Question 1

A vessel's SMS states it “addresses cyber risk” but has no documented fallback procedure for losing normal access to cargo monitoring or machinery control systems. What's the real gap?

Accepted Answer

A genuine cyber risk assessment needs a specific, actionable fallback for losing control of safety-critical systems — not just a policy acknowledging the risk exists A boilerplate policy statement doesn't give a crew anything to act on in the moment. A real cyber risk assessment identifies which safety-critical systems (cargo, machinery, navigation) could be affected and documents specific manual overrides, isolation points, and escalation contacts for each.

Question 2

Under the ISM Code and as reinforced in Gard's guidance to Members, the Master's overriding authority to make decisions for the safety of the ship and protection of the environment can be overruled by a commercial instruction from the company, such as a charterer's order to sail on schedule.

Accepted Answer

False False. Gard's guidance to Members consistently stresses that the ISM Code (element 5) gives the Master overriding authority and responsibility for safety and pollution prevention decisions — and that companies must ensure this authority is not undermined by commercial pressure. A charterer's or owner's commercial instruction never overrides the Master's safety judgement; Masters who feel pressured are advised to record their decision and reasoning and report it to the company and, where relevant, to their P&I correspondent.

Question 3

A crew member identifies that a piece of safety equipment does not match what is listed on the safety equipment plan. What is the correct way to handle this under the SMS?

Accepted Answer

Raise it as a non-conformity/observation through the SMS reporting process so it is recorded, investigated, corrected, and — if it reflects a wider issue — used to improve procedures or the safety equipment plan itself The ISM Code requires a system for reporting non-conformities, accidents and hazardous occurrences so they can be analysed and corrective/preventive action taken — quietly fixing an issue without recording it loses this opportunity for systemic improvement.