Go to content
Skip menu
Skip menu
Maritime Compliance & Technical Consultancy

Overview of ISM, ISPS, and MLC Audits

ISM, ISPS, and MLC audits are fundamental maritime compliance activities covering safety management, ship and port facility security, and seafarers' working and living conditions. This article explains the purpose, scope, audit process, common challenges and practical considerations associated with these important maritime compliance frameworks.

ISM, ISPS, and MLC Audit Overview

Modern shipping operations are subject to extensive international requirements covering vessel safety, security, pollution prevention and the welfare of seafarers. ISM, ISPS and MLC provide important regulatory frameworks addressing different but interconnected areas of maritime operations.

The International Safety Management (ISM) Code focuses on the safe management and operation of ships and pollution prevention. The International Ship and Port Facility Security (ISPS) Code addresses maritime security and protection against security threats. The Maritime Labour Convention (MLC) establishes minimum requirements concerning seafarers' employment and onboard working and living conditions.

Audits and inspections provide a structured means of verifying that documented systems are implemented effectively and that the vessel and company are operating in accordance with applicable requirements.

Compliance objective: ISM, ISPS and MLC audits are intended to verify effective implementation of safety management, security and maritime labour requirements while identifying deficiencies and opportunities for corrective action and continuous improvement.

The Three Principal Maritime Compliance Frameworks

01

ISM Code

The International Safety Management Code establishes an international framework for the safe management and operation of ships and for pollution prevention.

It requires companies to establish, implement and maintain a Safety Management System (SMS) supported by documented procedures, risk management, emergency preparedness and continuous improvement.

02

ISPS Code

The International Ship and Port Facility Security Code establishes measures designed to detect, deter and respond to security threats affecting ships and port facilities.

The framework includes security assessments, security plans, access control, monitoring arrangements and security awareness.

03

MLC

The Maritime Labour Convention establishes minimum standards for seafarers' employment, working and living conditions.

The requirements cover areas including employment agreements, wages, accommodation, food, medical care, hours of work and rest, repatriation and welfare.

Integrated Compliance

Although ISM, ISPS and MLC address different areas, effective implementation requires coordinated management, accurate records, competent personnel and consistent communication between ship and shore.

What Are Maritime Audits?

Maritime audits are systematic examinations used to determine whether a company's management systems, vessel operations and documented procedures comply with applicable requirements and are effectively implemented.

Depending on the specific audit and certification arrangement, audits may involve flag administrations, classification societies, recognized organizations, authorized organizations, company auditors or other competent parties.

Documentation Review

Auditors review relevant policies, manuals, procedures, certificates, records and supporting documentation to determine whether the management system is properly established and maintained.

Onboard Verification

The audit may include examination of onboard equipment, operational practices, records, emergency arrangements, security measures and working conditions.

Crew Interviews

Interviews and discussions with masters, officers and crew members help determine whether personnel understand their responsibilities and applicable procedures.

Findings & Corrective Action

Identified non-conformities, observations or deficiencies are documented and addressed through appropriate corrective action within the applicable requirements and timeframes.

Key Objectives of ISM, ISPS, and MLC Audits

Audit Framework Principal Objective Typical Verification Areas
ISM Verify effective implementation of the Safety Management System and safe operational practices. SMS implementation, risk assessment, emergency preparedness, maintenance, reporting, drills, procedures and continuous improvement.
ISPS Verify effective implementation of ship security requirements and security procedures. Ship Security Plan, access control, security awareness, monitoring, drills, restricted areas and security records.
MLC Verify compliance with applicable minimum standards for seafarers' employment and onboard conditions. Employment agreements, wages, hours of work and rest, accommodation, food, medical care, welfare and repatriation arrangements.

ISM Audits

The ISM Code provides a structured safety management framework for companies and ships. Effective ISM implementation requires more than maintaining documentation; the Safety Management System must be understood and applied in actual vessel operations.

Safety Management System

Verification that the SMS is established, maintained, communicated and effectively implemented onboard and ashore as applicable.

Risk Assessment

Examination of whether operational risks are identified, assessed and controlled through appropriate procedures and safeguards.

