91�鶹��Ʒ

Nine in the morning, chart room. The auditor sets down a bag, accepts a coffee and opens the interview with a sentence every master knows: "Show me your last non-conformity report and what you did with it." What happens in the next ten minutes — a record retrieved in three clicks, or a chief officer digging through a binder while the silence stretches — says more about the safety management system than the 200 pages of the manual. An internal ISM audit is won or lost well before the day of the visit.

That is precisely what this annual exercise is for: finding your own gaps before the flag administration, the recognised organisation acting on its behalf or a Port State Control officer finds them for you, with far heavier consequences. A company that treats the internal ISM audit as a full dress rehearsal — same questions, same evidence, same standard — walks into the external verification of its Safety Management Certificate without nerves.

The checklist below follows the areas auditors examine in practice, in the order they examine them: documentation, bridge, engine room, deck, crew, then the non-conformity loop. It reflects what we see working in the best-prepared companies. For the general regulatory framework — origins of the Code, DOC, SMC, the sixteen elements — our reference article on the ISM Code applied on board covers the obligations element by element; this one concentrates on the practical preparation of the internal audit itself.

What is an internal ISM audit, and is it mandatory?

Yes, it is mandatory: element 12 of the ISM Code requires the company to carry out internal safety audits, on board and ashore, at intervals not exceeding twelve months. Its purpose is to verify that what the ship and the company actually do matches the documented safety management system, and to feed the management review. Its findings flow straight into the external verifications: the SMC renewal every five years, the intermediate verification between the second and third anniversary dates, and the annual verification of the company's DOC.

The nuance that changes everything: the external audit samples, the internal audit can look at everything. It is your one opportunity to find the gaps yourself, deal with them at your own pace and face the external auditor with corrective actions already closed out — the most comfortable position there is. A complacent internal audit, rushed through in two hours to tick the box, is the worst possible preparation: it validates a system that will not hold up under an outside eye.

One point often missed: the internal auditor must be independent of the area being audited, unless the size of the company makes that impracticable. A superintendent auditing a colleague's vessels, a fleet master seconded to another ship, or an external consultant — all three arrangements work, provided the auditor is trained in audit technique and knows the operation.

The preparation countdown: start at D-90

The companies that suffer their audits are the ones that discover them three weeks out. The ones that sail through them run a stable countdown, year after year.

Half of this table disappears the day records are created as the work happens, in a maritime CMMS: the backlog is visible at all times, certificate due dates surface on their own, the history is already up to date. Preparation stops being a documentary sprint and becomes what it should be: a physical inspection and a briefing.

Area 1 — SMS documentation and the link with the company

This is where the auditor starts, because everything else hangs off it.

• Manual version: is the version distributed on board the version in force? Are amendments inserted, is the revision list maintained? An obsolete manual on board is an immediate non-conformity — and a frequent one.
• Procedures versus reality: do the procedures describe what the crew actually does, or the organisation of three years ago? The most common gap fits in one sentence: procedures written for the previous audit and never revised after a reorganisation.
• Designated Person Ashore (DPA): identified by name, known to the crew, reachable — the auditor will ask a rating who the DPA is and how to contact them. Have evidence of recent ship-shore communications with the DPA to hand.
• Master's responsibility: is the statement of overriding authority in the manual, and has the master documented a periodic review of the SMS with deficiencies reported to the company?
• Document control: are the forms in use on board the current forms, with obsolete documents withdrawn?

Area 2 — The bridge

Here the auditor cross-checks three sources: the procedures, the logbooks and the people.

• Bridge logbooks: kept up to date, no blank pages or uncountersigned corrections, consistent with the engine room log and the declared rest hours. Inconsistencies between registers are among the easiest findings for any auditor.
• Charts and publications: corrected up to date, ECDIS licences valid, passage plan matching the voyage planning procedure in the SMS.
• Master's orders: standing orders and night orders signed by every officer.
• SOLAS drills: abandon ship, fire, man overboard, emergency steering — carried out at the prescribed frequencies, recorded with date, participants, scenario and lessons learned. A drill register that never records a single improvement point does not look credible: nobody runs every drill perfectly.
• Familiarisation: every recently joined officer must be able to produce a familiarisation checklist signed within the timescales set by your SMS.

Area 3 — The engine room, the most closely examined part of the internal ISM audit

Element 10 of the Code requires the ship and its equipment to be maintained in conformity with the relevant rules; statistically it is where most findings land, in internal audits and external verifications alike. The auditor will ask for four things, always the same four.

The four pieces of evidence expected

• The maintenance plan: covering all equipment, with intervals that can be justified (manufacturer, classification society, experience) — the core of a PMS meeting classification expectations.
• The work records: every job with its date, its signatory, the readings taken and the parts consumed. A complete, searchable maintenance history answers in minutes; a paper binder rarely does, and never in front of the auditor.
• The treatment of critical equipment: chapter 10.3 requires identifying equipment whose sudden failure may result in a hazardous situation, and applying specific measures — regular testing of standby arrangements, redundancies verified. Keep the list current and be able to justify it.
• Consistency between failures and actions: a breakdown entered in the engine room log must reappear as a corrective work order and, if it recurs, as a root cause analysis and an adjustment to the plan. That chain is exactly what the auditor traces.

The complementary checks

• Engine room logbook: kept, signed, consistent with the work orders — our article on the engine room logbook and what it proves in an audit details what belongs in it.
• Critical spare parts: minimum stock defined, inventory current, gaps between book stock and physical stock explained.
• Backlog: overdue work orders on critical equipment must be known, justified and rescheduled — an acknowledged, documented delay is not a non-conformity; a delay the auditor discovers is.

