15.1 The port facility security assessment is
an essential and integral part of the process of developing and updating
the port facility security plan.
15.2 The port facility security assessment shall
be carried out by the Contracting Government within whose territory
the port facility is located. A Contracting Government may authorise
a recognized security organization to carry out the port facility
security assessment of a specific port facility located within its
territory.
15.2.1 When the port facility security assessment
has been carried out by a recognized security organization, the security
assessment shall be reviewed and approved for compliance with this
section by the Contracting Government within whose territory the port
facility is located.
15.3 The persons carrying out the assessment shall
have appropriate skills to evaluate the security of the port facility
in accordance with this section, taking into account the guidance
given in part B of this Code.
15.4 The port facility security assessments shall
periodically be reviewed and updated, taking account of changing threats
and/or minor changes in the port facility and shall always be reviewed
and updated when major changes to the port facility take place.
15.5 The port facility security assessment shall
include, at least, the following elements:
-
.1 identification and evaluation of important
assets and infrastructure it is important to protect;
-
.2 identification of possible threats to the assets
and infrastructure and the likelihood of their occurrence, in order
to establish and prioritize security measures;
-
.3 identification, selection and prioritization
of countermeasures and procedural changes and their level of effectiveness
in reducing vulnerability; and
-
.4 identification of weaknesses, including human
factors in the infrastructure, policies and procedures.
15.6 The Contracting Government may allow a port
facility security assessment to cover more than one port facility
if the operator, location, operation, equipment, and design of these
port facilities are similar.Any Contracting Government, which allows
such an arrangement shall communicate to the Organization particulars
thereof.
15.7 Upon completion of the port facility security
assessment, a report shall be prepared, consisting of a summary of
how the assessment was conducted, a description of each vulnerability
found during the assessment and a description of countermeasures that
could be used to address each vulnerability. The report shall be protected
from unauthorized access or disclosure.