1625-0077 Stat/Authority

Pt. 104

33 CFR Ch. I (7–1–09 Edition)

(b) Exercise documentation will be
kept by the COTP for 2 years.

104.305 Vessel Security Assessment (VSA)
requirements.
104.310 Submission requirements.

PART 104—MARITIME SECURITY:
VESSELS

Subpart D—Vessel Security Plan (VSP)

Subpart A—General
Sec.
104.100 Definitions.
104.105 Applicability.
104.106 Passenger access area.
104.107 Employee access area.
104.110 Exemptions.
104.115 Compliance.
104.120 Compliance documentation.
104.125 Noncompliance.
104.130 Waivers.
104.135 Equivalents.
104.140 Alternative Security Programs.
104.145 Maritime Security (MARSEC) Directive.
104.150 Right to appeal.

cprice-sewell on DSKDVH8Z91PROD with CFR

Subpart B—Vessel Security Requirements
104.200 Owner or operator.
104.205 Master.
104.210 Company Security Officer (CSO).
104.215 Vessel Security Officer (VSO).
104.220 Company or vessel personnel with
security duties.
104.225 Security training for all other vessel
personnel.
104.230 Drill and exercise requirements.
104.235 Vessel recordkeeping requirements.
104.240 Maritime Security (MARSEC) Level
coordination and implementation.
104.245 Communications.
104.250 Procedures for interfacing with facilities and other vessels.
104.255 Declaration of Security (DoS).
104.260 Security systems and equipment
maintenance.
104.265 Security measures for access control.
104.267 Security measures for newly hired
employees.
104.270 Security measures for restricted
areas.
104.275 Security measures for handling
cargo.
104.280 Security measures for delivery of
vessel stores and bunkers.
104.285 Security measures for monitoring.
104.290 Security incident procedures.
104.292 Additional requirements—passenger
vessels and ferries.
104.295 Additional
requirements—cruise
ships.
104.297 Additional requirements—vessels on
international voyages.

Subpart C—Vessel Security Assessment
(VSA)
104.300

General.

104.400 General.
104.405 Format of the Vessel Security Plan
(VSP).
104.410 Submission and approval.
104.415 Amendment and audit.
AUTHORITY: 33 U.S.C. 1226, 1231; 46 U.S.C.
Chapter 701; 50 U.S.C. 191; 33 CFR 1.05–1, 6.04–
11, 6.14, 6.16, and 6.19; Department of Homeland Security Delegation No. 0170.1.
SOURCE: USCG–2003–14749, 68 FR 39302, July
1, 2003, unless otherwise noted.

Subpart A—General
§ 104.100

Definitions.

Except as specifically stated in this
subpart, the definitions in part 101 of
this subchapter apply to this part.
§ 104.105

Applicability.

(a) This part applies to the owner or
operator of any:
(1) Mobile Offshore Drilling Unit
(MODU), cargo, or passenger vessel
subject to the International Convention for Safety of Life at Sea, 1974,
(SOLAS), Chapter XI–1 or Chapter XI–
2;
(2) Foreign cargo vessel greater than
100 gross register tons;
(3) Self-propelled U.S. cargo vessel
greater than 100 gross register tons
subject to 46 CFR subchapter I, except
commercial fishing vessels inspected
under 46 CFR part 105;
(4) Vessel subject to 46 CFR chapter
I, subchapter L;
(5) Passenger vessel subject to 46 CFR
chapter I, subchapter H;
(6) Passenger vessel certificated to
carry more than 150 passengers;
(7) Other passenger vessel carrying
more than 12 passengers, including at
least one passenger-for-hire, that is engaged on an international voyage;
(8) Barge subject to 46 CFR chapter I,
subchapters D or O;
(9) Barge carrying certain dangerous
cargo in bulk or barge that is subject
to 46 CFR Chapter I, subchapter I, that
is engaged on an international voyage.
(10) Tankship subject to 46 CFR chapter I, subchapters D or O; and

354

VerDate Nov<24>2008

10:06 Aug 18, 2009

Jkt 217130

PO 00000

Frm 00364

Fmt 8010

Sfmt 8010

Y:\SGML\217130.XXX

217130

cprice-sewell on DSKDVH8Z91PROD with CFR

Coast Guard, DHS

§ 104.110

(11) Towing vessel greater than eight
meters in registered length that is engaged in towing a barge or barges subject to this part, except a towing vessel
that—
(i) Temporarily assists another vessel
engaged in towing a barge or barges
subject to this part;
(ii) Shifts a barge or barges subject
to this part at a facility or within a
fleeting facility;
(iii) Assists sections of a tow through
a lock; or
(iv) Provides emergency assistance.
(b) An owner or operator of any vessel not covered in paragraph (a) of this
section is subject to parts 101 through
103 of this subchapter.
(c) Foreign Vessels that have on
board a valid International Ship Security Certificate that certifies that the
verifications required by part A, Section 19.1, of the International Ship and
Port Facility Security (ISPS) Code (Incorporated by reference, see § 101.115 of
this subchapter) have been completed
will be deemed in compliance with this
part, except for §§ 104.240, 104.255,
104.292, and 104.295, as appropriate. This
includes ensuring that the vessel meets
the applicable requirements of SOLAS
Chapter XI–2 (Incorporated by reference, see § 101.115 of this subchapter)
and the ISPS Code, part A, having
taken into account the relevant provisions of the ISPS Code, part B, and
that the vessel is provided with an approved security plan.
(d) The TWIC requirements found in
this part do not apply to foreign vessels.
(e) The TWIC requirements found in
this part do not apply to mariners employed aboard vessels moored at U.S.
facilities only when they are working
immediately adjacent to their vessels
in the conduct of vessel activities.
(f) Except pursuant to international
treaty, convention, or agreement to
which the U.S. is a party, this part
does not apply to any foreign vessel
that is not destined for, or departing
from, a port or place subject to the jurisdiction of the U.S. and that is in:
(1) Innocent passage through the territorial sea of the U.S.; or

(2) Transit through the navigable waters of the U.S. that form a part of an
international strait.
[USCG–2003–14749, 68 FR 39302, July 1, 2003, as
amended at 68 FR 60513, Oct. 22, 2003; USCG–
2004–18057, 69 FR 34925, June 23, 2004; USCG–
2004–19963, 70 FR 74669, Dec. 16, 2005; USCG–
2006–24196, 72 FR 3579, Jan. 25, 2007]

§ 104.106

Passenger access area.

(a) A ferry, passenger vessel, or
cruise ship may designate areas within
the vessel as passenger access areas.
(b) A passenger access area is a defined space, within the area over which
the owner or operator has implemented
security measures for access control, of
a ferry, passenger vessel, or cruise ship
that is open to passengers. It is not a
secure area and does not require a
TWIC for unescorted access.
(c) Passenger access areas may not
include any areas defined as restricted
areas in the VSP.
[USCG–2006–24196, 72 FR 3579, Jan. 25, 2007, as
amended by USCG–2008–0179, 73 FR 35009,
June 19, 2008]

§ 104.107

Employee access area.

(a) A ferry or passenger vessel, excluding cruise ships, may designate
areas within the vessel as employee access areas.
(b) An employee access area is a defined space, within the area over which
the owner or operator has implemented
security measures for access control, of
a ferry or passenger vessel that is open
only to employees and not to passengers. It is not a secure area and does
not require a TWIC for unescorted access.
(c) Employee access areas may not
include any areas defined as restricted
areas in the VSP.
[USCG–2006–24196, 72 FR 3579, Jan. 25, 2007]

§ 104.110

Exemptions.

(a) This part does not apply to warships, naval auxiliaries, or other vessels owned or operated by a government and used only on government
non-commercial service.
(b) A vessel is not subject to this part
while the vessel is laid up, dismantled,
or otherwise out of commission.
[USCG–2003–14749, 68 FR 60513, Oct. 22, 2003]

355

VerDate Nov<24>2008

10:06 Aug 18, 2009

Jkt 217130

PO 00000

Frm 00365

Fmt 8010

Sfmt 8010

Y:\SGML\217130.XXX

217130

§ 104.115
§ 104.115

33 CFR Ch. I (7–1–09 Edition)
Compliance.

cprice-sewell on DSKDVH8Z91PROD with CFR

(a) Vessel owners or operators must
ensure their vessels are operating in
compliance with this part.
(b) Owners or operators of foreign
vessels must comply with the following—
(1) Vessels subject to the International Convention for Safety of Life
at Sea, 1974, (SOLAS), Chapter XI–1 or
Chapter XI–2, must carry on board a
valid International Ship Security Certificate
that
certifies
that
the
verifications required by part A, Section 19.1, of the International Ship and
Port Facility Security (ISPS) Code (Incorporated by reference, see § 101.115 of
this subchapter) have been completed.
This includes ensuring that the vessel
meets the applicable requirements of
SOLAS Chapter XI–2 (Incorporated by
reference, see § 101.115 of this chapter)
and the ISPS Code, part A, having
taken into account the relevant provisions of the ISPS Code, part B, and
that the vessel is provided with an approved security plan.
(2) Vessels not subject to SOLAS
Chapter XI–1 or Chapter XI–2, may
comply with this part through an Alternative Security Program or a bilateral arrangement approved by the
Coast Guard. If not complying with an
approved Alternative Security Program or bilateral arrangement, these
vessels must meet the requirements of
paragraph (b) of this section.
(c) Persons required to obtain a TWIC
under this part may enroll beginning
after the date set by the Coast Guard
in a Notice to be published in the FEDERAL REGISTER. This notice will be directed to all facilities and vessels within a specific COTP zone.
(d) By April 15, 2009, vessel owners or
operators subject to paragraph (b) of
this section and not excluded by
§ 104.105(d) of this part must be operating in accordance with the TWIC provisions found within this part.
[USCG–2003–14749, 68 FR 60513, Oct. 22, 2003,
as amended by USCG–2004–18057, 69 FR 34925,
June 23, 2004; USCG–2004–19963, 70 FR 74669,
Dec. 16, 2005; USCG–2006–25150, 71 FR 39208,
July 12, 2006; USCG–2006–24196, 72 FR 3579,
Jan. 25, 2007; 73 FR 25565, May 7, 2008]

§ 104.120 Compliance documentation.
(a) Each vessel owner or operator
subject to this part must ensure, on or
before July 1, 2004, that copies of the
following documents are carried on
board the vessel and are made available to the Coast Guard upon request:
(1) The approved Vessel Security
Plan (VSP) and any approved revisions
or amendments thereto, and a letter of
approval from the Commanding Officer, Marine Safety Center (MSC);
(2) The VSP submitted for approval
and a current acknowledgement letter
from the Commanding Officer, MSC,
stating that the Coast Guard is currently reviewing the VSP submitted
for approval, and that the vessel may
continue to operate so long as the vessel remains in compliance with the
submitted plan;
(3) For vessels operating under a
Coast Guard-approved Alternative Security Program as provided in § 104.140,
a copy of the Alternative Security Program the vessel is using, including a
vessel specific security assessment report generated under the Alternative
Security Program, as specified in
§ 101.120(b)(3) of this subchapter, and a
letter signed by the vessel owner or operator, stating which Alternative Security Program the vessel is using and
certifying that the vessel is in full
compliance with that program; or
(4) For foreign vessels, subject to the
International Convention for Safety of
Life at Sea, 1974, (SOLAS), Chapter XI–
1 or Chapter XI–2, a valid International
Ship Security Certificate (ISSC) that
attests to the vessel’s compliance with
SOLAS Chapter XI–2 and the ISPS
Code, part A (Incorporated by reference, see § 101.115 of this subchapter)
and is issued in accordance with the
ISPS Code, part A, section 19. As stated in Section 9.4 of the ISPS Code, part
A requires that, in order for the ISSC
to be issued, the provisions of part B of
the ISPS Code need to be taken into
account.
(b) Each owner or operator of an unmanned vessel subject to this part
must maintain the documentation described in paragraphs (a)(1), (2), or (3)
of this section. The letter required by
each of those paragraphs must be carried on board the vessel. The plan or
program required by each of those

356

VerDate Nov<24>2008

10:06 Aug 18, 2009

Jkt 217130

PO 00000

Frm 00366

Fmt 8010

Sfmt 8010

Y:\SGML\217130.XXX

217130

Coast Guard, DHS

§ 104.200

paragraphs must not be carried on
board the vessel, but must be maintained in a secure location. During
scheduled inspections, the plan or program must be made available to the
Coast Guard upon request.
(c) Each vessel owner or operator
who designates a passenger or employee access area (as those terms are
defined in §§ 104.106 and 104.107 of this
part) on their vessel must keep on
board the vessel with their approved
VSP a clear, visual representation
(such as a vessel schematic) of where
those designated areas fall. This need
not be submitted to the Coast Guard
for approval until incorporated into
the VSP at the next VSP submittal (either renewal or amendment), but must
be made available to the Coast Guard
upon request.
[USCG–2003–14749, 68 FR 39302, July 1, 2003, as
amended at 68 FR 60513, Oct. 22, 2003; USCG–
2004–18057, 69 FR 34925, June 23, 2004; USCG–
2006–24196, 72 FR 3579, Jan. 25, 2007]

§ 104.125

Noncompliance.

cprice-sewell on DSKDVH8Z91PROD with CFR

When a vessel must temporarily deviate from the requirements of this part,
the vessel owner or operator must notify the cognizant COTP, and either
suspend operations or request and receive permission from the COTP to
continue operating.

facilities or ports that the vessel may
visit.
[USCG–2003–14749, 68 FR 39302, July 1, 2003, as
amended by USCG–2008–0179, 73 FR 35009,
June 19, 2008]

§ 104.135

Equivalents.

