Test 2 MART 401

BMP5

Best Management Practices

LRIT Purpose

Mandatory as of 2006 All passenger ships Cargo ships 300 gross tonnage and above Mobile offshore drilling units SATCOM based, NOT VHF (as is AIS), usually incorporated into GMDSS suite Reports to Flag Administration 4x daily

Can an officer lower the marsec level below the set marsec level of the port facility

No

Best Practices for AIS In Piracy

Recommended that AIS is left on through high-risk areas, restricted to the ship's identity, position, course, speed, navigational status, and safety-related information. AIS Message " ARMED GUARDS ON BOARD" (Dynamic Data)

Fundamentals of BMP5

Understanding the threats conduct risk assessments implement ship protection measures Report Cooperate

In drafting the ISPS the lead American governing agency was who

United states coast guard

What is AIS spoofing

involves creating a nonexistent vessel or masquerading a vessel's true identity, resulting in hiding or transmitting false positional data, so that a vessel appears to behave legitimately, thus deceiving stakeholders and authorities.

Port facility

is a location, as determined by the Contracting Government or by the Designated Authority, where the ship/port interface takes place. This includes areas such as anchorages, waiting berths and approaches from seaward, as appropriate.

The process of establish the ship security plan (SSA)

is an essential and integral part of the process of developing and updating the ship security plan. The Ship Security Assessment must be completed before the Ship Security Plan can be developed. **Should consider all possible threats. Should be submitted to the coast guard for approval as well.

SSI (Sensitive Security Information)

is information that, if publicly released, would be detrimental to transportation security, as defined by Federal regulation 49 C.F.R. part 1520.

SSI classified or not?

is not classified information, there are specific procedures for recognizing, marking, protecting, safely sharing, and destroying SSI.

Exercise Definition 33 CFR 101.105

means a comprehensive training event that involves several of the functional elements of the vessel security plan and tests communications, coordination, resource availability, and response. Annually.

Ship security plan

means a plan developed to ensure the application of measures on board the ship designed to protect persons on board, cargo, cargo transport units, ship's stores or the ship from the risks of a security incident.

Drill Definition 33 CFR 101.105

means a training event that tests at least one component of the vessel security plan and is used to maintain a high level of security readiness. Every three months. (and after major crew change, vessel alteration, etc)

Ship port interface

means the interactions that occur when a ship is directly and immediately affected by actions involving the movement of persons, goods or the provisions of port services to or from the ship.

Marsec level 2

means the level for which appropriate additional protective security measures shall be maintained for a period of time as a result of heightened risk of a transportation security incident.

Marsec Level 3

means the level for which further specific protective security measures shall be maintained for a limited period of time when a transportation security incident is probable, imminent, or has occurred, although it may not be possible to identify the specific target

Marsec level 1

means the level for which minimum appropriate security measures shall be maintained at all times.

Exercise requirements

which may include participation of company security officers, port facility security officers, relevant authorities of Contracting Governments as well as ship security officers, if available, should be carried out at least once each calendar year with no more than 1 8 months between the exercises. These exercises should test communications, co‐ordination, resource availability, and response. These exercises may be: .1 full‐scale or live;.2 tabletop simulation or seminar; or .3 combined with other exercises held, such as search and rescue or emergency response exercises.

33 CFR 105

A facility that receives vessels certificated to carry more than 150 passengers, except those vessels not carrying and not embarking or disembarking passengers at the facility

Marsec level inspection percentages

M1: 5% M2: 50% M3: 100%

International Ship security certificate

Good for 5 years

LRIT Stands for

Long Range Identification and Tracking

What the escort ratio

1-5

Records addressed in the ship security plan shall be kept on board for at least

2 years

Port Facility subject to

33 cfr 126.127 and 159

CCC

Cancel card list (if lost or disabled)