Emergency Preparedness

Review of emergency procedures, drills, crew awareness, contingency arrangements and lessons learned from exercises and incidents.

Maintenance & Reporting

Review of maintenance systems, defect reporting, corrective actions, internal audits and management review processes.

ISPS Audits

The ISPS Code establishes a security framework for ships and port facilities. Shipboard implementation requires security procedures, responsible personnel, appropriate controls and awareness among crew members.

Ship Security Plan

Verification that applicable security arrangements and procedures are established and implemented in accordance with the approved security framework.

Access Control

Review of arrangements controlling access to the vessel and restricted areas, including identification and monitoring procedures.

Security Awareness

Verification that crew members understand relevant security responsibilities, procedures and reporting arrangements.

Security Drills

Review of security drills, exercises, records and corrective actions used to maintain operational preparedness.

MLC Audits

The Maritime Labour Convention establishes minimum standards intended to protect seafarers' employment and working conditions. MLC compliance involves both documented arrangements and actual onboard conditions.

Employment Conditions

Review of applicable employment agreements, wages, contractual arrangements, repatriation provisions and relevant employment documentation.

Hours of Work & Rest

Examination of records and operational practices concerning working and rest hours and applicable requirements.

Accommodation & Welfare

Review of accommodation, recreational facilities, food, catering arrangements and other applicable welfare requirements.

Health & Medical Care

Assessment of applicable onboard arrangements supporting seafarer health, medical assistance and occupational welfare.

Types of Maritime Audits

Initial Audits Conducted as part of the initial certification or approval process to verify that applicable requirements have been established and implemented.
Intermediate Audits Performed during the certification period where applicable to verify continued compliance and effective implementation.
Renewal Audits Conducted as part of the recertification process to determine continued compliance with applicable requirements.
Internal Audits Conducted by the company or appropriately designated personnel to identify deficiencies and support continuous improvement.
External Audits Performed by relevant authorities, recognized organizations, authorized organizations or other competent external parties as applicable.
Mock Audits Structured preparation exercises designed to identify potential gaps before a formal audit or inspection.

ISM, ISPS, and MLC Audit Process

A structured audit process allows the auditor to assess documentation, practical implementation, personnel awareness and the effectiveness of corrective actions.

01

Preparation

Relevant documentation, policies, procedures, certificates and records are reviewed and updated before the audit.

02

Onboard Inspection

Auditors examine applicable equipment, systems, operational practices, records and physical conditions onboard.

03

Interviews

Crew members and responsible personnel may be interviewed to determine their understanding of procedures and responsibilities.

04

Findings

Findings, non-conformities, observations or deficiencies are documented according to the applicable audit framework.

05

Corrective Actions

Identified deficiencies are addressed through appropriate corrective and preventive actions within applicable requirements and timeframes.

06

Follow-Up

Corrective action effectiveness and outstanding matters may be reviewed as required by the applicable certification or audit process.

Principal Audit Areas

Area Typical Verification
Documentation Manuals, procedures, policies, records, certificates, reports and controlled documentation.
Crew Familiarity Personnel understanding of duties, emergency procedures, safety requirements and applicable responsibilities.
Operational Implementation Verification that documented procedures are actually followed during vessel operations.
Emergency Preparedness Drills, exercises, emergency procedures, response arrangements and associated records.
Security Access control, security procedures, restricted areas, security awareness and monitoring arrangements.
Seafarer Welfare Employment conditions, accommodation, food, medical care, welfare and applicable working conditions.
Corrective Actions Previous findings, corrective actions, preventive measures and evidence of effective implementation.

Common Challenges During Maritime Audits

Documentation Gaps

Incomplete, outdated or inconsistently maintained documentation can make it difficult to demonstrate effective implementation of the management system.

Crew Familiarity

Crew members may understand routine operations but have insufficient familiarity with specific procedures, responsibilities or emergency requirements.

Inconsistent Records

Missing, incomplete or inconsistent records can create difficulties when demonstrating that inspections, drills, maintenance and corrective actions have been completed.

Ship-Shore Communication

Weak communication between vessel and shore management can affect reporting, corrective action, safety management and operational consistency.

