Question 1

A 500GT+ commercial yacht's Ship Security Plan (SSP) sets MARSEC/security Level 1 as the baseline. What must the Ship Security Officer (SSO) do when a port facility or flag state directs a temporary increase to Level 2?

Accepted Answer

Implement the additional security measures specified in the SSP for Level 2 (e.g. increased access control, additional screening, restricted areas) for as long as the heightened level applies, and brief the crew on the change — Level 1 baseline measures are not sufficient once a higher level is directed Security level changes are directed externally (port facility, flag state, or relevant authority) precisely because the threat assessment behind them often draws on intelligence the vessel itself does not have visibility of — the SSO's role is to implement the SSP's pre-planned Level 2 measures promptly, not to independently re-assess whether the heightened level is "really" necessary.

Question 2

At what tonnage threshold does the full ISM Code (not just the lighter safety management provisions within the REG Yacht Code itself) become mandatory for a commercial yacht?

Accepted Answer

500GT — above this threshold a commercially registered yacht on international voyages must comply with the full ISM Code, requiring a Document of Compliance (DOC) for the management company and a Safety Management Certificate (SMC) for the vessel This is a hard regulatory line, not a judgement call — a 499GT yacht and a 501GT yacht sit in genuinely different compliance regimes. Below 500GT (and 24m+), the yacht-specific REG Yacht Code safety management provisions apply; at and above 500GT, the vessel steps up into the full SOLAS-derived ISM Code framework with its DOC/SMC audit and certification structure.

Question 3

What is the practical difference for a Master/Chief Officer between operating under the REG Yacht Code's own safety management provisions versus operating under a full ISM DOC/SMC once a yacht crosses 500GT?

Accepted Answer

Full ISM brings external audit cycles (internal audits, external Flag State/RO audits, non-conformity tracking and close-out), a formally documented Safety Management System with defined procedures across all departments, and a shore-based Designated Person Ashore (DPA) the Master must have direct access to at any time Full ISM is a meaningfully heavier compliance regime — formal audit cycles, documented procedures across every department (not just bridge/deck), and a mandatory DPA relationship are all new obligations a yacht crossing 500GT takes on, distinct from the more streamlined safety management approach below that threshold.