ISM Code
The ISM Code is the mandatory international standard that requires a Safety Management System (SMS) and a Designated Person Ashore (DPA). It ensures the safe management and operation of ships and pollution prevention. Flag states and class societies require ISM certification.
Definition
ISM Code is a mandatory international standard that requires a Safety Management System (SMS) and ensures the safe management and operation of ships and pollution prevention.
What is the ISM Code?
The International Safety Management (ISM) Code is the mandatory IMO standard for the safe management and operation of ships. Adopted by IMO Resolution A.741(18) and made mandatory by chapter IX of SOLAS, it entered into force on 1 July 1998 for passenger ships and for oil and chemical tankers, gas carriers, bulk carriers and cargo high-speed craft of 500 GT and above, and on 1 July 2002 for other cargo ships and mobile offshore drilling units of 500 GT and above. The ISM Code requires shipping companies and vessel operators to establish a documented Safety Management System (SMS), designate a Designated Person Ashore (DPA), and demonstrate a culture of continuous improvement in safety. Flag states and classification societies audit ISM compliance and issue Documents of Compliance (DOC) and Safety Management Certificates (SMC).
What the ISM Code Requires
The ISM Code sets six functional requirements for every Safety Management System (section 1.4), and its sections 2 to 13 cover: a safety and environmental protection policy; company responsibilities and authority; designated persons ashore; master's responsibility and authority; resources and personnel; development of plans for shipboard operations; emergency preparedness; reports and analysis of non-conformities, accidents, and hazardous occurrences; maintenance of the ship and equipment; documentation; company verification, review, and evaluation; and certification. Each element must be documented, implemented, and audited.
Document of Compliance (DOC)
Issued to the ship management company (ashore) after audit by the flag state or recognised organisation. Covers specific vessel types. Valid for five years with annual verification. A company operating without a valid DOC operates outside ISM compliance.
Safety Management Certificate (SMC)
Issued to the individual vessel after an initial audit and interim period. Valid for five years with an intermediate audit between year two and three. The SMC is the vessel's primary ISM compliance document and must be carried on board and presented to Port State Control on request.
ISM Code for Superyachts and Charter Yachts
ISM is mandatory for commercially operated yachts of 500 GT and above, including those operating under yacht codes such as the Red Ensign Group Yacht Code (which replaced the MCA's LY3) or the Marshall Islands Yacht Code. Private yachts below 500 GT or in non-commercial operation are not legally required to hold ISM certification, but many flag states and class societies encourage it. For charter yachts, ISM certification is viewed positively by charterers, insurers, and marinas — and PSC inspectors treat ISM-certified vessels as lower risk.
Common ISM Nonconformities
PSC inspectors and internal auditors most frequently cite: incomplete or unsigned maintenance records; overdue PMS tasks without corrective action records; missing or outdated emergency drill records; DPA not reachable or role not clearly defined in the SMS; crew unfamiliar with muster stations or emergency procedures; accident and near-miss reports not filed; and SMS documentation not available in the working language of the crew. Each nonconformity must be closed with evidence before the SMC renewal audit.
The ISM Audit Process
ISM certification involves an initial audit (shore and shipboard), issuance of an Interim SMC (valid 6 months), a full audit to issue the SMC, an intermediate audit (between the second and third anniversary dates), and a renewal audit at year 5. Audits are conducted by the flag state or a Recognised Organisation (RO) such as Lloyd's Register, Bureau Veritas, or DNV. Unannounced verification audits may also occur. Evidence of a major nonconformity is grounds for withdrawing the certificate.
How HelmOps Supports ISM Compliance
HelmOps provides the operational infrastructure that ISM requires: maintenance scheduling and records (PMS), task management for shipboard operations, crew documentation, and a central store for vessel documents such as SMS policies and procedures. The owner and captain are alerted as certificates, documents, and maintenance tasks fall due.
ISM Code for Vessels Under 500 GT: Voluntary vs Mandatory
SOLAS chapter IX makes the ISM Code (IMO Resolution A.741(18), as amended, including by MSC.104(73)) mandatory for passenger ships and for cargo ships of 500 GT and above engaged in international voyages. However, the convention's scope does not automatically extend to smaller commercial vessels. This distinction matters operationally: a commercial yacht of 250 GT is not bound by SOLAS IX, but may still face ISM-equivalent obligations imposed by its flag state or the applicable code of practice. Flag states exercise significant discretion in extending ISM requirements downward. The Red Ensign Group Yacht Code, which replaced the MCA's Large Yacht Code (LY3) on 1 January 2019, requires every commercial yacht of 24 metres and over in load line length that is under 500 GT to operate a safety management system (Chapter 23A), and those of 500 GT and over to comply with SOLAS chapter IX. The Marshall Islands requires a simplified "Mini-ISM" for commercial yachts under 500 GT, reviewed annually and checked during compliance verifications. Charter agents and underwriters may also ask for evidence of a functioning SMS below 500 GT — even without a formal SMC. The practical result is that ISM certification, or a substantively ISM-equivalent SMS, has become the expected standard for any professionally operated charter yacht regardless of tonnage. For operators of sub-500 GT commercial yachts considering whether to formalise ISM certification: the audit and documentation investment is real, but the commercial and risk management benefits — preferred charter placement, stronger insurance positioning, and a demonstrably lower PSC risk profile — routinely justify it. Flag state guidance should be sought to confirm the specific requirements applicable to each vessel's registry and route.