For any measure required by this
part, the vessel owner or operator may
propose an equivalent as provided in
§ 101.130 of this subchapter.
§ 104.140 Alternative
grams.

Security

A vessel owner or operator may use
an Alternative Security Program as
approved under § 101.120 of this subchapter if:
(a) The Alternative Security Program is appropriate to that class of
vessel;
(b) The vessel is not subject to the
International Convention for Safety of
Life at Sea, 1974; and
(c) The Alternative Security Program is implemented in its entirety.
[USCG–2003–14749, 68 FR 39302, July 1, 2003, as
amended at 68 FR 60513, Oct. 22, 2003]

§ 104.145 Maritime Security (MARSEC)
Directive.

[USCG–2003–14749, 68 FR 60513, Oct. 22, 2003]

Each vessel owner or operator subject to this part must comply with any
instructions contained in a MARSEC
Directive issued under § 101.405 of this
subchapter.

§ 104.130

§ 104.150

Waivers.

Any vessel owner or operator may
apply for a waiver of any requirement
of this part that the owner or operator
considers unnecessary in light of the
nature or operating conditions of the
vessel. A request for a waiver must be
submitted in writing with justification
to the Commandant (CG-54) at 2100 Second St., SW., Washington, DC 20593.
The Commandant (CG-54) may require
the vessel owner or operator to provide
additional data for determining the validity of the requested waiver. The
Commandant (CG-54) may grant, in
writing, a waiver with or without conditions only if the waiver will not reduce the overall security of the vessel,
its passengers, its crew, or its cargo, or

Right to appeal.

Any person directly affected by a decision or action taken under this part,
by or on behalf of the Coast Guard,
may appeal as described in § 101.420 of
this subchapter.

Subpart B—Vessel Security
Requirements
§ 104.200

Owner or operator.

(a) Each vessel owner or operator
must ensure that the vessel operates in
compliance with the requirements of
this part.
(b) For each vessel, the vessel owner
or operator must:
(1) Define the security organizational
structure for each vessel and provide
all personnel exercising security duties

357

VerDate Nov<24>2008

Pro-

10:06 Aug 18, 2009

Jkt 217130

PO 00000

Frm 00367

Fmt 8010

Sfmt 8010

Y:\SGML\217130.XXX

217130

cprice-sewell on DSKDVH8Z91PROD with CFR

§ 104.200

33 CFR Ch. I (7–1–09 Edition)

or responsibilities within that structure with the support needed to fulfill
security obligations;
(2) Designate, in writing, by name or
title, a Company Security Officer
(CSO), a Vessel Security Officer (VSO)
for each vessel, and identify how those
officers can be contacted at any time;
(3) Ensure personnel receive training,
drills, and exercises enabling them to
perform their assigned security duties;
(4) Inform vessel personnel of their
responsibility to apply for and maintain a TWIC, including the deadlines
and methods for such applications, and
of their obligation to inform TSA of
any event that would render them ineligible for a TWIC, or which would invalidate their existing TWIC;
(5) Ensure vessel security records are
kept;
(6) Ensure that adequate coordination of security issues takes place between vessels and facilities; this includes the execution of a Declaration
of Security (DoS);
(7) Ensure coordination of shore
leave, transit, or crew change-out for
vessel personnel, as well as access
through the facility of visitors to the
vessel (including representatives of
seafarers’ welfare and labor organizations), with facility operators in advance of a vessel’s arrival. Vessel owners or operators may refer to treaties
of friendship, commerce, and navigation between the U.S. and other nations in coordinating such leave. The
text of these treaties can be found at
http://www.marad.dot.gov/Programs/treaties.html;
(8) Ensure security communication is
readily available;
(9) Ensure coordination with and implementation of changes in Maritime
Security (MARSEC) Level;
(10) Ensure that security systems and
equipment are installed and maintained;
(11) Ensure that vessel access, including the embarkation of persons and
their effects, is controlled;
(12) Ensure that TWIC procedures are
implemented as set forth in this part,
including;
(i) Ensuring that only individuals
who hold a TWIC and are authorized to
be in secure areas are permitted to escort;

(ii) Identifying what action is to be
taken by an escort, or other authorized
individual, should individuals under escort engage in activities other than
those for which escorted access was
granted; and
(iii) Notifying vessel employees, and
passengers if applicable, of what parts
of the vessel are secure areas, employee access areas, and passenger access areas, as applicable, and ensuring
such areas are clearly marked.
(13) Ensure that restricted areas are
controlled and TWIC provisions are coordinated, if applied to such restricted
areas;
(14) Ensure that protocols consistent
with § 104.265(c) of this part, for dealing
with individuals requiring access who
report a lost, damaged, or stolen TWIC,
or who have applied for and not yet received a TWIC, are in place;
(15) Ensure that cargo and vessel
stores and bunkers are handled in compliance with this part;
(16) Ensure restricted areas, deck
areas, and areas surrounding the vessel
are monitored;
(17) Provide the Master, or for vessels
on domestic routes only, the CSO, with
the following information:
(i) Parties responsible for appointing
vessel personnel, such as vessel management companies, manning agents,
contractors, concessionaires (for example, retail sales outlets, casinos, etc.);
(ii) Parties responsible for deciding
the employment of the vessel, including time or bareboat charters or any
other entity acting in such capacity;
and
(iii) In cases when the vessel is employed under the terms of a charter
party, the contract details of those
documents, including time or voyage
charters; and
(18) Give particular consideration to
the convenience, comfort, and personal
privacy of vessel personnel and their
ability to maintain their effectiveness
over long periods; and
(19) If applicable, ensure that protocols consistent with § 104.267 of this

358

VerDate Nov<24>2008

10:06 Aug 18, 2009

Jkt 217130

PO 00000

Frm 00368

Fmt 8010

Sfmt 8010

Y:\SGML\217130.XXX

217130

Coast Guard, DHS

§ 104.210

part, for dealing with newly hired employees who have applied for and not
yet received a TWIC, are in place.
[USCG–2003–14749, 68 FR 39302, July 1, 2003, as
amended by USCG–2003–14749, 68 FR 60513,
Oct. 22, 2003; USCG–2006–24196, 72 FR 3579,
Jan. 25, 2007]

cprice-sewell on DSKDVH8Z91PROD with CFR

§ 104.205

Master.

(a) Nothing in this part is intended to
permit the Master to be constrained by
the Company, the vessel owner or operator, or any other person, from taking
or executing any decision which, in the
professional judgment of the Master, is
necessary to maintain the safety and
security of the vessel. This includes denial of access to persons—except those
identified as duly authorized by the
cognizant government authority—or
their effects, and refusal to load cargo,
including containers or other closed
cargo transport units.
(b) If, in the professional judgment of
the Master, a conflict between any
safety and security requirements applicable to the vessel arises during its operations, the Master may give precedence to measures intended to maintain the safety of the vessel, and take
such temporary security measures as
seem best under all circumstances. In
such cases:
(1) The Master must, as soon as practicable, inform the nearest COTP. If
the vessel is on a foreign voyage, the
Master must promptly inform the
Coast Guard via the NRC at 1–800–424–
8802, direct telephone at 202–267–2675;
Fax: 202–267–1322, TDD at 202–267–4477,
or E-mail at [email protected]
and if subject to the jurisdiction of a
foreign government, the relevant maritime authority of that foreign government;
(2) The temporary security measures
must, to the highest possible degree, be
commensurate with the prevailing
Maritime Security (MARSEC) Level;
and
(3) The owner or operator must ensure that such conflicts are resolved to
the satisfaction of the cognizant COTP,
or for vessels on international voyages,

the Commandant (CG-54), and that the
possibility of recurrence is minimized.
[USCG–2003–14749, 68 FR 39302, July 1, 2003, as
amended at 68 FR 60513, Oct. 22, 2003; USCG–
2006–25150, 71 FR 39208, July 12, 2006; USCG–
2008–0179, 73 FR 35009, June 19, 2008]

§ 104.210 Company Security Officer
(CSO).
(a) General. (1) Each vessel owner or
operator must designate in writing a
CSO.
(2) A vessel owner or operator may
designate a single CSO for all its vessels to which this part applies, or may
designate more than one CSO, in which
case the owner or operator must clearly identify the vessels for which each
CSO is responsible.
(3) A CSO may perform other duties
within the owner or operator’s organization, including the duties of a Vessel
Security Officer, provided he or she is
able to perform the duties and responsibilities required of a CSO.
(4) The CSO may delegate duties required by this part, but remains responsible for the performance of those
duties.
(5) The CSO must maintain a TWIC.
(b) Qualifications. (1) The CSO must
have general knowledge, through training or equivalent job experience, in the
following:
(i) Security administration and organization of the company’s vessel(s);
(ii) Vessel, facility, and port operations relevant to that industry;
(iii) Vessel and facility security
measures, including the meaning and
the consequential requirements of the
different Maritime Security (MARSEC)
Levels;
(iv) Emergency preparedness and response and contingency planning;
(v) Security equipment and systems
and their operational limitations;
(vi) Methods of conducting audits, inspection and control and monitoring
techniques; and
(vii) Techniques for security training
and education, including security
measures and procedures.
(2) In addition to knowledge and
training in paragraph (b)(1) of this section, the CSO must have general
knowledge through training or equivalent job experience in the following, as
appropriate:

359

VerDate Nov<24>2008

10:06 Aug 18, 2009

Jkt 217130

PO 00000

Frm 00369

Fmt 8010

Sfmt 8010

Y:\SGML\217130.XXX

217130

cprice-sewell on DSKDVH8Z91PROD with CFR

§ 104.215

33 CFR Ch. I (7–1–09 Edition)

(i) Relevant international conventions, codes, and recommendations;
(ii) Relevant government legislation
and regulations;
(iii) Responsibilities and functions of
other security organizations;
(iv) Methodology of Vessel Security
Assessment;
(v) Methods of vessel security surveys and inspections;
(vi) Instruction techniques for security training and education, including
security measures and procedures;
(vii) Handling sensitive security information and security related communications;
(viii) Knowledge of current security
threats and patterns;
(ix) Recognition and detection of
dangerous substances and devices;
(x) Recognition of characteristics and
behavioral patterns of persons who are
likely to threaten security;
(xi) Techniques used to circumvent
security measures;
(xii) Methods of physical screening
and non-intrusive inspections;
(xiii) Security drills and exercises,
including drills and exercises with facilities; and
(xiv) Assessment of security drills
and exercises.
(xv) Knowledge of TWIC requirements
(c) Responsibilities. In addition to
those responsibilities and duties specified elsewhere in this part, the CSO
must, for each vessel for which he or
she has been designated:
(1) Keep the vessel apprised of potential threats or other information relevant to its security;
(2) Ensure a Vessel Security Assessment (VSA) is carried out;
(3) Ensure a Vessel Security Plan
(VSP) is developed, approved, and
maintained;
(4) Ensure the VSP is modified when
necessary;
(5) Ensure vessel security activities
are audited;
(6) Arrange for Coast Guard inspections under 46 CFR part 2;
(7) Ensure the timely or prompt correction of problems identified by audits
or inspections;
(8) Enhance security awareness and
vigilance within the owner’s or operator’s organization;

(9) Ensure relevant personnel receive
adequate security training;
(10) Ensure communication and cooperation between the vessel and the
port and facilities with which the vessel interfaces;
(11) Ensure consistency between security requirements and safety requirements;
(12) Ensure that when sister-vessel or
fleet security plans are used, the plan
for each vessel reflects the vessel-specific information accurately;
(13) Ensure compliance with an Alternative Security Program or equivalents approved under this subchapter,
if appropriate; and
(14) Ensure security measures give
particular consideration to the convenience, comfort, and personal privacy of
vessel personnel and their ability to
maintain their effectiveness over long
periods.
(15) Ensure the TWIC program is
being properly implemented.
[USCG–2003–14749, 68 FR 39302, July 1, 2003, as
amended at 68 FR 60513, Oct. 22, 2003; USCG–
2006–24196, 72 FR 3580, Jan. 25, 2007]

§ 104.215

Vessel Security Officer (VSO).

