer to participate in exercises and drills The port facility security officer must ensure the effective co-ordination and implementation of the port facility security plan by participating in drills and exercises under regulations 76 and 77.
Compare: Code, Part A s 18.4 Port security identification 79 (1) Port security identification For the purpose of controlling access to ships, port facilities, and port security areas, the following credentials are acceptable for the purpose of establishing identity: (a) a military identification card: 35 Part 3 r 80 Maritime Security Regulations 2004 Reprinted as at 1 April 2021 (b) (c) (d) (e) (f) (g) an identification card issued by a New Zealand government department, government agency, or the New Zealand Defence Force: a driver’s licence issued by the Director of Land Transport: a seafarer’s identity document issued by a contracting government or flag state administration: a valid passport: an identification credential issued by a port facility operator: an identification credential issued by a recognised company, union, or trade association: (h) other forms of identification approved by the chief executive.
(2) Despite subclause (1), the identification listed in subclause (1) is only accepta- ble if it contains— (a) (b) (c) the holder’s full name; and the holder’s photograph; and the name of the issuing authority.

(3) (4) The identification must be protected against being tampered with (for example, be laminated).

In regulation (1)(c), Director of Land Transport means the Director of Land Transport appointed under section 104A of the Land Transport Management Act 2003.
Regulation 79(1)(c): amended, on 1 April 2021, by section 175(2) of the Land Transport (NZTA) Legislation Amendment Act 2020 (2020 No 48).

Regulation 79(4): inserted, on 1 April 2021, by section 175(2) of the Land Transport (NZTA) Legis- lation Amendment Act 2020 (2020 No 48).

80 Signs (1) A port facility operator must, if and as directed by the chief executive, affix signs at the perimeter of the port security area.
(2) The sign or signs must identify the portion of the port that is designated as port security area.
Part 4 Verification and certification for ships Verifications for ships Verifications for ships Every New Zealand ship must have— (a) an initial verification before the ship is put in service or before the Inter- national Ship Security Certificate (certificate) is first issued; and 81 (1) 36 Reprinted as at 1 April 2021 Maritime Security Regulations 2004 Part 4 r 84 (b) (c) (d) a renewal verification at intervals specified by the chief executive, which must not exceed 5 years, unless otherwise provided by these regulations; and at least 1 intermediate verification; and any additional verifications as determined by the chief executive.
The chief executive must carry out all verifications for ships.

The chief executive must ensure the completeness and efficiency of every veri- fication for a ship.

The company and master of a ship must ensure that, after its verification, the ship’s security system (including any associated security equipment)— (a) is maintained in accordance with the Act, these regulations, and the approved ship security plan; and (b) is not altered without the approval of the chief executive.
(2) (3) (4) Compare: Code, Part A s 19.1 82 Initial verification An initial verification for a New Zealand ship must— (a) (b) (c) include a complete verification of the ship’s security system (including any associated security equipment); and ensure that the ship’s security system (including any associated security equipment) fully complies with the Act, these regulations, and the approved ship security plan; and ensure that the security system (including any associated security equip- ment) is in a satisfactory condition and is fit for the service for which the ship is intended.
Compare: Code, Part A s 19.1.1.1 83 Renewal verification A renewal verification for a New Zealand ship must ensure that the ship’s security system (including any associated security equipment)— (a) (b) fully complies with the Act, these regulations, and the approved ship security plan; and is in a satisfactory condition and is fit for the service for which the ship is intended.
Compare: Code, Part A s 19.1.1.2 Intermediate verification If only 1 intermediate verification is carried out, the verification must take place between the second and third anniversary date of the certificate.
84 (1) 37 Part 4 r 85 Maritime Security Regulations 2004 Reprinted as at 1 April 2021 (2) The intermediate verification must include an inspection of the ship’s security system (including any associated security equipment) to ensure that it remains satisfactory for the service for which the ship is intended.

(3) The intermediate verification must be endorsed on the certificate.
Compare: Code, Part A s 19.1.1.3 International Ship Security Certificate 85 (1) (2) Issue of certificate The chief executive may issue a certificate for a New Zealand ship after an ini- tial verification is completed for the ship.

The chief executive may issue a new certificate or endorse an existing certifi- cate for a ship after a renewal verification is completed for the ship.
Compare: Code, Part A s 19.2 Duration and validity of certificate 86 Duration of certificate (1) A certificate may be issued for the period specified by the chief executive, which must not exceed 5 years.

If a certificate is issued for a period of less than 5 years, the chief executive may extend the validity of the certificate beyond the expiry date to the maxi- mum 5-year period.
Subclause (2) applies only if the verifications that are required when a certifi- cate is issued for a period of 5 years are carried out.

Compare: Code, Part A ss 19.3.1, 19.3.3 Validity of certificate for renewal verification If a renewal verification is completed within 3 months before the expiry date of the existing certificate, the new certificate is valid from the date of completion of the renewal verification to a date not exceeding 5 years from the date of expiry of the existing certificate.
If a renewal verification is completed more than 3 months before the expiry date of the existing certificate, the new certificate is valid from the date of completion of the renewal verification to a date not exceeding 5 years from the date of completion of the renewal verification.
If a renewal verification is completed after the expiry date of the existing cer- tificate, the new certificate is valid from the date of completion of the renewal verification to a date not exceeding 5 years from the date of expiry of the exist- ing certificate.

If a renewal verification has been completed and a new certificate cannot be issued or placed on board the ship before the expiry date of the existing certifi- cate, the chief executive may endorse the existing certificate.
(2) (3) 87 (1) (2) (3) (4) 38 Reprinted as at 1 April 2021 Maritime Security Regulations 2004 Part 4 r 91 (5) If the chief executive endorses an existing certificate under subclause (4), the existing certificate is valid for a further period, which must not exceed 5 months from the expiry date of that certificate.
Compare: Code, Part A ss 19.3.2, 19.3.4 88 Validity of certificate for intermediate verification If an intermediate verification is completed before the period specified in regu- lation 81(1),— (a) (b) the expiry date shown on the certificate must be amended by endorse- ment to a date that must not be more than 3 years after the date on which the intermediate verification was completed; but the expiry date may remain unchanged if 1 or more additional verifica- tions are carried out so that the maximum 5-year interval between the verifications is not exceeded.
Compare: Code, Part A s 19.3.7 89 (1) (2) (3) Extension of certificate when ship not in port for verification If a ship’s certificate expires and the ship is not in a port for verification, the company must apply to the chief executive for an extension.

The chief executive may grant an extension, which must not exceed 3 months.
The chief executive may grant an extension under subclause (2) only— (a) for the purpose of allowing the ship to complete its voyage to the port in which it is to be verified; and (b) if the chief executive considers that it is proper and reasonable to do so.

(4) A ship that is granted an extension must not leave the port in which it is to be verified without a new certificate.
(5) A new certificate issued to a ship that has been granted an extension under this regulation is valid for a period not exceeding 5 years from the expiry date of the existing certificate (excluding the extended period).
Compare: Code, Part A s 19.3.5 90 Extension of certificate for ships engaged on short voyages (1) A certificate issued to a ship engaged on short voyages that has not already been extended under these regulations may be extended by the chief executive for a period not exceeding 1 month from the date of expiry of the certificate.
(2) Anew certificate issued to a ship that has been granted an extension under this regulation is valid for a period not exceeding 5 years from the date of expiry of the existing certificate (excluding the extended period).
Compare: Code, Part A s 19.3.6 91 When certificate ceases to be valid A certificate ceases to be valid— 39 Part 4 r 92 Maritime Security Regulations 2004 Reprinted as at 1 April 2021 (a) (b) (c) if the relevant verifications are not completed within the periods speci- fied in these regulations; and if the certificate is not endorsed in accordance with these regulations; and when a company assumes the responsibility for the operation of a ship not previously operated by that company; and (d) on transfer of the ship to another State that is a party to the Convention.
Compare: Code, Part A s 19.3.8 Interim International Ship Security Certificate 92 Issue of interim certificate The chief executive may issue an interim International Ship Security Certifi- cate (interim certificate) in the following cases: (a) (b) (c) in the case of a ship without a certificate, on delivery or before its entry or re-entry into service: in the case of a transfer of a New Zealand ship to a State that is a party to the Convention: in the case of a transfer of a ship from a State that is a party to the Con- vention to New Zealand owners: (d) when a company assumes the responsibility for the operation of a ship not previously operated by that company.
Compare: Code, Part A ss 19.4.1, 19.4.3 93 Requirements before issuing interim certificates The chief executive must, before issuing an interim certificate, verify that— (a) (b) (c) (d) the ship security assessment has been completed in accordance with the Act and these regulations; and a copy of the ship security plan is on board the ship, has been submitted for review and approval, and is being implemented on the ship; and the ship has a ship security alert system that complies with the Act and these regulations; and the company security officer has made arrangements for carrying out an initial verification, and is satisfied that the ship will successfully com- plete the verification required under regulation 81(1)(a) within 6 months; and (e) the master, the ship’s security officer, and the ship’s other personnel who have security duties,— (i) are familiar with their duties and responsibilities, and with the relevant provisions of the ship security plan; and 40 Reprinted as at 1 April 2021 Maritime Security Regulations 2004 Schedule 1 (ii) have been provided that information in languages understood by them; and (f) the ship security officer meets the requirements of these regulations.
Compare: Code, Part A s 19.4.2 94 Duration and validity of interim certificate (1) An interim certificate is valid for 6 months or until the certificate under regula- tion 85 is issued (whichever first occurs).

(2) An interim certificate may not be extended.


Compare: Code, Part A s 19.4.4 95 Restrictions on issue of further interim certificate The chief executive may not issue another interim certificate for a ship after the interim certificate for that ship has expired if the chief executive considers that a purpose of the interim certificate is for the ship or company to avoid comply- ing with the Act or these regulations.
Compare: Code, Part A s 19.4.5 96 Requirements before accepting validity of interim certificate The chief executive must, before issuing an interim certificate, ensure that all the requirements of regulation 93(b), (d), and (e) have been met.
Compare: Code, Part A s 19.4.6 Schedule 1 Matters to be included in ship security plan rr 36, 37 The following matters must be included in a ship security plan: (a) (b) (c) (d) (e) the identification, and 24-hour contact details, of the company security officer responsible for the ship; and the identification of the ship security officer; and a description of the duties of shipboard personnel assigned security responsibil- ities and of other shipboard personnel on security aspects; and a clear statement on the authority of the master, including the master’s overrid- ing authority and responsibility to— (i) (ii) make decisions concerning the safety and security of the ship; and request the assistance of the company or the Designated Authority of any party to the Convention, as may be necessary; and the procedures for responding to any security instructions given at security level 3 by the chief executive or the Designated Authority of any party to the Convention; and 41 Schedule 1 Maritime Security Regulations 2004 Reprinted as at 1 April 2021 the procedures for interfacing with port facility security activities; and the measures designed to prevent the unauthorised taking on board a ship of— (i) (ii) (iii) a firearm, or any other dangerous or offensive weapon or instrument of any kind; or any ammunition; or an explosive, incendiary, biological, or chemical substance or device, or any other injurious substance or device of any kind, that could be used to endanger the safety of the ship, persons on board the ship, the port secur- ity area, or persons in the port security area; and the identification of all restricted areas; and the measures to prevent unauthorised access to— (i) (ii) the restricted areas; and the ship; and the procedures for responding to security threats or breaches of security, including a description of how critical operations of the ship or ship-port inter- face will be maintained; and the evacuation procedures in case of security threats or breaches of security; and the procedures for
 reporting security incidents; and the location of the ship security alert system activation points; and the procedures, instructions, and guidance on the use of the ship security alert system, including testing, activation, deactivation, and resetting, and limiting false alerts; and the procedures for inspecting, testing, calibrating, and maintaining any security equipment on board the ship; and the frequency of inspecting, testing, calibrating, and maintaining any security equipment on board the ship; and the procedures for training, drills, and exercises associated with the ship secur- ity plan; and the frequency of the training, drills, and exercises; and the procedures for auditing the ship’s security activities, and the frequency of the audit; and the procedures for the periodic review of the ship security plan and for updat- ing it; and the frequency of the periodic review of the ship security plan; and security measures for all security levels to— (i) address each vulnerability identified in the ship security assessment; and (f) (g) (h) (i) (j) (k) (l) (m) (n) (o) (p) (q) (r) (s) (t) (u) (v) 42 Reprinted as at 1 April 2021 Maritime Security Regulations 2004 Schedule 2 (ii) secure any item listed in subclause (g), where that item is authorised to be on the ship; and (iii) control access to the ship including: (A) (B) (C) (D) access ladders; and access gangways; and access ramps; and access doors, sidescuttles, windows, and ports; and (E) mooring lines and anchor chains; and (F) cranes and hoisting gear; and (w) the organisational structure of security for the ship.
