Offshore Security Plans

An offshore security plan sets out the security measures and procedures to be implemented to safeguard against acts of unlawful interference with an offshore facility.

Offshore security plans identify security measures to be used when different maritime security levels are in force. Various offshore industry participants are required to have, and comply with, offshore security plans. The Department may declare an offshore security zone be established within and around an offshore facility in order to protect it from any unlawful interference.

Who is affected?

The following offshore industry participants may be required to have offshore security plans under the Maritime Transport and Offshore Facilities Security Act 2003:

• offshore facility operators; and
• offshore service providers.

Even if you are not required to have your own offshore security plan, you may be affected by someone else's. If you have been given the relevant parts of another industry participant's offshore security plan, you must comply with the requirements of those parts.

It is an offence for a maritime industry participant to operate without an offshore security plan in force when one is required.

Maritime industry participants who hinder or aobstruct compliance with the security plan of another participant may be subject to an enforcement order.

Each offshore industry participant must ensure that their plan is protected against unauthorised access, amendment and disclosure.

An Australian ship regulated as an offshore facility is also required to have an ISSC. There are also obligations and requirements for foreign ships regulated as offshore facilities - including having an ISSC, providing pre-arrival information and complying with security directions and control directions.

Content and Form of an Offshore Security Plan

Offshore security plans must:

• include a security assessment for the participant's operation;
• set out details of security activities or measures to be undertaken or implemented by the participant for maritime security levels 1, 2 and 3;
• make provision for the use of declarations of security;
• demonstrate that the implementation of the plan will make an appropriate contribution towards the achievement of maritime security outcomes; and
• complement, to the fullest extent possible, the occupational health and safety requirements under the laws of the Commonwealth, state or territory applying at the facility.

Offshore security plans must be in writing, approved by the Department, and must be accompanied by relevant supporting documentation prescribed in the Maritime Transport and Offshore Facilities Security Regulations 2003.

The Maritime Transport and Offshore Facilities Security Act 2003 also has provisions covering the approval, variation and revision, and cancellation of offshore security plans.

Common Requirements for an Offshore Security Plan

The Maritime Transport and Offshore Facilities Security Regulations 2003 have a number of general requirements to be addressed in offshore security plans. These include details on security assessments and the risk management processes used; information on auditing and review processes; and how the plan is to be protected from unauthorised access, amendment and disclosure.

Matters to be Dealt with in an Offshore Security Plan

Matters that are to be dealt with in offshore security plans include:

• matters to be included in security assessments;
• security officer qualifications and responsibilities;
• duties, responsibilities, training and qualifications of other personnel with a security role;
• consultation procedures with employees, other maritime industry participants, and affected stakeholders;
• security measures for maritime security levels 1, 2 and 3; and
• declarations of security.

Offshore security plans must also address various other prescribed measures and procedures that are designed to prevent, or respond to, threats or breaches of security against their facility or operations.

Document Accompanying the Plan

The Maritime Transport and Offshore Facilities Security Regulations 2003 specify that certain location details and diagrams, contact details for key staff, details of security staff, and other information be put in an accompanying document to the security plan.

There is an obligation to notify the Department in writing within two working days if there is any change in these details. It is an offence not to do so.

Offshore Security Zones

The Department can establish one or more security zones within and around a security regulated offshore facility in order to subject those zones to additional security measures. In practice the offshore facility operator will set out in their security plan the required details if they wish the Department to establish an offshore security zone. The Department will consider these details when deciding on the establishment of the zones.

The Maritime Transport and Offshore Facilities Security Regulations 2003 prescribe offshore facility zone and offshore water-side zone as types of offshore security zones. Offshore facility zones must be clearly identifiable and access to the zone controlled.

The Maritime Transport and Offshore Facilities Security Regulations 2003 also have specific requirements for offshore security zones in regard to duties and obligations of offshore facility operators responsible for the zones, and offences for unauthorised entry. It is an offence for a person to enter or remain in, or take a vessel or thing in, or leave a vessel or thing in, an offshore security zone unless they are authorised to do so by the operator concerned.

Other Requirements for Offshore Industry Participants

There are also provisions in the Maritime Transport and Offshore Facilities Security Act 2003 and associated Regulations that apply to offshore industry participants - including incident reporting obligations, as well as screening and clearing requirements.

Information and Guidance Material

Application Forms for Approval of Offshore Security Plans

Maritime industry participants wishing to lodge their final offshore security plan must complete the Application Form for Approval of an Offshore Security Plan [DOC: 81 KB] [PDF: 55 KB]

Contained in these application forms is a self-assessment checklist which will assist the Department with the assessment and review of your plan. To ensure your security plan is submitted correctly, the application form also provides the details of the Departments contact officers and methods of lodgement.

Risk Context Statements

• The Offshore Oil & Gas Risk Context Statement and Maritime Security Risk Context Statement- to obtain a copy please email your request to security.analysis@infrastructure.gov.au

All Maritime Industry Participants are required to consider the Oil & Gas Risk Context Statement and the Maritime Security Risk Context Statement when undertaking security assessments.

Security Assessments

Offshore Industry Participants are encouraged to use the combined AS/NZS ISO 31000:2009 Risk Management - Principles and Guidelines and HB 167:2006 Security Risk Management to complete their security assessments.

Security assessments should identify security risks and vulnerabilities, demonstrate that the risks have been adequately analysed and evaluated, and determine appropriate preventive and mitigating security strategies for action against unacceptable or intolerable risks.

Security assessments should be drafted in easy to read plain English format ensuring that key elements of the risk management process adopted are clearly identifiable. If security risk assessments are not presented in an easy to read format, the Department's assessment and review processes of transport security programs may be delayed.

Due to the sensitive nature of their contents, security assessments should be protected from unauthorised access, amendment or disclosure at all times.

Strengthening Maritime Security Guide

The new 'Strengthening Maritime Security' guide provides a general introduction and overview of the major provisions of the maritime security legislation. Topics in this guide are cross-referenced with the relevant provisions of the Act and Regulations (references on the sides of each page) to help readers navigate their way through the detail of the Act and the Regulations.

Please note that this guide is not a substitute for the Act and the Regulations. For complete details readers should refer to the relevant sections in the Act and the Regulations [PDF: 2537 KB].

Disclaimer:

This material is provided to assist industry to understand the proposal to include a requirement that the operators of offshore facilities will be required to write security plans for their facilities The documents are written on the best information available at the time. In the event of amendments to the MTOFSA or associated Regulations the documents may be changed and the new versions will be added to the web page.