(a) General. (1) A VSO may perform
other duties within the owner’s or operator’s organization, provided he or
she is able to perform the duties and
responsibilities required of the VSO for
each such vessel.
(2) For manned vessels, the VSO
must be the Master or a member of the
crew.
(3) For unmanned vessels, the VSO
must be an employee of the company,
and the same person may serve as the
VSO for more than one unmanned vessel. If a person serves as the VSO for
more than one unmanned vessel, the
name of each unmanned vessel for
which he or she is the VSO must be
listed in the Vessel Security Plan
(VSP).
(4) The VSO of any unmanned barge
and the VSO of any towing vessel
interfacing with the barge must coordinate and ensure the implementation of
security measures applicable to both
vessels during the period of their interface.
(5) The VSO may assign security duties to other vessel personnel; however,

360

VerDate Nov<24>2008

10:06 Aug 18, 2009

Jkt 217130

PO 00000

Frm 00370

Fmt 8010

Sfmt 8010

Y:\SGML\217130.XXX

217130

cprice-sewell on DSKDVH8Z91PROD with CFR

Coast Guard, DHS

§ 104.215

the VSO remains responsible for these
duties.
(6) The VSO must maintain a TWIC.
(b) Qualifications. The VSO must have
general knowledge, through training or
equivalent job experience, in the following:
(1) Those items listed in § 104.210
(b)(1) and (b)(2) of this part;
(2) Vessel layout;
(3) The VSP and related procedures,
including
scenario-based
response
training;
(4) Crowd management and control
techniques;
(5) Operations of security equipment
and systems; and
(6) Testing and calibration of security equipment and systems, and their
maintenance while at sea.
(7) TWIC
(c) Certification required. After July 1,
2009, persons performing duties as VSO
on-board a seagoing vessel subject to
the
International
Convention
on
Standards of Training, Certification
and Watchkeeping for Seafarers, 1978,
as amended, must hold a valid Coast
Guard-issued credential with a Vessel
Security Officer endorsement. The
Coast Guard will issue this endorsement only if the person meets the requirements in paragraph (d) of this section. This endorsement serves as proof
that the person meets the ship security
officer requirements of Regulation VI/5
of the STCW.
(d) Requirements for Coast Guard Endorsement: (1) To qualify for a VSO endorsement, a person must:
(i) Be at least 18 years of age;
(ii) Be able to speak and understand
the English language as would be relevant to the duties of a VSO;
(iii) Hold any valid Coast Guardissued credential under the regulations
specified in 46 CFR Subchapter B;
(iv) Successfully complete a Coast
Guard-accepted VSO course;
(v) Sea Service. Fulfill one of the following:
(A) Have approved sea service of not
less than 12 months on any vessel subject to § 104.105 of this part, credited in
accordance with 46 CFR 10.205(e), 10.211,
and/or 10.213; or
(B) Have approved sea service of not
less than 6 months on any vessel subject to § 104.105 of this part, credited in

accordance with 46 CFR 10.205(b), 10.211,
and/or 10.213, and have knowledge of
vessel operations.
(2) To qualify as a Coast Guard-accepted course a VSO course under paragraph (d)(1)(iv) of this section must require
candidates
to
demonstrate
knowledge, understanding, and proficiency in the following competencies:
(i) Maintaining and supervising the
implementation of a vessel security
plan;
(ii) Assessing security risk, threat
and vulnerability;
(iii) Undertaking regular inspections
of the vessel to ensure that appropriate
security measures are implemented
and maintained;
(iv) Ensuring that security equipment and systems, if any, are properly
operated, tested and calibrated;
(v) Encouraging security awareness
and vigilance; and
(vi) Ensuring compliance with the
TWIC program requirements.
(3) Candidates meeting the knowledge of vessel operations requirement
under paragraph (d)(1)(v)(B) of this section must provide evidence through
training or equivalent job experience,
in the following areas:
(i) Basic vessel layout and construction:
(A) Understanding layout, including
decks, rooms and space numbering; and
(B) Understanding of various vessel
types; and working knowledge of nautical terms and definitions, especially
those used to describe areas and parts
of a vessel.
(ii) Shipboard organization: familiarity with the various departments and
related functions, the titles used for
personnel, the roles and responsibilities of these persons, and the chain of
command.
(iii) Shipboard safety:
(A) Understanding of the importance
of creating and maintaining safe working and living conditions for passengers
and crew alike;
(B) General shipboard safety rules,
emergency alarms and signals, and responses to and reporting of accidents;
(C) Proper usage of protective equipment and general knowledge of procedures for entering enclosed spaces;

361

VerDate Nov<24>2008

10:06 Aug 18, 2009

Jkt 217130

PO 00000

Frm 00371

Fmt 8010

Sfmt 8010

Y:\SGML\217130.XXX

217130

cprice-sewell on DSKDVH8Z91PROD with CFR

§ 104.220

33 CFR Ch. I (7–1–09 Edition)

(D) Proper usage of lifesaving equipment and where such equipment is normally stowed aboard various vessel
types;
(E) Understanding of the operating
principles of and proper use of watertight and fire screen doors; and
(F) Understanding where it is safe to
smoke and not safe to smoke on board
and in port.
(iv) Protection of the marine environment:
(A) Understanding of vessel personnel’s responsibility to preserve the marine environment; and
(B) Basic working knowledge of pollution prevention regulations and techniques.
(v) Familiarity with key definitions,
terminology, and operational practices
employed in the maritime industry.
(4)(i) Persons meeting the criteria in
paragraphs (d)(4)(i)(A) and (B) of this
section prior to the effective date of
this regulation may successfully complete a refresher Coast Guard-accepted
VSO course no later than July 1, 2009,
to fulfill (d)(1)(iv) of this section. Persons must have:
(A) At least six months of VSO experience during the preceding three
years; or
(B) Successfully completed a VSO
course that was not approved by the
Maritime Administration (MARAD) on
behalf of the Coast Guard. Maritime
Administration approves VSO courses
under section 109 of the Maritime
Transportation Security Act of 2002,
Public Law 107–295.
(ii) To be eligible to take a refresher
Coast Guard-accepted VSO course, a
person must present to the course provider documentary evidence that he or
she meets the criteria in (d)(4)(i) of this
section.
(5) Vessel Security Officer courses
meeting the training requirements in
paragraphs (d)(2) and (d)(4) of this section are subject to Coast Guard acceptance under 46 CFR 10.309(a)(10)(ii).
(6) Vessel Security Officer courses
approved by MARAD on behalf of the
Coast Guard under section 109 of the
Maritime Transportation Security Act
of 2002, Public Law 107–295 will be accepted by the Coast Guard under 46
CFR 10.309 as meeting the require-

ments of paragraphs (d)(1)(iv) and (d)(2)
of this section.
(7) Persons who hold a valid ‘‘Vessel
Security Officer’’ endorsement may
serve as vessel or company personnel
with security duties (33 CFR 104.220),
and as all other vessel personnel (33
CFR 104.225), without meeting any additional requirements.
(e) Responsibilities. In addition to
those responsibilities and duties specified elsewhere in this part, the VSO
must, for each vessel for which he or
she has been designated:
(1) Regularly inspect the vessel to ensure that security measures are maintained;
(2) Ensure maintenance and supervision of the implementation of the
VSP, and any amendments to the VSP;
(3) Ensure the coordination and handling of cargo and vessel stores and
bunkers in compliance with this part;
(4) Propose modifications to the VSP
to the Company Security Officer (CSO);
(5) Ensure that any problems identified during audits or inspections are reported to the CSO, and promptly implement any corrective actions;
(6) Ensure security awareness and
vigilance on board the vessel;
(7) Ensure adequate security training
for vessel personnel;
(8) Ensure the reporting and recording of all security incidents;
(9) Ensure the coordinated implementation of the VSP with the CSO and
the relevant Facility Security Officer,
when applicable;
(10) Ensure security equipment is
properly operated, tested, calibrated
and maintained; and
(11) Ensure consistency between security requirements and the proper treatment of vessel personnel affected by
those requirements.
(12) Ensure TWIC programs are in
place and implemented appropriately.
[USCG–2003–14749, 68 FR 39302, July 1, 2003, as
amended at 68 FR 60513, Oct. 22, 2003; USCG–
2006–24196, 72 FR 3580, Jan. 25, 2007; USCG–
2008–0028, 73 FR 29070, May 20, 2008; 73 FR
34191, June 17, 2008]

§ 104.220 Company or vessel personnel
with security duties.
Company and vessel personnel responsible for security duties must
maintain a TWIC, and must have

362

VerDate Nov<24>2008

10:06 Aug 18, 2009

Jkt 217130

PO 00000

Frm 00372

Fmt 8010

Sfmt 8010

Y:\SGML\217130.XXX

217130

Coast Guard, DHS

§ 104.230

knowledge, through training or equivalent job experience, in the following, as
appropriate:
(a) Knowledge of current security
threats and patterns;
(b) Recognition and detection of dangerous substances and devices;
(c) Recognition of characteristics and
behavioral patterns of persons who are
likely to threaten security;
(d) Techniques used to circumvent security measures;
(e) Crowd management and control
techniques;
(f) Security related communications;
(g) Knowledge of emergency procedures and contingency plans;
(h) Operation of security equipment
and systems;
(i) Testing and calibration of security
equipment and systems, and their
maintenance while at sea;
(j) Inspection, control, and monitoring techniques;
(k) Relevant provisions of the Vessel
Security Plan (VSP);
(l) Methods of physical screening of
persons, personal effects, baggage,
cargo, and vessel stores; and
(m) The meaning and the consequential requirements of the different Maritime Security (MARSEC) Levels.
(n) Relevant aspects of the TWIC program and how to carry them out.
[USCG–2003–14749, 68 FR 39302, July 1, 2003, as
amended by USCG–2006–24196, 72 FR 3580,
Jan. 25, 2007]

cprice-sewell on DSKDVH8Z91PROD with CFR

§ 104.225 Security training
other vessel personnel.

for

all

All other vessel personnel, including
contractors, whether part-time, fulltime, temporary, or permanent, must
have knowledge of, through training or
equivalent job experience in the following, as appropriate:
(a) Relevant provisions of the Vessel
Security Plan (VSP);
(b) The meaning and the consequential requirements of the different Maritime Security (MARSEC) Levels, including emergency procedures and contingency plans;
(c) Recognition and detection of dangerous substances and devices;
(d) Recognition of characteristics and
behavioral patterns of persons who are
likely to threaten security; and

(e) Techniques used to circumvent security measures.
(f) Relevant aspects of the TWIC program and how to carry them out.
[USCG–2003–14749, 68 FR 39302, July 1, 2003, as
amended at 68 FR 60513, Oct. 22, 2003; USCG–
2006–24196, 72 FR 3580, Jan. 25, 2007]