CISO

Chief Information Security Officer

Who is responsible for carrying out the ship security assessment

Company security officer

9-11 and the terrorist attack on the VLCC Limburg caused

Development and implementation were sped up

What are threats to Cyber Security

Disrupt Automation / SCADA 2. GPS Jamming 3. Steal / Alter Negotiable Documents 4. Manipulate Electronic Cargo Data (EDI) 5. Degrade ECDIS Information 6. AIS Spoofing

What events occurred during the Achille Largo

Docked at Alexandria, Egypt • Four men posing as passengers • Armed with AK-47 machine guns • Forced the captain to leave port; many passengers remained ashore • Members of a PLF faction - Headed by Mohammed Zaidan • Demanded that Israel release 50 Palestinian prisoners

FSP

Facility security plan; if need to change anything, an amendment must be submitted (USCG takes 60 days for approval)

Researchers: Discovered significant holes in the three key technologies sailors use to navigate

GPS, AIS, ECDIS (Gyro compass can also be effected)

ISPS CODE is under which governing agency

IMO and chapter 11 of SOLAS

Drill requirements

In addition, in cases where more than 25% of the ship's personnel has been changed, at any one time, with personnel that has not previously participated in any drill on that ship within the last 3 months, a drill should be conducted within one week of the change. These drills should test individual elements of the plan such as those security threats listed in

SSAS purpose

Initiate & transmit Ship‐To‐Shore Security Alert to competent Authority •Does not transmit to other ships (unlike AIS) •No on‐board alarm •Continuous until reset / deactivated•Activated from navigation bridge and at least one other location •"Bank Teller Alarm"

ISPS (compered to MTSA)

International Maritime OrganizationSOLAS XI‐2•Part A - Mandatory Requirements•Part B -Recommendations for Implementation

ISPS

International ship and port facility safety code is a comprehensive set of measures to enhance the security of ships and port facilities, developed in response to the perceived threats to ships and port facilities in the wake of the 9/11 attacks in the United States"

Part A of the ISPS Code

Is mandatory

MTSA Definition

Maritime Transportation Security Act U.S. Law **33 CFR Subchapter H: MARITIME SECURITY Part 104 MARITIME SECURITY: VESSELS

The 1985 terrorist/ hijacking attack on the cruise ship achille lauro caused

Measures to prevent unlawful acts which threaten safety of ships and security of passengers

Achille Largo basic definition

October 1985 cruise ship hijacking in the Mediterranean Combination of Terrorism and Hijacking

The biggest Cyber Threat is

People (plugging in a USB drive to the ship's computer), spoofing

Equipment Immune to Spoofing

Sextant, paper charts, magnetic compass

SSAS

Ship Security Alert System

MTSA (compared to ISPS)

The Maritime Transportation Security Act (MTSA) is the U.S. National adoption of ISPS

BMP5 Purpose

The purpose of this publication is to help ships plan their voyage and to detect, avoid, deter,delay and report attacks

Examples of SSI

Vessel Security Assessments Vessel Security Plans MARSEC Directives issued by the Coast Guard Security Directives issued by TSA Some NVICs Threat Information Security Measures Training Materials & Records

What was the outcome of The Achille Largo terrorism/hijacking

Vessel headed to Tartus, Syria• Syrian authorities refused to allow the vessel to dock when it arrived the next day• Militants shot Leon Klinghoffer, an elderly American Jewish man confined to a wheelchair, and threw his body overboard. He was thought to have been singled out because of his religion. In 1986 the four hijackers were tried • received sentences ranging from 30 to 15 years in prison

Can an officer raise the marsec level

Yes

MTSA Mandates every five year it will include

access control measures TWIC implementation Identify visitors Gate Lists Declaration of security (marsec levels) (TWIC) (escort foreign)

Part B of the ISPS Code

recommendations

BMP5 what do you find in that

to DeterPiracy and Enhance Maritime Security in the Red Sea, Gulf of Aden, Indian Oceanand Arabian Sea