ISM Code compliance is not optional paperwork for commercial yachts — it is a structural requirement that determines whether your vessel can legally operate, whether your insurance will respond, and whether your crew are working in a system that genuinely manages risk.
This guide covers what the ISM Code actually requires, who needs to comply, how to build a functioning Safety Management System, and what happens during DOC and SMC certification.
What the ISM Code Is
The International Safety Management Code is an IMO standard for the safe management and operation of ships and for pollution prevention. It became mandatory under SOLAS Chapter IX, entering into force for passenger ships in 1998 and for cargo ships and other vessels (including applicable yachts) in 2002.
The ISM Code's logic is straightforward: document what you do, do what you document, and prove it happened.
This three-part loop — document, implement, record — is what a Safety Management System looks like in practice. The ISM Code does not prescribe specific procedures. It requires that you have appropriate ones, that your crew know and follow them, and that you can demonstrate this to a surveyor.
Who Needs ISM Compliance
The mandatory scope of the ISM Code covers vessels of 500 GT or more on international voyages that are engaged in commercial operation. In the yacht context:
Clearly in scope:
- Charter yachts carrying passengers commercially (regardless of flag, once 500 GT is met)
- Commercial superyachts operating under MCA LY3, RINA, or equivalent large yacht codes
- Any vessel receiving money for carriage that meets the GT threshold
Not technically mandatory, but practically expected:
- Private yachts below 500 GT operating internationally: no ISM obligation, but many flag states and insurers want to see an equivalent SMS
- Vessels in specific national charter areas: local authority requirements vary; Greek waters (HCGA) and Turkish commercial vessels have their own compliance frameworks that partially overlap with ISM
The commercial/private line is drawn by the flag state certificate, not by whether money changes hands informally. If the vessel has a commercial large yacht certificate, ISM applies.
The Safety Management System: What It Must Contain
ISM Code Article 1.4 defines the SMS as covering twelve functional areas. In practice, these resolve into eight categories that every SMS must address:
Safety and Environmental Policy
A brief, board-signed statement of the company's commitment to safety and environmental protection. This is the foundation document — everything else derives from it.
Roles and Responsibilities
Who is the Designated Person Ashore (DPA)? What is the Master's authority in safety matters? How does the chain of command work between ship and company? This must be written down and understood by everyone on board.
Resources and Personnel
STCW certificate tracking, familiarisation procedures for new crew, rest hour records, and crew competency verification. The SMS must describe how the company ensures it has the right people with the right certificates on board.
Shipboard Operations
Procedures for critical operations: port entry and departure, anchoring, bunkering, tender operations, passenger embarkation. These procedures must be ship-specific, not generic text copied from a template.
Emergency Preparedness
Fire, flooding, man overboard, severe weather, medical emergency, and evacuation scenarios — each requires a written plan and a drill schedule. Drills must be conducted, and the records must show they happened.
Reporting Non-Conformities, Accidents, and Hazardous Occurrences
Near-miss reporting is a core ISM requirement and the one most often underdeveloped. The system only works if crew feel safe reporting minor incidents without fear of blame.
Maintenance
A Planned Maintenance System (PMS) is effectively mandatory under ISM. Every critical piece of equipment needs scheduled maintenance, and every maintenance action needs a record. Deferred maintenance must be documented, not hidden.
Document Control
Version control for all SMS documents. Superseded documents must be removed from the vessel. Surveyors regularly find out-of-date procedures still in use — a straightforward finding that signals poor document management.
A beautifully written SMS manual sitting untouched in a binder does not constitute compliance. Surveyors look for evidence of use: drill records with crew signatures, maintenance logs with technician notes, near-miss reports with follow-up actions. If the records do not exist, neither does the system.