Area 4 — Deck and operations

• Life-saving and fire-fighting appliances: SOLAS weekly and monthly inspections recorded, liferaft servicing and extinguisher inspections within date, rescue boat tested.
• Permits to work: hot work, work aloft, electrical isolation — the auditor will want to see completed permits, not just the blank form. The subject is covered in our article on permits to work and isolation on board.
• Enclosed spaces: entry procedure compliant, multi-gas detector calibrated with certificate, enclosed space rescue drill recorded.
• Lifting appliances: registers for cranes, davits and winches, test certificates, slings and shackles marked and inspected.
• Pollution prevention: oil record book kept without gaps, SOPEP current with valid contact lists, garbage management in line with MARPOL Annex V.

Area 5 — The crew: certificates, familiarisation, rest hours

Element 6 of the Code requires ships manned with qualified, certificated and medically fit seafarers. The verification is documentary first, human second.

• STCW certificates and endorsements: validity of every document, match with the safe manning document, flag endorsements present. The full method is in our guide to crew certificate management under STCW and MLC 2006.
• Medical fitness: certificates in date for everyone on board, no exceptions.
• Rest hours: MLC 2006 records kept and — a point auditors check systematically — consistent with the logbooks: a 3 a.m. arrival manoeuvre must show up in the rest hour sheets. Our article on crew planning and MLC rest hours shows how to make that tracking reliable.
• Familiarisation and working language: files signed for every joining, working language defined and genuinely shared.
• Interviews: the auditor will question the crew — who is the DPA, what to do in a blackout, where is the enclosed space entry procedure. That is what the D-7 briefing is for: not learning answers by heart, but making sure everyone knows where to find the information.

A crew module that centralises certificates, medicals and due dates with alerts at 90, 60 and 30 days turns this often laborious area into a five-minute extract.

Non-conformities: the best evidence that the system is alive

It is the paradox companies discover at their first audit: a ship that never reports a single non-conformity worries the auditor more than it reassures. Zero non-conformities does not mean zero problems; it means problems are not being reported — and therefore that element 9 of the Code, reports of non-conformities, analysis and corrective action, is not being applied.

Prepare instead two or three cases documented end to end: detection and initial report, root cause analysis, corrective action, verification of effectiveness a few months later, and close-out. A lived example — a recurring pump failure traced back to a misalignment, with the maintenance job plan amended as a result — fills twenty minutes of interview usefully and demonstrates better than any speech that the improvement loop works. Masters who dread "showing their problems" have it exactly backwards: in an ISM audit, it is the problems you have dealt with that make the strong files.

How does the audit day unfold?

An internal ISM audit on board follows a standard sequence: an opening meeting with the master and heads of department (scope, method, timetable), a documentary review, a physical walk-through of the vessel with spot checks, individual interviews, then a closing meeting where the auditor presents the findings. Allow a full day for a cargo ship, half a day for a small unit.

Three pieces of hard-won advice for the ship. Do not screen the crew: let the auditor talk directly to ratings and engineers — it is part of the exercise, and a master who answers on behalf of the crew raises suspicion. Do not contest a factual finding in the meeting: note it, fix it; the useful discussion is about how the finding is graded, not whether it exists. Finally, demand from the internal audit the same formal rigour as an external one: findings in writing, graded, with deadlines — a vague internal audit report produces a vague preparation.

Pooling the preparation with Port State Control

Deficiencies raised during a Port State Control inspection feed the ISM audit directly — an SMS-related deficiency can even trigger an additional audit — and the reverse is equally true: the concentrated inspection campaigns run by the Paris MoU, Tokyo MoU or the USCG announce the themes your internal auditor should probe first. The records requested are largely the same: certificates, maintenance of safety equipment, drills, rest hours. Preparing both exercises from the same base of records avoids doing the work twice and guarantees consistency — because nothing is worse than two files that contradict each other.

Turning preparation into routine, not a sprint

Everything above comes down to one idea: audit preparation stops being an event the day records are created as the work is done. The job logged on board the moment it is finished — even offline, synchronising at the port call —, the certificate that raises its own alert as the due date approaches, the non-conformity tracked from the moment it is raised with its corrective action workflow: that is exactly what a maritime CMMS in daily use produces, and the reason ships running one face the audit without a frantic week of preparation. The digital life cycle of the work order and our complete maritime CMMS guide set out that machinery in detail.

Key takeaways

The internal ISM audit is not an annual formality but the dress rehearsal for external verification — and your only chance to find your gaps before a third party does. Preparation runs area by area: SMS documentation current and matching the reality on board, bridge logbooks consistent, maintenance traced with visible treatment of critical equipment, deck and life-saving appliances inspected within date, crew certificated, rested and familiarised. And a non-conformity loop that lives: that, more than anything else, is what proves to the auditor that the system works.

The difference between a company that endures its audits and one that sails through them lies in the freshness of the records. When the maintenance history, ship and crew certificates and non-conformity reports are kept as the work happens in a maritime CMMS, preparing an internal ISM audit shrinks to a self-inspection and a briefing. 91�鶹��Ʒ is designed in Marseille by seafarers and deployed on more than 700 vessels, with a certificates module that alerts at 90, 60 and 30 days and a mobile app that works offline. Request a demonstration before your next audit, or take a look at our plans.