Panama – Implementing and Certifying the ISPS Code

C25048 | 08 September 2025

Notice to: Ship Owners/ Managers/ Operators

The Panama Maritime Authority has revised Merchant Marine Circular MMC-359, which gives guidance on the implementation and certification of the ISPS Code.

The Circular covers:
• Applicability of the ISPS Code
• Responsibility of Operating Companies
• Responsibilities of the Company Security Officer
• Responsibilities of Recognized Security Organizations (RSOs)
• Restrictions of the Recognized Security Organization (RSOs)
• ISPS Verification Report information
• Types of ISPS Verifications
• Types of ISSC
• Major and Minor Failure
• ISPS Certification
• Authorization for Additional ISPS verification
• Transfer of Security Management System Certification (Change of RSOs)
• Notification of Invalidation of ISSC
• Ship out of Service more than six (6) months (re-entry into service)
• Harmonization of ISM/ISPS Certification
• Changes during the validity of the Interim ISSC
• Changes during the validity of the Full Term ISSC
• ISSC Revalidation for Reflagging
• SSAS Exemption Certificate
• Printing Guidance for ISSC Certificate and ISPS Authorization

Points to Note:

Online Application

The online application for ISSC Full Term or ISPS authorization is available at: https://ecertificatespanama.amp.gob.pa. You must register to access and download the User Manual.

Responsibility of the Operating Company

Once the Initial or Renewal Verification has been carried out, the operating company must apply for the Full Term ISSC through the E-Platform.

If the ISPS verification cannot be completed within the established window due to special circumstances, the operating company should apply, before the expiration of the interim ISSC or before the expiration of the due date of the Renewal Verification window, through the E-Platform.

Initial Verification

Once the Initial Verification has been carried out, the operating company must apply for a Full Term ISSC.

If the initial ISPS verification cannot be completed within the established validity of the interim certificate due to special circumstances, the operating company, owners, recognized security organization or legal representatives must apply before the expiration of the interim ISSC through the E-Platform, selecting the ISPS authorizations option, and submit the following documents:
• A statement issued by the RSO indicating the reason for not performing the verification and stating the exact date and place where the ISPS verification will take place.
• Interim ISSC.
• Document of Compliance Certificate.

On receiving the application, the Administration will verify that the vessel maintains a valid Conformance Test Report.

Renewal Verification

The renewal ISPS verification must be completed within 3 months of the expiry date of the existing certificate, and the Operating Company must immediately apply for the ISSC Full Term.

Full Term ISSC

The Full term ISSC is issued by the Panama Maritime Authority (PMA) for a period of up to five (5) years from the date of successful completion of the verification. During this time, the original certificate must remain on board.

The PMA will only issue the Full Term ISSC for initial (new construction or change of flag) or change of Operating Company when the application for an amended Continuous Synopsis Record (CSR) point 12 is received through the E-Platform. Both documents will be issued at the same time.

For the issuance of the International Ship Security Certificate (Full Term ISSC), the vessel must maintain a valid Conformance Test Report in accordance with the provisions of MMC-195.

Short Term ISSC

A short-term certificate is issued:
• when changes affect the ISSC Full Term Certificate.
• where the initial verification is carried out on the same day that the interim certificate expires,
• when the RSO carries out an initial verification after an overdue intermediate verification.

In all cases, the certificate must be identified as “Short Term” and the validity is not to exceed one (1) month.

Interim ISSC

An interim ISSC will only be issued if the RSO has previously verified that the vessel complies with the provisions of the ISPS Code A/19.4, and for the following purposes:
• A vessel without a certificate, on delivery or before its entry or re-entry into service.
• For a Change of Flag.
• When a Company newly commences management of the vessel.

Conditional Certificate

In exceptional cases, as evaluated by the Maritime Ships Security Department on a case-by-case basis, the Administration will authorize the RSO to issue a Conditional ISPS Certificate provided it does not represent any danger to the vessel, or person on board and without presenting an unreasonable threat of harm to the environment.

The Conditional Certificate is issued with a validity not exceeding ninety (90) days and is identified by the nomenclature “Conditional Certificate”. The RSO should send a copy of the certificate to: isps@amp.gob.pa and ro-monitoringfees@segumar.com.

Major and Minor Failures

The security equipment specified in the Ship Security Plan (SSP) must always remain operational. The RSO is to verify that the Security Alert System (SSAS) and LRIT equipment are working properly. Their non-functioning is considered a major failure. The vessel is to maintain a valid Conformance Test Report on board per MMC-133 and MMC-195.

Any Major Failure must be reported immediately to:
• PMA (isps@amp.gob.pa)
• Port Facility Security Officer (PFSO) and
• The competent authorities of any relevant coastal State(s)

When a major failure is found, immediate action is required to restore compliance, and the Major Failure must be downgraded before departure. The RSO will endorse the ISSC for intermediate or renewal verification. For initial verification, the RSO must request authorization to issue a Conditional Certificate.

An additional verification must be carried out within an agreed period to verify the effective implementation of corrective actions.

Minor failures must be reported by the RSO without delay to PMA (isps@amp.gob.pa), and the report must include:
• details of equivalent alternative security measures the ship is applying until the failure or suspension is rectified; and
• an action plan specifying the timing of any repair or replacement.

Authorization for an additional ISPS Verification

It is necessary to request an additional ISPS verification authorization through the E-Platform for:
• For a single voyage
• To close non-conformities
• SSAS Malfunction authorization
• For SSAS replacement equipment

SSAS Exemption Certificate

The SSAS exemption must be requested as per MMC-123.

Invalidation of ISSC

An existing certificate shall become invalid when, but not limited to:
• A vessel has not undergone the periodical audit (initial, intermediate or renewal verification).
• A company ceases managing the ship.
• A ship changes its Flag.
• An ISSC is issued to replace an interim ISSC.
• A company requests withdrawal of the ship from the ISPS Register.
• A part of the SSP, which requires approval upon amendment, has been amended without approval.
• Corrective actions for non-compliance set out in the audit have not been completed within the agreed period of time.
• A vessel is not operated in compliance with the rule requirements.
• The vessel fails to maintain its Ship Security Plan in compliance with the requirements of the ISPS Code.
• Any other notification of invalidation described by the RSO.

Act now

Ship Owners, Managers, Operators are to take note of the guidance provided in MMC-359 and be guided accordingly.