Poor Implementation

A well-written procedure does not provide effective compliance unless personnel understand it and apply it correctly during actual operations.

Delayed Corrective Action

Delays in addressing identified deficiencies can increase operational risk and may affect certification or inspection readiness.

Best Practices for Successful ISM, ISPS, and MLC Audits

Effective audit preparation should be based on continuous compliance rather than attempting to prepare only immediately before an external audit.

  • Conduct regular internal audits and compliance reviews.
  • Maintain current and properly controlled documentation.
  • Ensure crew members understand their duties and responsibilities.
  • Conduct regular safety and security drills.
  • Maintain accurate inspection, maintenance and training records.
  • Review previous audit findings and verify corrective action effectiveness.
  • Promote open reporting of deficiencies and unsafe conditions.
  • Maintain effective communication between vessel and shore management.
  • Address non-conformities promptly and systematically.
  • Use mock audits where appropriate to identify potential gaps.
Continuous improvement principle: Audit readiness should be treated as an ongoing management process. Strong compliance results from consistent implementation, competent personnel, accurate records and effective corrective action rather than last-minute preparation.

Benefits of Effective Compliance

Improved Safety Effective safety management systems help identify and control operational hazards and reduce accident risk.
Enhanced Security Effective ISPS implementation strengthens ship security and helps address potential external threats.
Crew Welfare Effective MLC implementation supports appropriate working, living and welfare conditions for seafarers.
Reduced Operational Risk Systematic compliance management can identify deficiencies before they develop into more serious operational problems.
Inspection Readiness Consistent implementation and accurate records improve preparedness for applicable audits and inspections.
Operational Efficiency Well-managed systems can improve communication, consistency, accountability and operational performance.

The Future of Maritime Audits

Digitalisation is increasingly influencing the way maritime companies manage documentation, compliance information, inspections and operational data.

Electronic Documentation

Digital management systems can improve document control, accessibility, version management and record retention.

Remote Auditing

Remote technologies may support selected audit activities where permitted and appropriate to the applicable regulatory or certification requirements.

Data-Driven Compliance

Operational data and digital analytics can help identify trends, recurring deficiencies and areas requiring management attention.

Fleet Integration

Integrated fleet management platforms can connect compliance, maintenance, training, reporting and operational information across vessels and shore organizations.

PAMS Pacific Admiralty Maritime Services

PAMS Pacific Admiralty Maritime Services is an independent Philippine marine technical consultancy specializing in marine surveying, offshore engineering support, FPSO/SPM systems and maritime regulatory compliance.

PAMS provides independent technical support for vessel inspections, condition and P&I surveys, dry-docking supervision, technical assessments, offshore technical projects and compliance-related requirements within the agreed scope of service.

ISM Support

Technical support for Safety Management System readiness, onboard implementation, identification of technical gaps and preparation for applicable compliance assessments.

ISPS Support

Technical support concerning applicable ship security procedures, operational readiness and identification of areas requiring attention within the agreed scope.

MLC Support

Technical compliance support concerning applicable onboard conditions, documentation and operational requirements within the agreed consultancy scope.

Independent Technical Consultancy

Independent marine technical expertise supporting vessel operators and maritime stakeholders with practical, evidence-based technical assessments.

Important distinction: PAMS operates as an independent marine technical consultancy. Its technical consultancy and compliance support does not replace statutory audits, flag administration requirements, classification surveys, recognized organization activities or other mandatory certification processes.

ISM, ISPS, and MLC Compliance Assessment

Technical Subject

Maritime compliance covering safety management, ship security, seafarer welfare, onboard implementation, documentation and operational readiness.

Primary Objective

To identify potential technical, procedural and implementation gaps and support informed corrective action within the agreed consultancy scope.

Typical Clients

Shipowners, vessel operators, technical managers and other maritime stakeholders may require independent technical compliance support.

Technical Approach

Assessment is based on the agreed scope, available documentation, physical observations, personnel interviews, operational practices and applicable technical requirements.

Assessment principle: The actual scope of any ISM, ISPS or MLC technical assessment depends on vessel type, company requirements, applicable regulations, certification status, operational conditions, documentation availability and the specific services agreed with the client.