DOC and SMC Certification
Select a Recognized Organization
ISM certification is conducted by Recognized Organizations (ROs) acting on behalf of flag states. The major ROs — Lloyd's Register, Bureau Veritas, DNV, ClassNK, RINA — each have yacht specialisations. Your flag state will have a list of approved ROs; some flag states are more prescriptive than others about which RO you can use.
Prepare the SMS Documentation
This is the most time-intensive step. The minimum documentation package includes:
- Safety and Environmental Protection Policy
- Company Safety Management Manual
- Ship Safety Management Manual
- Critical operations procedures (tailored to the specific vessel)
- Emergency plans
- Forms and record templates
Generic templates are a starting point, not a finish line. Surveyors know what template-derived SMS documentation looks like, and they probe to verify that procedures reflect how the vessel actually operates.
Company DOC Survey
The RO surveyor visits the company's office (or conducts a documented remote review, which some ROs now accept post-pandemic). The SMS documentation is reviewed, key personnel are interviewed, and the company's management of the SMS is assessed. If satisfactory, the DOC is issued with five-year validity and annual verification requirements.
Ship SMC Survey
Following DOC issuance, the ship survey is arranged. The surveyor goes on board to verify that the SMS is being implemented effectively. They will check drill records, look at the maintenance log, test crew knowledge of emergency procedures, and inspect critical equipment. The SMC is issued after a satisfactory survey.
Internal Audit: Keeping the SMS Alive
The ISM Code requires annual internal audits at both company and ship levels. This is not a box-ticking exercise — it is the mechanism by which problems surface before an external surveyor finds them.
A useful internal audit asks:
- Are the documented procedures actually being followed, or have informal workarounds developed?
- Is near-miss reporting happening, or have incidents been going unrecorded?
- Are maintenance items being completed on schedule, and if not, why?
- Do drills reflect realistic scenarios, or have they become routine performances?
- Are new crew receiving adequate familiarisation, and is this documented?
Findings should be recorded as non-conformities, assigned corrective actions, and closed out with evidence. This paper trail is what demonstrates to an external surveyor that the internal audit function is genuine. For the full step-by-step process — who can run the audit, how to grade findings, and how to close out corrective actions — see our ISM internal audit walkthrough.
Common ISM Deficiencies
Port state control records and class society observations point to recurring problems:
Documentation currency: Procedures updated at company level but not distributed to the vessel. Superseded versions still in use. No document register to track what is current.
Drill realism and recording: Drills conducted but not recorded, or recorded without meaningful detail. A one-line entry saying "fire drill completed" does not demonstrate learning.
Near-miss suppression: Crew reluctant to report minor incidents. This is a culture problem, not a paperwork problem, and it is difficult to fix without visible leadership commitment to non-punitive reporting.
Maintenance deferral without documentation: Equipment maintenance overdue and not recorded as deferred with a risk assessment. The maintenance did not happen — that is acceptable if properly documented and risk-managed. Simply skipping it is not.
Digital SMS Management
The shift from paper-based to digital SMS is well underway in the superyacht sector. Digital platforms offer:
- Maintenance scheduling: Planned versus completed maintenance, automatic overdue alerts
- Drill records: Date, participants, observations, digital signatures
- Near-miss reporting: Mobile-first forms, action tracking and close-out
- Document control: Single source of truth, version history, simultaneous ship and shore access
- Audit trails: Time-stamped, tamper-evident records ready for surveyor review
HelmOps is built around these requirements. Maintenance planning, compliance document management, and crew certification tracking are integrated in a single platform — designed specifically for vessel operations rather than adapted from a generic business tool.
All major recognized organizations now accept digital SMS records where they meet audit trail requirements. The ISM Code specifies what must be documented, not the medium.
Related Reading
- ISM Internal Audit Walkthrough — running the annual internal audit step by step
- Port State Control Guide — preparing for PSC inspections
- MLC 2006 Crew Rights Guide — crew compliance framework
- Yacht Crew Document Management — certificate and document tracking
For information on how HelmOps supports ISM compliance management, explore the platform.
