ISPS and Port Security Act
A safe port requires clear agreements and effective security measures. The ISPS Code helps ships and port facilities minimise security risks. Find out what the rules mean for your organisation or vessel, when ISPS certification is required, and where to go for information or support.
Security level 1
Security level 1 means that the standard security measures apply. In the event of an increased threat, the security level may be raised to Level 2 or Level 3. Port facilities and ships must then implement additional security measures.


What is ISPS?
The International Ship and Port Facility Security Code (ISPS Code) sets out international requirements for the security of ships and port facilities. The Code was developed by the International Maritime Organization (IMO) to reduce the risk of security incidents in ports and on board ships.
In the CNB area, the Harbour Master, in the role of Port Security Officer (PSO), is responsible on behalf of the mayor for coordination port security.
When is a ISPS-certificering mandatory?
A port facility must be ISPS-certified if it receives one or more of the following types of ships:
- Cargo ships with a gross tonnage of 500 or more engaged in international voyages.
- Passenger ships engaged in international voyages.
- Self-propelled mobile offshore drilling units.
With ISPS certification, you comply with the statutory security requirements set out in the International Ship and Port Facility Security (ISPS) Code, European Regulation (EC) No 725/2004 and the Dutch Port Security Act.
Does a facility only occasionally receive a ship that is subject to ISPS requirements? In that case, temporary exemption can be requested via the MOBI application. The application must be submitted no later than four weeks before the ship's scheduled arrival.


Legislation and information
On the following pages, you find more information about ISPS-related legislation:
- IMO (International Maritime Organization)
- Europese verordening 725/2004
- Havenbeveiligingswet

Security levels
Security Level 1
Normal situation. The standard security measures are in force.
Security Level 2
Increased threat level. Additional security measures are implemented.
Security Level 3
Specific or imminent threat. Maximum security measures are implemented.
For port facilities, the security levels are set by the national government. For ships, they are determined by the flag state or port state. When the security level changes, Port of Amsterdam informs the Port Facility Security Officers (PFSOs) via MOBI.
Risk assessment and security plan
For port facilities receiving ships subject to ISPS requirements, a risk assessment is carried out. Based on this assessment, the facility draws up a Port Facility Security Plan (PFSP), setting out the required security measures.
The ISPS assessor reviews these plans and advises the Port Security Officer. For certification, annual reviews and amendments, Port of Amsterdam (CNB) uses the MOBI application (Methodology for an Objective Security Assessment). Use the button below to find more information about MOBI and how to apply for ISPS certification step by step.
Agents of ships subject to the ISPS Code are required to submit the required Ship Security Pre-Arrival Information no later than 24 hours before arrival via the security section of Portbase.

Cyber incident reporting point
Companies that are subject to the Dutch Port Security Act, Regulation (EC) No 725/2004, or that hold an ISPS port security certificate are required to report security incidents.
Reporting point
Do the criteria indicate that you are dealing with a cyber incident? If so, report it.
If every second counts: call 112
Port of Amsterdam reporting point +31 20 5234600, option 2
Reporting the incident enables the Harbour Master and security partners to determine whether additional measures are required to support safety and security in the port area. Use the button below to find more information about cyber security.
Do you have questions?
Do you have a functional question about using the MOBI application? Please contact the MOBI functional administrator at: functioneel_beheer_DHM@portofamsterdam.com.
Do you have a question about the certification process or the annual review? Please contact the ISPS assessors on +31 20 523 46 00 (option 2) or ispsauditor@portofamsterdam.com.