The Designated Person Ashore (DPA) in the ISM Context
ISM Code section 4 requires every company operating under the Code to designate a person or persons ashore with direct access to the highest level of management. This individual — the Designated Person Ashore (DPA) — is the critical link between vessel operations and company leadership. Under section 4, the DPA's responsibility covers monitoring the safety and pollution prevention aspects of the operation of each ship and ensuring that adequate resources and shore-based support are applied; section 9 separately requires non-conformities, accidents, and hazardous situations to be reported to the Company. The DPA role is not ceremonial. ISM Code section 4 requires the DPA to have direct access to the highest level of management at all times — meaning a 0300 call from a vessel in distress must reach a decision-maker, not a voicemail. The DPA must be reachable and empowered to commit company resources to vessel safety without bureaucratic delay. This requirement is taken seriously by recognised organisations during audits and by PSCOs during inspections. Qualifications for the DPA are not rigidly prescribed by the ISM Code, but recognised organisations and flag states expect the DPA to have sufficient maritime knowledge to understand shipboard operations, interpret safety reports, and communicate effectively with masters and crew. IMO guidance (MSC-MEPC.7/Circ.6) accepts a relevant tertiary qualification, qualifications and seagoing experience as an STCW-certified ship officer, or other formal education combined with at least three years of senior-level ship management experience. What matters functionally is competence, not a specific ticket. When PSCOs verify DPA arrangements during an ISM inspection, they look for: evidence that the DPA is named in the SMS documentation; proof of communication systems enabling direct vessel-to-DPA contact; records showing the DPA has reviewed and responded to non-conformity reports and near-miss reports; and confirmation that the DPA participated in or reviewed the most recent internal SMS audit. A DPA who cannot be contacted during an inspection, whose name does not appear in current SMS documents, or whose involvement in the safety management cycle is not evidenced by records, is a material ISM finding.
SMS Documentation: What Must Be On Board
The ISM Code requires each vessel to carry a defined set of documents evidencing its SMS compliance. While the Code does not enumerate an exhaustive checklist, recognised organisations and flag state guidance consistently require the following to be available on board and accessible to PSCOs on request: The Safety Management Certificate (SMC) — the primary ISM compliance document for the vessel, issued by the flag state or recognised organisation. Must be current, with the intermediate audit endorsement visible if applicable. A copy of the company's Document of Compliance (DOC) — confirms the managing company holds valid ISM certification for the relevant vessel type. The copy on board does not need to be authenticated or certified (ISM Code 13.6); the original DOC is held ashore. The SMS manual or controlled copy — the documented Safety Management System covering all ISM Code requirements. This may be in physical or electronic form, but must be the current version, controlled, and in the working language of the crew. Out-of-date SMS manuals are a recurring ISM non-conformity. Emergency response plans — including plans for fire, flooding, man overboard, grounding, collision, and medical emergencies, as applicable. These must be integrated into the SMS and demonstrate vessel-specific content, not generic templates. Maintenance records (PMS records) — evidence of planned maintenance system implementation: completed tasks, overdue task management, and equipment-specific service logs. Gaps in PMS records are among the most common ISM non-conformities found during inspections. Drill and exercise records — records of fire drills, abandon-ship drills, man-overboard drills, and other emergency exercises. SOLAS requires at minimum monthly fire drills and abandon-ship drills. Records must include date, participants, and any deficiencies identified. Non-conformity, accident, and near-miss reports — evidence that the reporting and analysis cycle required by ISM Code section 9 is functioning. A vessel with no near-miss reports raises the question of whether the crew reporting culture is genuine. Crew certification records — STCW certificates, flag endorsements, medicals, and relevant special training certificates for each crew member currently on board. These must match the vessel's minimum safe manning document.
Frequently Asked Questions
Manage ISM Code in HelmOps
Yacht expenses, maintenance, tasks and trips in one place. Records you add offline sync when the connection returns.
Track vessel certificates and their expiry dates
Store the DOC, SMC and other vessel documents. HelmOps reminds the captain and owner 90, 60 and 30 days before each one expires.
No credit card required.
Verified reference
https://www.imo.org/en/OurWork/HumanElement/Pages/ISMCode.aspx(opens in new tab)
Related terms
Last updated: