The International Safety Management (ISM) Code audit is one of the more comprehensive regulatory checks a shipping company faces — evaluating not just a single vessel’s condition, but the entire management system behind how safety is actually run across a fleet. Passing without findings takes genuine, sustained practice, not last-minute preparation.
What the ISM Code Actually Requires
The ISM Code, mandatory under SOLAS for most commercial vessel types, requires companies to establish a documented Safety Management System (SMS) covering safety and environmental protection policy, defined responsibilities and authority, procedures for reporting accidents and non-conformities, emergency preparedness, and a system of internal audits and management review. Compliance is verified through two linked certification levels:
- Document of Compliance (DOC) — issued to the company (shore-based management) confirming its overall SMS meets ISM requirements
- Safety Management Certificate (SMC) — issued to each individual vessel confirming it operates in accordance with the approved SMS
Both require periodic external audits (by the flag state or a recognized organization such as a classification society acting under delegated authority) to maintain validity.
Common Categories of Audit Findings
Understanding where audits typically identify gaps helps target preparation effectively:
Non-conformity between documented procedures and actual practice. This is consistently the single most common finding category — an SMS that reads well on paper but doesn’t reflect what crew actually do in practice. Auditors specifically probe for this gap through crew interviews and direct observation, not just document review.
Incomplete or superficial near-miss and incident reporting. A genuinely functioning safety culture generates regular near-miss reports as part of continuous improvement — an unusually low or suspiciously clean incident/near-miss reporting history is itself often treated as a red flag by experienced auditors, suggesting underreporting rather than genuinely flawless operations.
Inadequate internal audit follow-up. The ISM Code specifically requires internal audits and management review as part of the SMS — external auditors commonly check whether previous internal audit findings were genuinely tracked to closure, not just documented and forgotten.
Crew unfamiliarity with emergency procedures during drills. As with class surveys, auditors frequently ask crew to demonstrate specific emergency procedures live — hesitation or confusion during these demonstrations is a recurring and avoidable finding.
Weak evidence of management review and continuous improvement. ISM specifically requires shore-based company management to conduct periodic review of the SMS’s effectiveness — audits look for genuine evidence of this review driving actual changes, not just a scheduled meeting with minimal substantive follow-through.
What Genuinely Improves Audit Outcomes
Treat the SMS as a living operational tool, not a compliance document. Systems that are actually referenced and used day-to-day by crew (rather than filed away and consulted only before an audit) naturally perform better, because the gap between documented procedure and actual practice — the most common finding category — simply doesn’t exist in the first place.
Encourage genuine near-miss reporting culture. Counterintuitively, a healthy volume of near-miss and non-conformity reports, with visible evidence of follow-up action, tends to reflect better on a genuine safety culture than an unrealistically clean record — auditors are generally experienced enough to recognize the difference.
Close internal audit findings promptly and document the closure clearly. This single practice addresses one of the most common external audit gaps directly, and it’s entirely within a company’s control regardless of external circumstances.
Conduct realistic, unannounced drills periodically, rather than only well-rehearsed scheduled drills — crew genuinely comfortable with emergency procedures under realistic conditions perform far better during actual external audit demonstrations than crew who’ve only practiced a specific, anticipated scenario.
Ensure shore management review is substantive, not procedural. Management review meetings that generate genuine, tracked action items (and follow through on them) provide auditors clear evidence the SMS is a genuinely functioning improvement system, not just a certification requirement being satisfied.
A Practical Pre-Audit Checklist
- Are all previous internal and external audit findings closed out with clear, documented evidence, not just marked “resolved” without support?
- Does our near-miss and incident reporting volume and quality reflect a genuinely active safety culture, rather than suspiciously minimal reporting?
- Have we conducted realistic, not just scheduled, emergency drills recently, with crew comfortable demonstrating procedures without hesitation?
- Is there genuine, substantive evidence of management review driving real SMS changes over the past audit cycle?
- Would a crew interview, conducted independently of management, describe practices that genuinely match what’s documented in the SMS?
ISM Code audit requirements and procedures vary somewhat depending on the flag state and recognized organization conducting the audit. Always confirm current requirements directly with your flag state or classification society acting under delegated authority.