§ 104.230 Drill and exercise requirements.
(a) General. (1) Drills and exercises
must test the proficiency of vessel personnel in assigned security duties at
all Maritime Security (MARSEC) Levels and the effective implementation of
the Vessel Security Plan (VSP). They
must enable the Vessel Security Officer (VSO) to identify any related security deficiencies that need to be addressed.
(2) A drill or exercise required by this
section may be satisfied with the implementation of security measures required by the Vessel Security Plan as
the result of an increase in the
MARSEC Level, provided the vessel reports attainment to the cognizant
COTP.
(b) Drills. (1) The VSO must ensure
that at least one security drill is conducted at least every 3 months, except
when a vessel is out of service due to
repairs or seasonal suspension of operation provided that in such cases a
drill must be conducted within one
week of the vessel’s reactivation. Security drills may be held in conjunction
with non-security drills where appropriate.
(2) Drills must test individual elements of the VSP, including response
to security threats and incidents.
Drills should take into account the
types of operations of the vessel, vessel
personnel changes, and other relevant
circumstances. Examples of drills include unauthorized entry to a restricted area, response to alarms, and
notification of law enforcement authorities.
(3) If the vessel is moored at a facility on the date the facility has planned
to conduct any drills, the vessel may,
but is not required to, participate in
the facility’s scheduled drill.
(4) Drills must be conducted within
one week from whenever the percentage of vessel personnel with no prior

363

VerDate Nov<24>2008

10:06 Aug 18, 2009

Jkt 217130

PO 00000

Frm 00373

Fmt 8010

Sfmt 8010

Y:\SGML\217130.XXX

217130

§ 104.235

33 CFR Ch. I (7–1–09 Edition)

participation in a vessel security drill
on that vessel exceeds 25 percent.
(5) Not withstanding paragraph (b)(4)
of this section, vessels not subject to
SOLAS may conduct drills within 1
week from whenever the percentage of
vessel personnel with no prior participation in a vessel security drill on a
vessel of similar design and owned or
operated by the same company exceeds
25 percent.
(c) Exercises. (1) Exercises must be
conducted at least once each calendar
year, with no more than 18 months between exercises.
(2) Exercises may be:
(i) Full scale or live;
(ii) Tabletop simulation or seminar;
(iii) Combined with other appropriate
exercises; or
(iv) A combination of the elements in
paragraphs (c)(2)(i) through (iii) of this
section.
(3) Exercises may be vessel-specific
or part of a cooperative exercise program to exercise applicable facility and
vessel security plans or comprehensive
port exercises.
(4) Each exercise must test communication and notification procedures,
and elements of coordination, resource
availability, and response.
(5) Exercises are a full test of the security program and must include the
substantial and active participation of
relevant company and vessel security
personnel, and may include facility security personnel and government authorities depending on the scope and
the nature of the exercises.

cprice-sewell on DSKDVH8Z91PROD with CFR

[USCG–2003–14749, 68 FR 39302, July 1, 2003, as
amended at 68 FR 60513, Oct. 22, 2003]

§ 104.235 Vessel
recordkeeping
requirements.
(a) Unless otherwise specified in this
section, the Vessel Security Officer
must keep records of the activities as
set out in paragraph (b) of this section
for at least 2 years and make them
available to the Coast Guard upon request.
(b) Records required by this section
may be kept in electronic format. If
kept in an electronic format, they
must be protected against unauthorized deletion, destruction, or amendment. The following records must be
kept:

(1) Training. For training under
§ 104.225, the date of each session, duration of session, a description of the
training, and a list of attendees;
(2) Drills and exercises. For each drill
or exercise, the date held, description
of drill or exercise, list of participants;
and any best practices or lessons
learned which may improve the Vessel
Security Plan (VSP);
(3) Incidents and breaches of security.
Date and time of occurrence, location
within the port, location within the
vessel, description of incident or
breaches, to whom it was reported, and
description of the response;
(4) Changes in Maritime Security
(MARSEC) Levels. Date and time of notification received, and time of compliance with additional requirements;
(5) Maintenance, calibration, and testing of security equipment. For each occurrence of maintenance, calibration,
and testing, the date and time, and the
specific security equipment involved;
(6) Security threats. Date and time of
occurrence, how the threat was communicated, who received or identified
the threat, description of threat, to
whom it was reported, and description
of the response;
(7) Declaration of Security (DoS).
Manned vessels must keep on board a
copy of the last 10 DoSs and a copy of
each continuing DoS for at least 90
days after the end of its effective period; and
(8) Annual audit of the VSP. For each
annual audit, a letter certified by the
Company Security Officer or the VSO
stating the date the audit was completed.
(c) Any records required by this part
must be protected from unauthorized
access or disclosure.
[USCG–2003–14749, 68 FR 39302, July 1, 2003, as
amended at 68 FR 60514, Oct. 22, 2003]

§ 104.240 Maritime Security (MARSEC)
Level coordination and implementation.
(a) The vessel owner or operator
must ensure that, prior to entering a
port or visiting an Outer Continental
Shelf (OCS) facility, all measures are
taken that are specified in the Vessel
Security Plan (VSP) for compliance
with the MARSEC Level in effect for
the port or the OCS facility.

364

VerDate Nov<24>2008

10:06 Aug 18, 2009

Jkt 217130

PO 00000

Frm 00374

Fmt 8010

Sfmt 8010

Y:\SGML\217130.XXX

217130

cprice-sewell on DSKDVH8Z91PROD with CFR

Coast Guard, DHS

§ 104.255

(b) When notified of an increase in
the MARSEC Level, the vessel owner
or operator must ensure:
(1) If a higher MARSEC Level is set
for the port in which the vessel is located or is about to enter, the vessel
complies, without undue delay, with all
measures specified in the VSP for compliance with that higher MARSEC
Level;
(2) The COTP is notified as required
by § 101.300(c) when compliance with
the higher MARSEC Level has been implemented;
(3) For vessels in port, that compliance with the higher MARSEC Level
has taken place within 12 hours of the
notification; and
(4) If a higher MARSEC Level is set
for the OCS facility with which the
vessel is interfacing or is about to
visit, the vessel complies, without
undue delay, with all measures specified in the VSP for compliance with
that higher MARSEC Level.
(c) For MARSEC Levels 2 and 3, the
Vessel Security Officer must brief all
vessel personnel of identified threats,
emphasize reporting procedures, and
stress the need for increased vigilance.
(d) An owner or operator whose vessel is not in compliance with the requirements of this section must inform
the COTP and obtain approval prior to
entering any port, prior to interfacing
with another vessel or with a facility
or to continuing operations.
(e) For MARSEC Level 3, in addition
to the requirements in this part, a vessel owner or operator may be required
to implement additional measures,
pursuant to 33 CFR part 6, 160 or 165, as
appropriate, which may include but are
not limited to:
(1) Arrangements to ensure that the
vessel can be towed or moved if deemed
necessary by the Coast Guard;
(2) Use of waterborne security patrol;
(3) Use of armed security personnel
to control access to the vessel and to
deter, to the maximum extent practical, a TSI; or
(4) Screening the vessel for the presence of dangerous substances and devices underwater or other threats.
[USCG–2003–14749, 68 FR 39302, July 1, 2003, as
amended at 68 FR 60514, Oct. 22, 2003]

§ 104.245 Communications.
(a) The Vessel Security Officer must
have a means to effectively notify vessel personnel of changes in security
conditions on board the vessel.
(b) Communications systems and procedures must allow effective and continuous communication between the
vessel security personnel, facilities
interfacing with the vessel, vessels
interfacing with the vessel, and national or local authorities with security responsibilities.
(c) Communication systems and procedures must enable vessel personnel
to notify, in a timely manner, shore
side authorities or other vessels of a security threat or incident on board.
§ 104.250 Procedures for interfacing
with facilities and other vessels.
(a) The vessel owner or operator
must ensure that there are measures
for interfacing with facilities and other
vessels at all MARSEC Levels.
(b) For each U.S. flag vessel that
calls on foreign ports or facilities, the
vessel owner or operator must ensure
procedures for interfacing with those
ports and facilities are established.
§ 104.255 Declaration
of
Security
(DoS).
(a) Each vessel owner or operator
must ensure procedures are established
for requesting a DoS and for handling
DoS requests from a facility or other
vessel.
(b) At MARSEC Level 1, the Master
or Vessel Security Officer (VSO), or
their designated representative, of any
cruise ship or manned vessel carrying
Certain Dangerous Cargoes, in bulk,
must complete and sign a DoS with the
VSO or Facility Security Officer
(FSO), or their designated representative, of any vessel or facility with
which it interfaces.
(1) For a vessel-to-facility interface,
prior to arrival of a vessel to a facility,
the FSO and Master, VSO, or their designated representatives must coordinate security needs and procedures,
and agree upon the contents of the DoS
for the period of time the vessel is at
the facility. Upon a vessel’s arrival to
a facility and prior to any passenger
embarkation or disembarkation or
cargo transfer operation, the FSO or

365

VerDate Nov<24>2008

10:06 Aug 18, 2009

Jkt 217130

PO 00000

Frm 00375

Fmt 8010

Sfmt 8010

Y:\SGML\217130.XXX

217130

cprice-sewell on DSKDVH8Z91PROD with CFR

§ 104.260

33 CFR Ch. I (7–1–09 Edition)

Master, VSO, or designated representatives must sign the written DoS.
(2) For a vessel engaging in a vesselto-vessel activity, prior to the activity,
the respective Masters, VSOs, or their
designated representatives must coordinate security needs and procedures,
and agree upon the contents of the DoS
for the period of the vessel-to-vessel
activity. Upon the vessel-to-vessel activity and prior to any passenger embarkation or disembarkation or cargo
transfer operation, the respective Masters, VSOs, or designated representatives must sign the written DoS.
(c) At MARSEC Levels 2 and 3, the
Master, VSO, or designated representative of any manned vessel required to
comply with this part must coordinate
security needs and procedures, and
agree upon the contents of the DoS for
the period of the vessel-to-vessel activity. Upon the vessel-to-vessel activity
and prior to any passenger embarkation or disembarkation or cargo
transfer operation, the respective Masters, VSOs, or designated representatives must sign the written DoS.
(d) At MARSEC Levels 2 and 3, the
Master, VSO, or designated representative of any manned vessel required to
comply with this part must coordinate
security needs and procedures, and
agree upon the contents of the DoS for
the period the vessel is at the facility.
Upon the vessel’s arrival to a facility
and prior to any passenger embarkation or disembarkation or cargo
transfer operation, the respective FSO
and Master, VSO, or designated representatives must sign the written
DoS.
(e) At MARSEC Levels 1 and 2, VSOs
of vessels that frequently interface
with the same facility may implement
a continuing DoS for multiple visits,
provided that:
(1) The DoS is valid for the specific
MARSEC Level;
(2) The effective period at MARSEC
Level 1 does not exceed 90 days; and
(3) The effective period at MARSEC
Level 2 does not exceed 30 days.
(f) When the MARSEC Level increases beyond the level contained in
the DoS, the continuing DoS becomes
void and a new DoS must be signed and
implemented in accordance with this
section.