ISM, ISPS, and MLC Audit FAQ

What is the ISM Code in shipping?

The International Safety Management (ISM) Code establishes an international framework for the safe management and operation of ships and pollution prevention through structured Safety Management Systems implemented by companies and ships.

What does ISPS stand for?

ISPS stands for the International Ship and Port Facility Security Code. It establishes a framework for maritime security measures intended to detect, deter and respond to security threats affecting ships and port facilities.

What is the MLC in maritime operations?

The Maritime Labour Convention (MLC) establishes minimum standards for seafarers' working and living conditions, including employment arrangements, wages, accommodation, health, welfare and other applicable labour requirements.

Why are ISM, ISPS, and MLC audits important?

They help verify that applicable safety management, security and maritime labour requirements are properly implemented and maintained, supporting safer vessel operations and appropriate working and living conditions for seafarers.

What is checked during an ISM audit?

An ISM audit may examine the Safety Management System, risk assessments, procedures, emergency preparedness, maintenance, reporting, drills, records, crew awareness and implementation of safety management requirements.

What is checked during an ISPS audit?

An ISPS audit may examine applicable security plans, procedures, access control, restricted areas, monitoring, security awareness, drills, records and the implementation of ship security requirements.

What is checked during an MLC audit?

An MLC audit may examine employment agreements, wages, hours of work and rest, accommodation, food, medical care, repatriation, welfare and other applicable seafarer employment and onboard living conditions.

What types of maritime audits are conducted?

Depending on the applicable certification and regulatory framework, audits may include initial, intermediate, renewal, internal and external audits. Companies may also conduct mock audits as part of their preparation and continuous improvement programs.

Who is responsible for ISM, ISPS, and MLC compliance?

Responsibility depends on the applicable regulatory framework and company organization, but shipowners, operators, company management and designated responsible personnel have important responsibilities for implementing and maintaining applicable requirements.

Can a marine technical consultant assist with audit preparation?

Yes. An independent marine technical consultant may assist with technical gap identification, documentation review, onboard readiness assessments, crew awareness reviews and other preparation activities within the agreed consultancy scope.

Can PAMS perform statutory ISM, ISPS, or MLC certification audits?

PAMS provides independent marine technical consultancy and compliance support. Such consultancy does not replace statutory audits, flag administration activities, classification requirements, recognized organization certification or other mandatory audit processes.

Where is PAMS based?

PAMS Pacific Admiralty Maritime Services is based in Manila, Philippines and operates as an independent marine technical consultancy specializing in marine surveying, offshore engineering support, FPSO/SPM systems and maritime compliance services.

Related Marine Technical Services

RightShip RISQ 3.2 Technical readiness and assessment support for applicable RightShip RISQ 3.2 requirements.
OCIMF SIRE 2.0 Technical readiness support for OCIMF SIRE 2.0 inspection requirements.
TMSA Compliance Support Technical support related to tanker management systems and operational compliance requirements.
Marine Condition Surveys Independent vessel condition assessment within the agreed technical scope.
P&I Surveys Independent technical inspection support for P&I-related vessel condition and risk assessment requirements.
Dry-Docking Supervision Technical support during vessel dry-docking, inspection, repair and maintenance activities.

ISM, ISPS, and MLC Audit Reference Notice

This article provides a general technical explanation of ISM, ISPS and MLC audits and their potential applications within maritime operations. The actual audit, inspection and certification requirements depend on the vessel, company, flag State, applicable statutory requirements, certification status, recognized organization, operational circumstances and specific regulatory framework. Technical consultancy and readiness support do not replace statutory audits, flag administration requirements, classification activities, recognized organization certification or other mandatory inspections.

☰ BLOG ARTICLES
PAMS Pacific Admiralty Maritime Services
PAMS Pacific Admiralty Maritime Services
Marine Surveyors & Maritime Consultants
Address: 1214 P.Ocampo St., Malate, Manila, 1017 Metro Manila, Philippines
Phone: +63 969 524 0506
Email: [email protected]
Website: pamsmaritime.com
ShipServ TradeNet ID: 319922
DTI Registered Business No: 4088965
Established: 2018
Back to content