Your examiner asks: "If an internal or external audit identifies an ISPS-related non-conformity — for example, a gap between the SSP and actual practice on board — what should happen, and how does this differ from an ISM non-conformity?"

A. An ISPS non-conformity — a finding that actual security practice does not meet the requirements of the approved SSP or the ISPS Code — should be recorded, reported to the CSO, and addressed through a corrective action process: identifying the root cause, implementing a fix, and verifying the fix closes the gap, broadly analogous in STRUCTURE to how an ISM Code non-conformity is handled. However, the ISPS process remains SECURITY-focused and confidential in nature — corrective action records and details of security vulnerabilities are handled with the same confidentiality that applies to the SSP itself, rather than being freely available in the way some ISM/SMS records might be, because publicising a specific security weakness before it is fixed could itself create a security risk.

B. ISPS non-conformities are handled identically to ISM non-conformities in every respect, including being freely available for review by any crew member or visiting auditor with no confidentiality distinction.

C. There is no corrective action process for ISPS non-conformities — once identified, a security gap is simply noted with no requirement to investigate cause or verify a fix.

D. ISPS non-conformities must always be reported publicly to the flag state's website before any corrective action can be taken, regardless of the sensitivity of the specific vulnerability.

A. Nothing — a test lift can proceed immediately after repairs

B. Testing should wait until cargo operations begin

C. The area within the grab's swing radius should be cleared of personnel before the lift

D. Only the crane operator needs to be aware the lift is happening

A. Who must remain clear of the exclusion zone while the lift takes place

B. The lunch schedule for the deck team

C. Only the weather forecast for the next watch

D. The cargo manifest for the next port