(g) The COTP may require at any
time, at any MARSEC Level, any
manned vessel subject to this part to
implement a DoS with the VSO or FSO
prior to any vessel-to-vessel activity or
vessel-to-facility interface when he or
she deems it necessary.
[USCG–2003–14749, 68 FR 39302, July 1, 2003, as
amended at 68 FR 60514, Oct. 22, 2003]

§ 104.260 Security systems and equipment maintenance.
(a) Security systems and equipment
must be in good working order and inspected, tested, calibrated and maintained according to the manufacturer’s
recommendation.
(b) The results of testing completed
under paragraph (a) of this section
shall be recorded in accordance with
§ 104.235. Any deficiencies shall be
promptly corrected.
(c) The Vessel Security Plan (VSP)
must include procedures for identifying
and responding to security system and
equipment failures or malfunctions.
§ 104.265 Security measures for access
control.
(a) General. The vessel owner or operator must ensure the implementation
of security measures to:
(1) Deter the unauthorized introduction of dangerous substances and devices, including any device intended to
damage or destroy persons, vessels, facilities, or ports;
(2) Secure dangerous substances and
devices that are authorized by the
owner or operator to be on board;
(3) Control access to the vessel; and
(4) Prevent an unescorted individual
from entering an area of the vessel
that is designated as a secure area unless the individual holds a duly issued
TWIC and is authorized to be in the
area.
(b) The vessel owner or operator
must ensure that the following are
specified:
(1) The locations providing means of
access to the vessel where access restrictions or prohibitions are applied
for each Maritime Security (MARSEC)
Level, including those points where
TWIC access control provisions will be
applied. ‘‘Means of access’’ include, but
are not limited, to all:
(i) Access ladders;

366

VerDate Nov<24>2008

10:06 Aug 18, 2009

Jkt 217130

PO 00000

Frm 00376

Fmt 8010

Sfmt 8010

Y:\SGML\217130.XXX

217130

cprice-sewell on DSKDVH8Z91PROD with CFR

Coast Guard, DHS

§ 104.265

(ii) Access gangways;
(iii) Access ramps;
(iv) Access doors, side scuttles, windows, and ports;
(v) Mooring lines and anchor chains;
and
(vi) Cranes and hoisting gear;
(2) The identification of the types of
restriction or prohibition to be applied
and the means of enforcing them;
(3) The means used to establish the
identity of individuals not in possession of a TWIC and procedures for escorting, in accordance with § 101.515 of
this subchapter; and
(4) Procedures for identifying authorized and unauthorized persons at any
MARSEC level.
(c) The vessel owner or operator must
ensure that a TWIC program is implemented as follows:
(1) All persons seeking unescorted access to secure areas must present their
TWIC for inspection before being allowed unescorted access, in accordance
with § 101.514 of this subchapter. Inspection must include:
(i) A match of the photo on the TWIC
to the individual presenting the TWIC;
(ii) Verification that the TWIC has
not expired; and
(iii) A visual check of the various security features present on the card to
determine whether the TWIC has been
tampered with or forged.
(2) If an individual cannot present a
TWIC because it has been lost, damaged or stolen, and he or she has previously been granted unescorted access
to the vessel and is known to have had
a valid TWIC, the individual may be
given unescorted access to secure areas
for a period of no longer than seven
consecutive calendar days provided
that:
(i) The individual has reported the
TWIC as lost, damaged, or stolen to
TSA as required in 49 CFR 1572.19(f);
(ii) The individual can present another identification credential that
meets the requirements of § 101.515 of
this subchapter; and
(iii) There are no other suspicious
circumstances associated with the individual’s claim of loss or theft.
(3) If an individual cannot present his
or her TWIC for any other reason than
outlined in paragraph (2) of this section, he or she may not be granted

unescorted access to the secure area.
The individual must be under escort, as
that term is defined in part 101 of this
subchapter, at all times when inside a
secure area.
(4) With the exception of persons
granted access according to paragraph
(2) of this section, all persons granted
unescorted access to secure areas of
the vessel must be able to produce his
or her TWIC upon request.
(5) There must be disciplinary measures in place to prevent fraud and
abuse.
(6) The vessel’s TWIC program should
be coordinated, when practicable, with
identification and TWIC access control
measures of facilities or other transportation conveyances that interface
with the vessel.
(d) If the vessel owner or operator
uses a separate identification system,
ensure that it complies and is coordinated with TWIC provisions in this
part.
(e) The vessel owner or operator must
establish in the approved VSP the frequency of application of any security
measures for access control, particularly if these security measures are applied on a random or occasional basis.
(f) MARSEC Level 1. The vessel owner
or operator must ensure security measures in this paragraph are implemented
to:
(1) Employ TWIC as set out in paragraph (c) of this section.
(2) Screen persons, baggage (including carry-on items), personal effects,
and vehicles for dangerous substances
and devices at the rate specified in the
approved VSP, except for governmentowned vehicles on official business
when government personnel present
identification credentials for entry;
(3) Conspicuously post signs that describe security measures currently in
effect and clearly state that:
(i) Boarding the vessel is deemed
valid consent to screening or inspection; and
(ii) Failure to consent or submit to
screening or inspection will result in
denial or revocation of authorization
to board;
(4) Check the identification of any
person not holding a TWIC and seeking
to board the vessel, including vessel

367

VerDate Nov<24>2008

10:06 Aug 18, 2009

Jkt 217130

PO 00000

Frm 00377

Fmt 8010

Sfmt 8010

Y:\SGML\217130.XXX

217130

cprice-sewell on DSKDVH8Z91PROD with CFR

§ 104.265

33 CFR Ch. I (7–1–09 Edition)

passengers, vendors, personnel duly authorized by the cognizant government
authorities, and visitors. This check
includes confirming the reason for
boarding by examining at least one of
the following:
(i) Joining instructions;
(ii) Passenger tickets;
(iii) Boarding passes;
(iv) Work orders, pilot orders, or surveyor orders;
(v) Government identification; or
(vi) Visitor badges issued in accordance with an identification system implemented under paragraph (d) of this
section.
(5) Deny or revoke a person’s authorization to be on board if the person is
unable or unwilling, upon the request
of vessel personnel or a law enforcement officer, to establish his or her
identity in accordance with this part
or to account for his or her presence on
board. Any such incident must be reported in compliance with this part;
(6) Deter unauthorized access to the
vessel;
(7) Identify access points that must
be secured or attended to deter unauthorized access;
(8) Lock or otherwise prevent access
to unattended spaces that adjoin areas
to which passengers and visitors have
access;
(9) Provide a designated area on
board, within the secure area, or in liaison with a facility, for conducting inspections and screening of people, baggage (including carry-on items), personal effects, vehicles and the vehicle’s
contents;
(10) Ensure vessel personnel are not
subjected to screening, of the person or
of personal effects, by other vessel personnel, unless security clearly requires
it;
(11) Conduct screening in a way that
takes into full account individual
human rights and preserves the individual’s basic human dignity;
(12) Ensure the screening of all unaccompanied baggage;
(13) Ensure checked persons and their
personal effects are segregated from
unchecked persons and their personal
effects;
(14) Ensure embarking passengers are
segregated from disembarking passengers;

(15) Ensure, in liaison with the facility, a defined percentage of vehicles to
be loaded aboard passenger vessels are
screened prior to loading at the rate
specified in the approved VSP;
(16) Ensure, in liaison with the facility, all unaccompanied vehicles to be
loaded on passenger vessels are
screened prior to loading; and
(17) Respond to the presence of unauthorized persons on board, including repelling unauthorized boarders.
(g) MARSEC Level 2. In addition to
the security measures required for
MARSEC Level 1 in this section, at
MARSEC Level 2, the vessel owner or
operator must ensure the implementation of additional security measures, as
specified for MARSEC Level 2 in the
approved VSP. These additional security measures may include:
(1) Increasing the frequency and detail of screening of people, personal effects, and vehicles being embarked or
loaded onto the vessel as specified for
MARSEC Level 2 in the approved VSP,
except for government-owned vehicles
on official business when government
personnel present identification credentials for entry;
(2) X-ray screening of all unaccompanied baggage;
(3) Assigning additional personnel to
patrol deck areas during periods of reduced vessel operations to deter unauthorized access;
(4) Limiting the number of access
points to the vessel by closing and securing some access points;
(5) Denying access to visitors who do
not have a verified destination;
(6) Deterring waterside access to the
vessel, which may include, in liaison
with the facility, providing boat patrols; and
(7) Establishing a restricted area on
the shore side of the vessel, in close cooperation with the facility.
(h) MARSEC Level 3. In addition to
the security measures required for
MARSEC Level 1 and MARSEC Level 2,
the vessel owner or operator must ensure the implementation of additional
security measures, as specified for
MARSEC Level 3 in the approved VSP.
The additional security measures may
include:

368

VerDate Nov<24>2008

10:06 Aug 18, 2009

Jkt 217130

PO 00000

Frm 00378

Fmt 8010

Sfmt 8010

Y:\SGML\217130.XXX

217130

Coast Guard, DHS

§ 104.270

(1) Screening all persons, baggage,
and personal effects for dangerous substances and devices;
(2) Performing one or more of the following on unaccompanied baggage:
(i) Screen unaccompanied baggage
more extensively, for example, xraying from two or more angles;
(ii) Prepare to restrict or suspend
handling unaccompanied baggage; or
(iii) Refuse to accept unaccompanied
baggage on board;
(3) Being prepared to cooperate with
responders and facilities;
(4) Limiting access to the vessel to a
single, controlled access point;
(5) Granting access to only those responding to the security incident or
threat thereof;
(6) Suspending embarkation and/or
disembarkation of personnel;
(7) Suspending cargo operations;
(8) Evacuating the vessel;
(9) Moving the vessel; or
(10) Preparing for a full or partial
search of the vessel.

cprice-sewell on DSKDVH8Z91PROD with CFR

[USCG–2006–24196, 72 FR 3580, Jan. 25, 2007]

§ 104.267 Security measures for newly
hired employees.
(a) Newly-hired vessel employees
may be granted entry to secure areas
of the vessel for up to 30 consecutive
calendar days prior to receiving their
TWIC provided all of the requirements
in paragraph (b) of this section are
met, and provided that the new hire is
accompanied by an individual with a
TWIC while within the secure areas of
the vessel. If TSA does not act upon a
TWIC application within 30 days, the
cognizant Coast Guard COTP may further extend access to secure areas for
another 30 days. The Coast Guard will
determine whether, in particular circumstances, certain practices meet the
condition of a new hire being accompanied by another individual with a
TWIC. The Coast Guard will issue guidance for use in making these determinations.
(b) Newly-hired vessel employees
may be granted the access provided for
in paragraph (a) of this section only if:
(1) The new hire has applied for a
TWIC in accordance with 49 CFR part
1572 by completing the full enrollment
process, paying the user fee, and is not
currently engaged in a waiver or appeal

process. The vessel owner or operator
or Vessel Security Officer (VSO) must
have the new hire sign a statement affirming this, and must retain the
signed statement until the new hire receives a TWIC;
(2) The vessel owner or operator or
the VSO enters the following information on the new hire into the Coast
Guard’s Homeport website (http://homeport.uscg.mil):
(i) Full legal name, including middle
name if one exists;
(ii) Date of birth;
(iii) Social security number (optional);
(iv) Employer name and 24 hour contact information; and
(v) Date of TWIC enrollment;
(3) The new hire presents an identification credential that meets the requirements of § 101.515 of this subchapter;
(4) There are no other circumstances
that would cause reasonable suspicion
regarding the new hire’s ability to obtain a TWIC, and the vessel owner or
operator or VSO have not been informed by the cognizant COTP that the
new hire poses a security threat; and
(5) There would be an adverse impact
to vessel operations if the new hire is
not allowed access.
(c) This section does not apply to any
individual being hired as a Company
Security Officer (CSO) or VSO, or any
individual being hired to perform vessel security duties.
(d) The new hire may not begin working on board the vessel under the provisions of this section until the owner,
operator, or VSO receives notification,
via Homeport or some other means, the
new hire has passed an initial name
check.
[USCG–2006–24196, 72 FR 3581, Jan. 25, 2007]

§ 104.270 Security measures for restricted areas.
(a) General. The vessel owner or operator must ensure the designation of restricted areas in order to:
(1) Prevent or deter unauthorized access;
(2) Protect persons authorized to be
on board;
(3) Protect the vessel;
(4) Protect sensitive security areas
within the vessel;

369

VerDate Nov<24>2008

10:06 Aug 18, 2009

Jkt 217130

PO 00000

Frm 00379

Fmt 8010

Sfmt 8010

Y:\SGML\217130.XXX

217130

cprice-sewell on DSKDVH8Z91PROD with CFR

§ 104.275

33 CFR Ch. I (7–1–09 Edition)

(5) Protect security and surveillance
equipment and systems; and
(6) Protect cargo and vessel stores
from tampering.
(b) Designation of Restricted Areas. The
vessel owner or operator must ensure
restricted areas are designated on
board the vessel, as specified in the approved plan. Restricted areas must include, as appropriate:
(1) Navigation bridge, machinery
spaces and other control stations;
(2) Spaces containing security and
surveillance equipment and systems
and their controls and lighting system
controls;
(3) Ventilation and air-conditioning
systems and other similar spaces;
(4) Spaces with access to potable
water tanks, pumps, or manifolds;
(5) Spaces containing dangerous
goods or hazardous substances;
(6) Spaces containing cargo pumps
and their controls;
(7) Cargo spaces and spaces containing vessel stores;
(8) Crew accommodations; and
(9) Any other spaces or areas vital to
the security of the vessel.
(c) The vessel owner or operator must
ensure that security measures and policies are established to:
(1) Identify which vessel personnel
are authorized to have access;
(2) Determine which persons other
than vessel personnel are authorized to
have access;
(3) Determine the conditions under
which that access may take place;
(4) Define the extent of any restricted
area;
(5) Define the times when access restrictions apply; and
(6) Clearly mark all restricted areas
and indicate that access to the area is
restricted and that unauthorized presence within the area constitutes a
breach of security.
(d) Maritime Security (MARSEC) Level
1. The vessel owner or operator must
ensure the implementation of security
measures to prevent unauthorized access or activities within the area.
These security measures may include:
(1) Locking or securing access points;
(2) Monitoring and using surveillance
equipment;
(3) Using guards or patrols; and

(4) Using automatic intrusion detection devices, which if used must activate an audible and/or visual alarm at
a location that is continuously attended or monitored, to alert vessel
personnel to unauthorized access.
(e) MARSEC Level 2. In addition to
the security measures required for
MARSEC Level 1 in this section, at
MARSEC Level 2, the vessel owner or
operator must also ensure the implementation of additional security measures, as specified for MARSEC Level 2
in the approved VSP. These additional
security measures may include:
(1) Increasing the frequency and intensity of monitoring and access controls on existing restricted access
areas;
(2) Restricting access to areas adjacent to access points;
(3) Providing continuous monitoring
of each area, using surveillance equipment; and
(4) Dedicating additional personnel
to guard or patrol each area.
(f) MARSEC Level 3. In addition to the
security
measures
required
for
MARSEC Level 1 and MARSEC Level 2,
at MARSEC Level 3, the vessel owner
or operator must ensure the implementation of additional security measures,
as specified for MARSEC Level 3 in the
approved VSP. These additional security measures may include:
(1) Restricting access to additional
areas; and
(2) Searching restricted areas as part
of a security sweep of the vessel.
§ 104.275 Security measures for handling cargo.
(a) General. The vessel owner or operator must ensure that security measures relating to cargo handling, some
of which may have to be applied in liaison with the facility or another vessel,
are specified in order to:
(1) Deter tampering;
(2) Prevent cargo that is not meant
for carriage from being accepted and
stored on board the vessel;
(3) Identify cargo that is approved for
loading onto the vessel;
(4) Include inventory control procedures at access points to the vessel;
and
(5) When there are regular or repeated cargo operations with the same

370

VerDate Nov<24>2008

10:06 Aug 18, 2009

Jkt 217130

PO 00000

Frm 00380

Fmt 8010

Sfmt 8010

Y:\SGML\217130.XXX

217130

cprice-sewell on DSKDVH8Z91PROD with CFR

Coast Guard, DHS

§ 104.280

shipper, coordinate security measures
with the shipper or other responsible
party in accordance with an established agreement and procedures.
(b) Maritime Security (MARSEC) Level
1. At MARSEC Level 1, the vessel
owner or operator must ensure the implementation of measures to:
(1) Unless unsafe to do so, routinely
check cargo and cargo spaces prior to
and during cargo handling for evidence
of tampering;
(2) Check that cargo to be loaded
matches the cargo documentation, or
that cargo markings or container numbers match the information provided
with shipping documents;
(3) Ensure, in liaison with the facility, that vehicles to be loaded on board
car carriers, RO-RO, and passenger
ships are subjected to screening prior
to loading, in accordance with the frequency required in the VSP; and
(4) Check, in liaison with the facility,
seals or other methods used to prevent
tampering.
(c) MARSEC Level 2. In addition to
the security measures required for
MARSEC Level 1 in this section, at
MARSEC Level 2, the vessel owner or
operator must also ensure the implementation of additional security measures, as specified for MARSEC Level 2
in the approved Vessel Security Plan
(VSP). These additional security measures may include:
(1) Increasing the frequency and detail of checking cargo and cargo spaces
for evidence of tampering;
(2) Intensifying checks to ensure that
only the intended cargo, container, or
other cargo transport units are loaded;
(3) Intensifying screening of vehicles
to be loaded on car-carriers, RO-RO,
and passenger vessels;
(4) In liaison with the facility, increasing frequency and detail in checking seals or other methods used to prevent tampering;
(5) Increasing the frequency and intensity of visual and physical inspections; or
(6) Coordinating enhanced security
measures with the shipper or other responsible party in accordance with an
established agreement and procedures.
(d) MARSEC Level 3. In addition to
the security measures for MARSEC
Level 1 and MARSEC Level 2, at

MARSEC Level 3, the vessel owner or
operator must ensure the implementation of additional security measures, as
specified for MARSEC Level 3 in the
approved VSP. These additional security measures may include:
(1) Suspending loading or unloading
of cargo;
(2) Being prepared to cooperate with
responders, facilities, and other vessels; or
(3) Verifying the inventory and location of any hazardous materials carried
on board.
[USCG–2003–14749, 68 FR 39302, July 1, 2003, as
amended at 68 FR 60514, Oct. 22, 2003]

§ 104.280 Security measures for delivery of vessel stores and bunkers.
(a) General. The vessel owner or operator must ensure that security measures relating to the delivery of vessel
stores and bunkers are implemented to:
(1) Check vessel stores for package
integrity;
(2) Prevent vessel stores from being
accepted without inspection;
(3) Deter tampering; and
(4) Prevent vessel stores and bunkers
from being accepted unless ordered.
For vessels that routinely use a facility, a vessel owner or operator may establish and implement standing arrangements between the vessel, its suppliers, and a facility regarding notification and the timing of deliveries and
their documentation.
(b) Maritime Security (MARSEC) Level
1. At MARSEC Level 1, the vessel
owner or operator must ensure the implementation of measures to:
(1) Check vessel stores before being
accepted;
(2) Check that vessel stores and
bunkers match the order prior to being
brought on board or being bunkered;
and
(3) Ensure that vessel stores are controlled or immediately and securely
stowed following delivery.
(c) MARSEC Level 2. In addition to
the security measures required for
MARSEC Level 1 in this section, at
MARSEC Level 2, the vessel owner or
operator must also ensure the implementation of additional security measures, as specified for MARSEC Level 2
in the approved Vessel Security Plan

371

VerDate Nov<24>2008

10:06 Aug 18, 2009

Jkt 217130

PO 00000

Frm 00381

Fmt 8010

Sfmt 8010

Y:\SGML\217130.XXX

217130

§ 104.285

33 CFR Ch. I (7–1–09 Edition)

(VSP). These additional security measures may include:
(1) Intensifying inspection of the vessel stores during delivery; or
(2) Checking vessel stores prior to receiving them on board.
(d) MARSEC Level 3. In addition to
the security measures for MARSEC
Level 1 and MARSEC Level 2, at
MARSEC Level 3, the vessel owner or
operator must ensure the implementation of additional security measures, as
specified for MARSEC Level 3 in the
approved VSP. These additional security measures may include:
(1) Checking all vessel stores more
extensively;
(2) Restricting or suspending delivery
of vessel stores and bunkers; or
(3) Refusing to accept vessel stores
on board.

cprice-sewell on DSKDVH8Z91PROD with CFR

§ 104.285 Security measures for monitoring.
(a) General. (1) The vessel owner or
operator must ensure the implementation of security measures and have the
capability to continuously monitor,
through a combination of lighting,
watchkeepers, security guards, deck
watches, waterborne patrols, automatic intrusion-detection devices, or
surveillance equipment, as specified in
their approved Vessel Security Plan
(VSP), the—
(i) Vessel;
(ii) Restricted areas on board the vessel; and
(iii) Area surrounding the vessel.
(2) The following must be considered
when establishing the appropriate level
and location of lighting:
(i) Vessel personnel should be able to
detect activities on and around the vessel, on both the shore side and the waterside;
(ii) Coverage should facilitate personnel identification at access points;
(iii) Coverage may be provided
through coordination with the port or
facility; and
(iv) Lighting effects, such as glare,
and its impact on safety, navigation,
and other security activities.
(b) Maritime Security (MARSEC) Level
1. At MARSEC Level 1, the vessel
owner or operator must ensure the implementation of security measures,

which may be done in coordination
with a facility, to:
(1) Monitor the vessel, particularly
vessel access points and restricted
areas;
(2) Be able to conduct emergency
searches of the vessel;
(3) Ensure that equipment or system
failures or malfunctions are identified
and corrected;
(4) Ensure that any automatic intrusion detection device sets off an audible or visual alarm, or both, at a location that is continuously attended or
monitored;
(5) Light deck and vessel access
points during the period between sunset and sunrise and periods of limited
visibility sufficiently to allow visual
identification of persons seeking access
to the vessel; and
(6) Use maximum available lighting
while underway, during the period between sunset and sunrise, consistent
with safety and international regulations.
(c) MARSEC Level 2. In addition to
the security measures required for
MARSEC Level 1 in this section, at
MARSEC Level 2, the vessel owner or
operator must also ensure the implementation of additional security measures, as specified for MARSEC Level 2
in the approved VSP. These additional
security measures may include:
(1) Increasing the frequency and detail of security patrols;
(2) Increasing the coverage and intensity of lighting, alone or in coordination with the facility;
(3) Using or increasing the use of security and surveillance equipment;
(4) Assigning additional personnel as
security lookouts;
(5) Coordinating with boat patrols,
when provided; and
(6) Coordinating with shoreside foot
or vehicle patrols, when provided.
(d) MARSEC Level 3. In addition to
the security measures for MARSEC
Level 1 and MARSEC Level 2, at
MARSEC Level 3, the vessel owner or
operator must ensure the implementation of additional security measures, as
specified for MARSEC Level 3 in the
approved VSP. These additional security measures may include:
(1) Cooperating with responders and
facilities;

372

VerDate Nov<24>2008

10:06 Aug 18, 2009

Jkt 217130

PO 00000

Frm 00382

Fmt 8010

Sfmt 8010

Y:\SGML\217130.XXX

217130

Coast Guard, DHS

§ 104.292

(2) Switching on all lights;
(3) Illuminating the vicinity of the
vessel;
(4) Switching on all surveillance
equipment capable of recording activities on, or in the vicinity of, the vessel;
(5) Maximizing the length of time
such surveillance equipment can continue to record;
(6) Preparing for underwater inspection of the hull; and
(7) Initiating measures, including the
slow revolution of the vessel’s propellers, if practicable, to deter underwater
access to the hull of the vessel.
[USCG–2003–14749, 68 FR 39302, July 1, 2003, as
amended at 68 FR 60514, Oct. 22, 2003]

cprice-sewell on DSKDVH8Z91PROD with CFR

§ 104.290 Security incident procedures.
For
each
Maritime
Security
(MARSEC) Level, the vessel owner or
operator must ensure the Vessel Security Officer (VSO) and vessel security
personnel are able to:
(a) Respond to security threats or
breaches of security and maintain critical vessel and vessel-to-facility interface operations, to include:
(1) Prohibiting entry into affected
area;
(2) Denying access to the vessel, except to those responding to the emergency;
(3) Implementing MARSEC Level 3
security measures throughout the vessel;
(4) Stopping cargo-handling operations; and
(5) Notifying shoreside authorities or
other vessels of the emergency;
(b) Evacuating the vessel in case of
security threats or breaches of security;
(c) Reporting security incidents as
required in § 101.305;
(d) Briefing all vessel personnel on
possible threats and the need for vigilance, soliciting their assistance in reporting suspicious persons, objects, or
activities; and
(e) Securing non-critical operations
in order to focus response on critical
operations.
§ 104.292 Additional
requirements—
passenger vessels and ferries.
(a)
At
all
Maritime
Security
(MARSEC) Levels, the vessel owner or
operator must ensure security sweeps

are performed, prior to getting underway, after any period the vessel was
unattended.
(b) As an alternative to the identification checks and passenger screening requirements in § 104.265 (f)(2),
(f)(4), and (f)(9), the owner or operator
of a passenger vessel or ferry may ensure security measures are implemented that include:
(1) Searching selected areas prior to
embarking passengers and prior to sailing; and
(2) Implementing one or more of the
following:
(i) Performing routine security patrols;
(ii) Providing additional closed-circuit television to monitor passenger
areas; or
(iii) Securing all non-passenger
areas.
(c) Passenger vessels certificated to
carry more than 2000 passengers, working in coordination with the terminal,
may be subject to additional vehicle
screening requirements in accordance
with a MARSEC Directive or other orders issued by the Coast Guard.
(d) Owners and operators of passenger
vessels and ferries covered by this part
that use public access facilities, as that
term is defined in § 101.105 of this subchapter, must address security measures for the interface of the vessel and
the public access facility, in accordance with the appropriate Area Maritime Security Plan.
(e) At MARSEC Level 2, a vessel
owner or operator must ensure, in addition to MARSEC Level 1 measures, the
implementation of the following:
(1) Search selected areas prior to embarking passengers and prior to sailing;
(2) Passenger vessels certificated to
carry less than 2000 passengers, working in coordination with the terminal,
may be subject to additional vehicle
screening requirements in accordance
with a MARSEC Directive or other orders issued by the Coast Guard; and
(3) As an alternative to the identification and screening requirements in
§ 104.265(f)(4) and (g)(1), intensify patrols, security sweeps and monitoring
identified in paragraph (b) of this section.
(f) At MARSEC Level 3, a vessel
owner or operator may, in addition to

