ISM Code Complete Guide 2026

ISM Code (International Safety Management) comprehensive guide. Implementation, compliance, and SMS requirements.

Quick Answer

ISM Code requires every shipping company to establish a Safety Management System (SMS) with a Document of Compliance for the company and Safety Management Certificate for each vessel. The DPA provides the critical link between ship and company management for all safety matters.

What the SMS actually documents

An SMS isn’t a single document but a structured set of procedures covering nearly every aspect of running the ship safely: emergency preparedness (fire, flooding, collision, abandon ship, pollution response), planned maintenance for critical equipment, procedures for reporting hazards and near-misses without fear of blame, defined levels of authority so the Master’s overriding authority in an emergency is never in question, and a system for internal audits and management review that’s supposed to catch problems before an external auditor does. Every crew member, from cadet to Master, is expected to know where the relevant SMS procedure is and follow it — not just have it available as paperwork.

The DPA and why that role exists

The Designated Person Ashore is the ISM Code’s answer to a specific failure mode: a ship’s crew identifying a serious safety problem that the ship’s own management chain is reluctant to escalate because of cost or schedule pressure. The DPA has a direct reporting line to the company’s top management, independent of the normal operational chain, specifically so that a genuine safety concern raised by anyone onboard has a route to someone with the authority to act on it, bypassing anyone who might otherwise be motivated to bury it.

How compliance actually gets checked

Two separate inspection regimes verify that an SMS is more than a filing cabinet exercise. Port State Control inspectors check for ISM implementation as part of a standard PSC inspection — a Safety Management Certificate on paper with no evidence of drills being run or procedures being followed is itself a detainable deficiency. For tankers specifically, SIRE inspections go further: oil-major inspectors assess actual operational practice against SMS procedures and industry best practice, and the results directly affect whether a tanker can secure charters, making SIRE performance a commercial issue as much as a compliance one.

Non-conformities found during any audit get classified by severity. A minor NC is an isolated slip that doesn’t threaten the system as a whole — a missed signature on a routine checklist, for instance — and gets corrected with a documented response. A major NC is a systemic failure that genuinely undermines safety, and if it isn’t closed out by the next audit cycle, the vessel risks losing its Safety Management Certificate, which in practice means it cannot legally trade until it’s reissued.

What this means day-to-day for crew

For officers and ratings, the ISM Code shows up less as an abstract compliance framework and more as the reason drills are logged with actual times and participants rather than backfilled, why near-miss reporting is treated as valuable rather than punished, and why “we’ve always done it this way” isn’t an acceptable answer when it conflicts with the documented SMS procedure. Auditors, whether internal, flag state, or SIRE, are specifically trained to spot the gap between what the SMS says on paper and what actually happens on deck — closing that gap is the entire point of the Code.

Chat with SailorGPT

Frequently Asked Questions

What is the ISM Code and who does it apply to?

ISM Code is the International Safety Management Code under SOLAS Chapter IX. It applies to passenger ships, tankers, bulk carriers, cargo high-speed craft, and mobile offshore units of 500 GT or more on international voyages. It requires companies to establish a Safety Management System to ensure safe ship operation and prevent pollution.

What is a DPA and what are their responsibilities?

DPA (Designated Person Ashore) must have direct access to the highest company management level, monitor safety and pollution prevention aspects of all ship operations, receive all safety reports from ships, ensure corrective actions are taken promptly, and be available 24/7 for emergency contact with ships. The DPA role is mandatory under ISM and identity must be posted onboard.

What documents prove ISM Code compliance?

DOC (Document of Compliance) issued to the company after SMS audit - covers specific ship types operated. SMC (Safety Management Certificate) issued to each individual vessel after onboard verification. Both issued by flag state or recognized organization. SMC valid 5 years with intermediate audit at 2.5 years. Port state control inspects both - absence or expiry causes immediate detention.

What must be reported under the ISM Code SMS?

ISM requires reporting: accidents and injuries, near-misses (hazardous situations that did not result in incident), non-conformities with SMS procedures, deficiencies in safety equipment, environmental incidents, and situations affecting safety. All reports require investigation, root cause identification, and documented corrective and preventive actions.

Exam Prep Courses

Study Smarter. Pass Faster.

→ Browse all courses at sailorsuccess.online/courses

Part of the Maritime Learning Hub

Explore all IMU CET prep, COC exams, STCW courses, and ship operations guides in the complete guide.

← Back to Maritime Learning Hub

Still have questions? SailorGPT has answers — free, honest, experience-based guidance.

🤖 Ask SailorGPT — Exam Prep Help

Free to start · ₹99/month to unlock full access

🩺 Free Financial Health Check

You're learning the technical side. Don't ignore the financial side.

Emergency Fund · Term Insurance · Health Cover · Debt · Investments — 5 questions. Instant score. Free.

Check My Financial Health — Free →
Ask SailorGPT AI Talk to Chief