Compare: Code, Part A ss 6.1, 9.4.1–9.4.18, Part B ss 9.1, 9.2.1, 9.9 Schedule 2 Matters to be included in port facility security plan r 67 The following matters must be included in a port facility security plan: (a) (b) (c) (d) (e) (f) (g) the name, and 24-hour contact details, of the port facility security officer; and the duties of port facility personnel assigned security responsibilities and of other port facility personnel on security aspects; and the procedures for responding to any security instructions that the chief execu- tive may give at security level 3; and the procedures for interfacing with ship security activities; and the measures designed to prevent the unauthorised taking on board a ship or into a port security area of— (i) (ii) (iii) a firearm, or any other dangerous or offensive weapon or instrument of any kind; or any ammunition; or an explosive, incendiary, biological, or chemical substance or device, or any other injurious substance or device of any kind, that could be used to endanger the safety of the ship, persons on board the ship, the port secur- ity area, or persons in the port security area; and the measures designed to prevent unauthorised access to the port facility, to ships moored at the port facility, to restricted areas of the port facility, and to areas of the port facility designated as a port security area under section 45 of the Act; and the procedures for responding to security threats or breaches of security, including a description of how critical operations of the port facility or ship- port interface will be maintained; and 43 Schedule 2 Maritime Security Regulations 2004 Reprinted as at 1 April 2021 (h) (i) (j) (k) (1) the evacuation procedures in case of security threats or breaches of security; and the procedures for reporting security incidents; and the procedures for assessing the implications of security threats or breaches of security under subclauses (g) and (h) and of security incidents reported under subclause (i) for the continued appropriateness of the
 relevant parts of the ship security plan; and the procedures for responding if the ship security alert system of a ship at the port facility is activated; and the measures designed to ensure effective security of cargo and the cargo han- dling equipment at the port facility; and (m) the procedures for facilitating— (i) (ii) shore leave for ship personnel or personnel changes; and access of visitors to the ship, including representatives of seafarers’ wel- fare and labour organisations; and the procedures and measures by which an exclusion zone declared under sec- tion 59 of the Act is maintained; and the procedures for training, drills, and exercises associated with the port facility security plan; and the frequency of the training, drills, and exercises referred to in subclause (o); and the procedures for auditing the port facility security plan, and the frequency of the audit; and the procedures for evaluating the initial implementation of the port facility security plan to ensure the port facility security plan is adequate; and the procedures for the periodic review of the port facility security plan and for updating it; and the frequency of the periodic review of the port facility security plan; and the measures for ensuring the security of the information contained in the port facility security plan; and (n) (o) (p) (q) (r) (s) (t) (u) (v) security measures for all security levels to— (i) (ii) (iii) (iv) secure any item listed in subclause (e), where that item is authorised to be in the port facility; and ensure that unaccompanied baggage does not contain any item listed in subclause (e); and control access to the port facility by requiring identification as set out in regulation 79; and ensure that only people who are authorised to enter the port facility may enter it.
44 Reprinted as at 1 April 2021 Maritime Security Regulations 2004 Schedule 2 Compare: Code, Part A ss 16.3.1–15 Issued under the authority of the Legislation Act 2012.

Date of notification in Gazette: 3 June 2004.

Diane Morcom, Clerk of the Executive Council.


45 Notes Maritime Security Regulations 2004 Reprinted as at 1 April 2021 Reprints notes 1 General This is a reprint of the Maritime Security Regulations 2004 that incorporates all the amendments to those regulations as at the date of the last amendment to them.

2 Legal status Reprints are presumed to correctly state, as at the date of the reprint, the law enacted by the principal enactment and by any amendments to that enactment.
Section 18 of the Legislation Act 2012 provides that this reprint, published in electronic form, has the status of an official version under section 17 of that Act.

A printed version of the reprint produced directly from this official elec- tronic version also has official status.

3 Editorial and format changes Editorial and format changes to reprints are made using the powers under sec- tions 24 to 26 of the Legislation Act 2012.

See also http://www.pco.parlia- ment.govt.nz/editorial-conventions/.
4 Amendments incorporated in this reprint Land Transport (NZTA) Legislation Amendment Act 2020 (2020 No 48): section 175(2) Wellington, New Zealand: Published under the authority of the New Zealand Government—2021 46