373

VerDate Nov<24>2008

10:06 Aug 18, 2009

Jkt 217130

PO 00000

Frm 00383

Fmt 8010

Sfmt 8010

Y:\SGML\217130.XXX

217130

§ 104.295

33 CFR Ch. I (7–1–09 Edition)

MARSEC Levels 1 and 2 measures, as
an alternative to the identification
checks and passenger screening requirements in § 104.265(f)(4) and (h)(1),
ensure that random armed security patrols are conducted, which need not
consist of vessel personnel.
[USCG–2003–14749, 68 FR 39302, July 1, 2003, as
amended at 68 FR 60514, Oct. 22, 2003; USCG–
2008–0179, 73 FR 35009, June 19, 2008]

cprice-sewell on DSKDVH8Z91PROD with CFR

§ 104.295 Additional
requirements—
cruise ships.
(a) At all MARSEC Levels, the owner
or operator of a cruise ship must ensure the following:
(1) Screen all persons, baggage, and
personal effects for dangerous substances and devices;
(2) Check the identification of all
persons seeking to board the vessel;
this check includes confirming the reason for boarding by examining joining
instructions, passenger tickets, boarding passes, government identification
or visitor badges, or work orders;
(3) Perform security patrols; and
(4) Search selected areas prior to embarking passengers and prior to sailing.
(b) At MARSEC Level 3, the owner or
operator of a cruise ship must ensure
that security briefs to passengers
about the specific threat are provided.
§ 104.297 Additional
requirements—
vessels on international voyages.
(a) An owner or operator of a U.S.
flag vessel, which is subject to the
International Convention for Safety of
Life at Sea, 1974, (SOLAS), must be in
compliance with the applicable requirements of SOLAS Chapter XI–1,
SOLAS Chapter XI–2 and the ISPS
Code, part A (Incorporated by reference, see § 101.115 of this subchapter).
(b) Owners or operators of U.S. flag
vessels that are required to comply
with SOLAS, must ensure an International Ship Security Certificate
(ISSC) as provided in 46 CFR § 2.01–25 is
obtained for the vessel. This certificate
must be issued by the Coast Guard.
(c) Owners or operators of vessels
that require an ISSC in paragraph (b)
of this section must request an inspection in writing, at least 30 days prior to
the desired inspection date to the Officer in Charge, Marine Inspection for
the Marine Inspection Office or Sector

Office of the port where the vessel will
be inspected to verify compliance with
this part and applicable SOLAS requirements. The inspection must be
completed and the initial ISSC must be
issued on or before July 1, 2004.
[USCG–2003–14749, 68 FR 39302, July 1, 2003, as
amended at 68 FR 60515, Oct. 22, 2003; USCG–
2006–25556, 72 FR 36328, July 2, 2007]

Subpart C—Vessel Security
Assessment (VSA)
§ 104.300

General.

(a) The Vessel Security Assessment
(VSA) is a written document that is
based on the collection of background
information and the completion and
analysis of an on-scene survey.
(b) A single VSA may be performed
and applied to more than one vessel to
the extent that they share physical
characteristics and operations.
(c) Third parties may be used in any
aspect of the VSA if they have the appropriate skills and if the Company Security Officer (CSO) reviews and accepts their work.
(d) Those involved in a VSA should
be able to draw upon expert assistance
in the following areas:
(1) Knowledge of current security
threats and patterns;
(2) Recognition and detection of dangerous substances and devices;
(3) Recognition of characteristics and
behavioral patterns of persons who are
likely to threaten security;
(4) Techniques used to circumvent security measures;
(5) Methods used to cause a security
incident;
(6) Effects of dangerous substances
and devices on vessel structures and
equipment;
(7) Vessel security requirements;
(8) Vessel-to-vessel activity and vessel-to-facility interface business practices;
(9) Contingency planning, emergency
preparedness and response;
(10) Physical security requirements;
(11) Radio and telecommunications
systems, including computer systems
and networks;
(12) Marine engineering; and

374

VerDate Nov<24>2008

10:06 Aug 18, 2009

Jkt 217130

PO 00000

Frm 00384

Fmt 8010

Sfmt 8010

Y:\SGML\217130.XXX

217130

Coast Guard, DHS

§ 104.305

(13) Vessel and port operations.

cprice-sewell on DSKDVH8Z91PROD with CFR

[USCG–2003–14749, 68 FR 39302, July 1, 2003, as
amended at 68 FR 60515, Oct. 22, 2003]

§ 104.305 Vessel Security Assessment
(VSA) requirements.
(a) Background. The vessel owner or
operator must ensure that the following background information is provided to the person or persons who will
conduct the on-scene survey and assessment:
(1) General layout of the vessel, including the location of:
(i) Each actual or potential point of
access to the vessel and its function;
(ii) Spaces that should have restricted access;
(iii) Essential maintenance equipment;
(iv) Cargo spaces and storage;
(v) Storage of unaccompanied baggage; and
(vi) Vessel stores;
(2) Threat assessments, including the
purpose and methodology of the assessment, for the area or areas in which
the vessel operates or at which passengers embark or disembark;
(3) The previous VSA, if any;
(4) Emergency and stand-by equipment available to maintain essential
services;
(5) Number of vessel personnel and
any existing security duties to which
they are assigned;
(6) Existing personnel training requirement practices of the vessel;
(7) Existing security and safety
equipment for the protection of personnel, visitors, passengers, and vessels
personnel;
(8) Escape and evacuation routes and
assembly stations that have to be
maintained to ensure the orderly and
safe emergency evacuation of the vessel;
(9) Existing agreements with private
security companies providing waterside or vessel security services; and
(10) Existing security measures and
procedures, including:
(i) Inspection and control procedures;
(ii) Identification systems;
(iii) Surveillance and monitoring
equipment;
(iv) Personnel identification documents;
(v) Communication systems;

(vi) Alarms;
(vii) Lighting;
(viii) Access control systems; and
(ix) Other security systems.
(b) On-scene survey. The vessel owner
or operator must ensure that an onscene survey of each vessel is conducted. The on-scene survey is to
verify or collect information required
in paragraph (a) of this section. It consists of an actual survey that examines
and evaluates existing vessel protective measures, procedures, and operations for:
(1) Ensuring performance of all security duties;
(2) Controlling access to the vessel,
through the use of identification systems or otherwise;
(3) Controlling the embarkation of
vessel personnel and other persons and
their effects, including personal effects
and baggage whether accompanied or
unaccompanied;
(4) Supervising the handling of cargo
and the delivery of vessel stores;
(5) Monitoring restricted areas to ensure that only authorized persons have
access;
(6) Monitoring deck areas and areas
surrounding the vessel; and
(7) The ready availability of security
communications,
information,
and
equipment.
(c) Analysis and recommendations. In
conducting the VSA, the Company Security Officer (CSO) must analyze the
vessel background information and the
on-scene survey, and while considering
the requirements of this part, provide
recommendations for the security
measures the vessel should include in
the Vessel Security Plan (VSP). This
includes but is not limited to the following:
(1) Restricted areas;
(2) Response procedures for fire or
other emergency conditions;
(3) Security supervision of vessel personnel, passengers, visitors, vendors,
repair technicians, dock workers, etc.;
(4) Frequency and effectiveness of security patrols;
(5) Access control systems, including
identification systems;
(6) Security communication systems
and procedures;
(7) Security doors, barriers, and
lighting;

375

VerDate Nov<24>2008

10:06 Aug 18, 2009

Jkt 217130

PO 00000

Frm 00385

Fmt 8010

Sfmt 8010

Y:\SGML\217130.XXX

217130

cprice-sewell on DSKDVH8Z91PROD with CFR

§ 104.305

33 CFR Ch. I (7–1–09 Edition)

(8) Any security and surveillance
equipment and systems;
(9) Possible security threats, including but not limited to:
(i) Damage to or destruction of the
vessel or an interfacing facility or vessel by dangerous substances and devices, arson, sabotage, or vandalism;
(ii) Hijacking or seizure of the vessel
or of persons on board;
(iii) Tampering with cargo, essential
vessel equipment or systems, or vessel
stores;
(iv) Unauthorized access or use, including presence of stowaways;
(v) Smuggling dangerous substances
and devices;
(vi) Use of the vessel to carry those
intending to cause a security incident
and/or their equipment;
(vii) Use of the vessel itself as a
weapon or as a means to cause damage
or destruction;
(viii) Attacks from seaward while at
berth or at anchor; and
(ix) Attacks while at sea; and
(10) Evaluating the potential of each
identified point of access, including
open weather decks, for use by individuals who might seek to breach security, whether or not those individuals
legitimately have access to the vessel.
(d) VSA report. (1) The vessel owner or
operator must ensure that a written
VSA report is prepared and included as
part of the VSP. The VSA report must
contain:
(i) A summary of how the on-scene
survey was conducted;
(ii) Existing security measures, procedures, and operations;
(iii) A description of each vulnerability found during the assessment;
(iv) A description of security countermeasures that could be used to address each vulnerability;
(v) A list of the key vessel operations
that are important to protect;
(vi) The likelihood of possible threats
to key vessel operations; and
(vii) A list of identified weaknesses,
including human factors, in the infrastructure, policies, and procedures of
the vessel.
(2) The VSA report must address the
following elements on board or within
the vessel:
(i) Physical security;
(ii) Structural integrity;

(iii) Personnel protection systems;
(iv) Procedural policies;
(v) Radio and telecommunication
systems, including computer systems
and networks; and
(vi) Other areas that may, if damaged
or used illicitly, pose a risk to people,
property, or operations on board the
vessel or within a facility.
(3) The VSA report must list the persons, activities, services, and operations that are important to protect,
in each of the following categories:
(i) Vessel personnel;
(ii) Passengers, visitors, vendors, repair technicians, facility personnel,
etc.;
(iii) Capacity to maintain safe navigation and emergency response;
(iv) Cargo, particularly dangerous
goods and hazardous substances;
(v) Vessel stores;
(vi) Any vessel security communication and surveillance systems; and
(vii) Any other vessel security systems, if any.
(4) The VSA report must account for
any vulnerabilities in the following
areas:
(i) Conflicts between safety and security measures;
(ii) Conflicts between vessel duties
and security assignments;
(iii) The impact of watch-keeping duties and risk of fatigue on vessel personnel alertness and performance;
(iv) Security training deficiencies;
and
(v) Security equipment and systems,
including communication systems.
(5) The VSA report must discuss and
evaluate key vessel measures and operations, including:
(i) Ensuring performance of all security duties;
(ii) Controlling access to the vessel,
through the use of identification systems or otherwise;
(iii) Controlling the embarkation of
vessel personnel and other persons and
their effects (including personal effects
and baggage whether accompanied or
unaccompanied);
(iv) Supervising the handling of cargo
and the delivery of vessel stores;
(v) Monitoring restricted areas to ensure that only authorized persons have
access;

