Who it applies to
Under SOLAS Chapter IX the Code applies to passenger ships, including passenger high-speed craft, at any tonnage, and to oil tankers, chemical tankers, gas carriers, bulk carriers, cargo high-speed craft, other cargo ships and mobile offshore drilling units of 500 gross tonnage and upwards, on international voyages. It was phased in from 1 July 1998 and completed on 1 July 2002, so every ship in scope has now been operating under it for more than two decades. That matters when a company argues that a gap is new. In practice it almost never is.
The architecture: DOC, SMC and the SMS
The Code operates through paired certification. The company holds a Document of Compliance for each ship type it operates, valid for up to five years and verified annually, within three months before or after each anniversary date. Each ship carries a Safety Management Certificate, also valid for up to five years, with at least one intermediate verification between the second and third anniversary date. New companies and new ships work under an Interim DOC, valid for up to twelve months, and an Interim SMC, valid for up to six months. Pull the thread of either certificate and you reach the same object: the SMS. That is the documented system covering the safety and environmental protection policy, procedures for key shipboard operations, emergency preparedness, reporting and analysis of nonconformities and accidents, maintenance of the ship and equipment, and defined levels of authority and lines of communication. Two roles anchor the system. The Designated Person Ashore is the required direct link between the ship and the highest level of management, with explicit access and authority under section 4. And section 5 preserves the master's overriding authority for safety and pollution prevention, in writing, precisely so that no commercial instruction can override it.
The obligations that bite
The Code's teeth are in its verification loops. Section 12.1 requires internal audits on board and ashore at intervals not exceeding twelve months. In exceptional circumstances the twelve month interval may be exceeded by not more than three months. Then management reviews. Identification of the risks in shipboard operations and the safeguards against them. Drills and exercises that prepare crews for the emergency scenarios the company has identified. And a nonconformity system that requires causes to be analysed and corrective action tracked to closure. External auditors, and casualty investigators, test whether the loops actually turn. The Code, as amended by resolution MSC.273(85), defines a major nonconformity as an identifiable deviation posing a serious threat to personnel or the ship, or a serious risk to the environment, requiring immediate corrective action, or the lack of effective and systematic implementation of a requirement of the Code. Note the "or". Systemic failure to implement a requirement is a major nonconformity in its own right, without any separate finding of immediate danger. A major nonconformity can lead to withdrawal of the Safety Management Certificate. At company level, withdrawal of the Document of Compliance invalidates the SMC of every ship operating under it. Few compliance documents in shipping carry that kind of leverage.
Living system versus paper system
The observable difference between a working SMS and a paper one is who authored reality. In a working system the procedures describe what the crew genuinely does, they are amended when the ship finds a better way, and near misses get reported because reporting is answered with fixes rather than blame. In a paper system the manuals describe an imaginary ship, the audit findings repeat annually, and the near miss log is suspiciously thin. PSC officers and vetting inspectors probe for the difference early. They ask the third engineer how a permit to work is raised, or what happens after a near miss report. The answer, fluent or rehearsed, dates the whole system.
Why it is the keystone code
Nearly every other regime now routes through the ISM system. Cyber risk has had to be addressed inside the SMS since the first annual DOC verification after 1 January 2021, under IMO resolution MSC.428(98). MLC procedures live alongside it. Environmental compliance depends on its maintenance and reporting loops. And company performance under the ISM Code feeds directly into Port State Control targeting for the whole fleet. Strengthening the SMS is therefore the highest leverage compliance investment available to an operator. It is the system all the other systems stand on.