COP_2023_V7_pages

17.3.2 The MASS should be provided with a MASS Security Alert System.
17.3.3 The MASS Security Alert System, when activated, should transmit a MASS-to-shore security alert to a competent
authority designated by the Administration, identifying the MASS, its location and indicating that the security of
the MASS has been compromised.
17.3.4 The MASS Security Alert System should be capable of being activated from the control station immediately by
personnel charged with the MASS’s navigation or supervision.
17.3.5 There should be protection from third-party interference with MASS communications.
17.3.6 There should be a mechanism by which, in the event of third party communications interception, either the
command of the MASS’s shore-based personnel may reassume communications or, alternatively, shut down the
MASS’s operations, where it is thought safe to do so by the Master.
17.3.7 There should also be a mechanism for safely shutting MASS communications down when the security of the
control station centre has been compromised.
17.3.8 The MASS hull/chassis must have a means of indicating:
n That it is certified as compliant with the security requirements of the issuing authority;
n The means by which the MASS’s Remote Control Centre may be contacted;
n Any other practical security-related information.
17.3.9 The MASS Remote Control Station should be secure. Reference should be made to the relevant guidance and
regulations of ensuring the security of land facilities.
17.4 MASS OWNER/OPERATOR OBLIGATIONS
17.4.1 The MASS Owner/Operator should undertake a MASS security assessment. The MASS security assessment
should include a security survey of both the MASS hull itself but also the MASS Control Station. It must include:
n Identification of existing security measures, procedures and operations in respect of both physical and cyber
intrusion;
n Identification and evaluation of critical MASS and shore-based operations that it is important to protect;
n Identification of possible threats, both physical and cyber, to the key MASS operations and the likelihood
of the occurrence in order to prioritise security measures;
n Identification of weakness, including human factors, in the infrastructure, policies and procedures.
17.4.2 The MASS security assessment should be documented, reviewed, accepted and retained by the MASS
Owner/Operating Company.
134
MASS UK Industry Conduct Principles and Code of Practice Version 7