376

VerDate Nov<24>2008

10:06 Aug 18, 2009

Jkt 217130

PO 00000

Frm 00386

Fmt 8010

Sfmt 8010

Y:\SGML\217130.XXX

217130

Coast Guard, DHS

§ 104.405

(vi) Monitoring deck areas and areas
surrounding the vessel; and
(vii) The ready availability of security communications, information, and
equipment.
(e) The VSA must be documented and
the VSA report retained by the vessel
owner or operator with the VSP. The
VSA, the VSA report, and VSP must be
protected from unauthorized access or
disclosure.
[USCG–2003–14749, 68 FR 39302, July 1, 2003, as
amended at 68 FR 60515, Oct. 22, 2003]

§ 104.310 Submission requirements.
(a) A completed Vessel Security Assessment (VSA) report must be submitted with the Vessel Security Plan
(VSP) required in § 104.410 of this part.
(b) A vessel owner or operator may
generate and submit a report that contains the VSA for more than one vessel
subject to this part, to the extent that
they share similarities in physical
characteristics and operations.
(c) The VSA must be reviewed and revalidated, and the VSA report must be
updated, each time the VSP is submitted for reapproval or revisions.
[USCG–2003–14749, 68 FR 39302, July 1, 2003, as
amended at 68 FR 60515, Oct. 22, 2003]

cprice-sewell on DSKDVH8Z91PROD with CFR

Subpart D—Vessel Security Plan
(VSP)
§ 104.400 General.
(a) The Company Security Officer
(CSO) must ensure a Vessel Security
Plan (VSP) is developed and implemented for each vessel. The VSP:
(1) Must identify the CSO and VSO by
name or position and provide 24-hour
contact information;
(2) Must be written in English, although a translation of the VSP in the
working language of vessel personnel
may also be developed;
(3) Must address each vulnerability
identified in the Vessel Security Assessment (VSA);
(4) Must describe security measures
for each MARSEC Level;
(5) Must state the Master’s authority
as described in § 104.205; and
(6) May cover more than one vessel to
the extent that they share similarities
in physical characteristics and operations, if authorized and approved by

the Commanding Officer, Marine Safety Center.
(b) The VSP must be submitted to
the Commanding Officer (MSC), USCG
Marine Safety Center, 1900 Half Street,
SW., Suite 1000, Room 525, Washington,
DC 20024 for visitors. Send all mail to
Commanding Officer (MSC), United
States Coast Guard, JR10–0525, 2100 2nd
Street, SW., Washington, DC 20593, in a
written or electronic format. Information for submitting the VSP electronically
can
be
found
at
http://
www.uscg.mil/HQ/MSC. Owners or operators of foreign flag vessels that are subject to SOLAS Chapter XI–1 or Chapter
XI–2 must comply with this part by
carrying on board a valid International
Ship Security Certificate that certifies
that the verifications required by Section 19.1 of part A of the ISPS Code (Incorporated by reference, see § 101.115 of
this subchapter) have been completed.
As stated in Section 9.4 of the ISPS
Code, part A requires that, in order for
the ISSC to be issued, the provisions of
part B of the ISPS Code need to be
taken into account.
(c) The VSP is sensitive security information and must be protected in accordance with 49 CFR part 1520.
(d) If the VSP is kept in an electronic
format, procedures must be in place to
prevent its unauthorized deletion, destruction, or amendment.
[USCG–2003–14749, 68 FR 39302, July 1, 2003, as
amended at 68 FR 60515, Oct. 22, 2003; USCG–
2004–18057, 69 FR 34925, June 23, 2004; USCG–
2007–26953, 72 FR 5931, Feb. 8, 2007]

§ 104.405 Format of the Vessel Security
Plan (VSP).
(a) A vessel owner or operator must
ensure that the VSP consists of the individual sections listed in this paragraph (a). If the VSP does not follow
the order as it appears in the list, the
vessel owner or operator must ensure
that the VSP contains an index identifying the location of each of the following sections:
(1) Security organization of the vessel;
(2) Personnel training;
(3) Drills and exercises;
(4) Records and documentation;
(5) Response to change in MARSEC
Level;

377

VerDate Nov<24>2008

10:06 Aug 18, 2009

Jkt 217130

PO 00000

Frm 00387

Fmt 8010

Sfmt 8010

Y:\SGML\217130.XXX

217130

§ 104.410

33 CFR Ch. I (7–1–09 Edition)

(6) Procedures for interfacing with facilities and other vessels;
(7) Declarations of Security (DoS);
(8) Communications;
(9) Security systems and equipment
maintenance;
(10) Security measures for access control, including designated passenger access areas and employee access areas;
(11) Security measures for restricted
areas;
(12) Security measures for handling
cargo;
(13) Security measures for delivery of
vessel stores and bunkers;
(14) Security measures for monitoring;
(15) Security incident procedures;
(16) Audits and Vessel Security Plan
(VSP) amendments; and
(17) Vessel Security Assessment
(VSA) Report.
(b) The VSP must describe in detail
how the requirements of subpart B of
this part will be met. VSPs that have
been approved by the Coast Guard prior
to March 26, 2007, do not need to be
amended to describe their TWIC procedures until the next regularly scheduled resubmission of the VSP.
[USCG–2003–14749, 68 FR 39302, July 1, 2003, as
amended by USCG–2006–24196, 72 FR 3582,
Jan. 25, 2007]

cprice-sewell on DSKDVH8Z91PROD with CFR

§ 104.410

Submission and approval.

(a) In accordance with § 104.115, on or
before December 31, 2003, each vessel
owner or operator must either:
(1) Submit one copy of their Vessel
Security Plan (VSP), in English, for review and approval to the Commanding
Officer, Marine Safety Center (MSC)
and a letter certifying that the VSP
meets applicable requirements of this
part; or
(2) If intending to operate under an
Approved Security Program, a letter
signed by the vessel owner or operator
stating which approved Alternative Security Program the owner or operator
intends to use.
(b) Owners or operators of vessels not
in service on or before December 31,
2003, must comply with the requirements in paragraph (a) of this section
60 days prior to beginning operations
or by December 31, 2003, whichever is
later.

(c) The Commanding Officer, Marine
Safety Center (MSC), will examine
each submission for compliance with
this part, and either:
(1) Approve it and specify any conditions of approval, returning to the submitter a letter stating its acceptance
and any conditions;
(2) Return it for revision, returning a
copy to the submitter with brief descriptions of the required revisions; or
(3) Disapprove it, returning a copy to
the submitter with a brief statement of
the reasons for disapproval.
(d) A VSP may be submitted and approved to cover more than one vessel
where the vessel design and operations
are similar.
(e) Each company or vessel, owner or
operator, that submits one VSP to
cover two or more vessels of similar design and operation must address vesselspecific information that includes the
physical and operational characteristics of each vessel.
(f) A plan that is approved by the
MSC is valid for 5 years from the date
of its approval.
[USCG–2003–14749, 68 FR 39302, July 1, 2003, as
amended at 68 FR 60515, Oct. 22, 2003; USCG–
2004–19963, 70 FR 74669, Dec. 16, 2005]

§ 104.415 Amendment and audit.
(a) Amendments. (1) Amendments to a
Vessel Security Plan that are approved
by the Marine Safety Center (MSC)
may be initiated by:
(i) The vessel owner or operator; or
(ii) The Coast Guard upon a determination that an amendment is needed
to maintain the vessel’s security. The
Coast Guard will give the vessel owner
or operator written notice and request
that the vessel owner or operator propose amendments addressing any matters specified in the notice. The company owner or operator will have at
least 60 days to submit its proposed
amendments. Until amendments are
approved, the company owner or operator shall ensure temporary security
measures are implemented to the satisfaction of the Coast Guard.
(2) Proposed amendments must be
sent to the MSC at the address shown
in § 104.400(b) of this part. If initiated
by the company or vessel, owner or operator, the proposed amendment must
be submitted at least 30 days before the

378

VerDate Nov<24>2008

10:06 Aug 18, 2009

Jkt 217130

PO 00000

Frm 00388

Fmt 8010

Sfmt 8010

Y:\SGML\217130.XXX

217130

cprice-sewell on DSKDVH8Z91PROD with CFR

Coast Guard, DHS

Pt. 105

amendment is to take effect unless the
MSC allows a shorter period. The MSC
will approve or disapprove the proposed
amendment in accordance with § 104.410
of this part.
(3) Nothing in this section should be
construed as limiting the vessel owner
or operator from the timely implementation of such additional security
measures not enumerated in the approved VSP as necessary to address exigent security situations. In such
cases, the owner or operator must notify the MSC by the most rapid means
practicable as to the nature of the additional measures, the circumstances
that prompted these additional measures, and the period of time these additional measures are expected to be in
place.
(4) If the owner or operator has
changed, the Vessel Security Officer
(VSO) must amend the Vessel Security
Plan (VSP) to include the name and
contact information of the new vessel
owner or operator and submit the affected portion of the VSP for review
and approval in accordance with
§ 104.410 of this part.
(b) Audits. (1) The CSO or VSO must
ensure an audit of the VSP is performed annually, beginning no later
than one year from the initial date of
approval and attach a letter to the
VSP certifying that the VSP meets the
applicable requirements of this part.
(2) The VSP must be audited if there
is a change in the company’s or vessel’s
ownership or operator, or if there have
been modifications to the vessel, including but not limited to physical
structure, emergency response procedures, security measures, or operations.
(3) Auditing the VSP as a result of
modifications to the vessel may be limited to those sections of the VSP affected by the vessel modifications.
(4) Unless impracticable due to the
size and nature of the company or the
vessel, personnel conducting internal
audits of the security measures specified in the VSP or evaluating its implementation must:
(i) Have knowledge of methods of
conducting audits and inspections, and
control and monitoring techniques;
(ii) Not have regularly assigned security duties; and

(iii) Be independent of any security
measures being audited.
(5) If the results of an audit require
amendment of either the VSA or VSP,
the VSO or CSO must submit, in accordance with § 104.410 of this part, the
amendments to the MSC for review and
approval no later than 30 days after
completion of the audit and a letter
certifying that the amended VSP
meets the applicable requirements of
this part.
[USCG–2003–14749, 68 FR 39302, July 1, 2003; 68
FR 41915, July 16, 2003, as amended at 68 FR
60515, Oct. 22, 2003]

PART 105—MARITIME SECURITY:
FACILITIES
Subpart A-General
Sec.
105.100 Definitions.
105.105 Applicability.
105.106 Public access areas.
105.110 Exemptions.
105.115 Compliance dates.
105.120 Compliance documentation.
105.125 Noncompliance.
105.130 Waivers.
105.135 Equivalents.
105.140 Alternative Security Program.
105.145 Maritime Security (MARSEC) Directive.
105.150 Right to appeal.

Subpart B—Facility Security Requirements
105.200 Owner or operator.
105.205 Facility Security Officer (FSO).
105.210 Facility personnel with security duties.
105.215 Security training for all other facility personnel.
105.220 Drill and exercise requirements.
105.225 Facility
recordkeeping
requirements.
105.230 Maritime Security (MARSEC) Level
coordination and implementation.
105.235 Communications.
105.240 Procedures for interfacing with vessels.
105.245 Declaration of Security (DoS).
105.250 Security systems and equipment
maintenance.
105.255 Security measures for access control.
105.257 Security measures for newly-hired
employees.
105.260 Security measures for restricted
areas.
105.265 Security measures for handling
cargo.

379

VerDate Nov<24>2008

10:06 Aug 18, 2009

Jkt 217130

PO 00000

Frm 00389

Fmt 8010

Sfmt 8010

Y:\SGML\217130.XXX

217130