Course Overview

The Advanced Port Facility Security Officer (PFSO) course is a specialized training program designed for security professionals entrusted with the protection of maritime infrastructure. While basic training covers the fundamentals of the International Ship and Port Facility Security (ISPS) Code, this advanced curriculum focuses on the strategic, operational, and managerial aspects of port security. It bridges the gap between regulatory compliance and real world threat mitigation, preparing officers to handle complex security scenarios ranging from cyber attacks to coordinated physical breaches. This course is essential for those seeking to elevate their capability from simple monitoring to proactive security leadership.

Introduction

Ports are the economic gateways of the world, handling the vast majority of global trade. Consequently, they are high value targets for terrorism, smuggling, and increasingly, cyber warfare. The role of the Port Facility Security Officer (PFSO) has evolved significantly since the inception of the ISPS Code. Today’s PFSO must be part legal expert, part strategist, and part technologist.

This course acknowledges that modern threats are asymmetric and constantly changing. A clipboard and a checklist are no longer sufficient. Participants in this program will learn to design dynamic security systems that can adapt to new risks. We move beyond the “what” of security to the “how” and “why,” ensuring that you can justify your decisions to stakeholders and protect your facility against both physical and digital intrusions.

Learning Objectives

By the end of this advanced training, participants will be able to:

• Conduct comprehensive Threat, Vulnerability, and Risk Assessments (TVRA) using quantitative methodologies.
• Design and execute complex security drills that test the limits of the Port Facility Security Plan (PFSP).
• Integrate physical security measures with modern surveillance and cyber defense systems.
• Manage the interface between port operations and ship security during heightened security levels.
• Develop robust crisis communication protocols for dealing with media and government agencies.
• Identify and mitigate “insider threats” within the port workforce.

Our Unique Training Methodology

We employ a “Red Teaming” approach to learning, forcing participants to think like the adversary.

• The Adversary Mindset: Participants are tasked with finding vulnerabilities in real port blueprints. By learning how to attack a facility, you learn how to better defend it.
• Tabletop Wargaming: We utilize complex, evolving scenarios (e.g., a cyber attack coinciding with a physical bomb threat) to test decision making under extreme pressure.
• Cross-Functional Feedback: Security does not exist in a vacuum. We bring in guest evaluators from logistics and operations to critique how your security measures impact commercial efficiency.

.

Pre-course assessment

To ensure all participants are ready for this advanced level, the following prerequisites apply:

• ISPS Code Baseline Test: A written exam to verify foundational knowledge of the ISPS Code and SOLAS Convention.
• Operational Experience Review: Submission of a brief professional biography detailing at least two years of experience in maritime or industrial security.
• Risk Matrix Exercise: A pre-course assignment where the participant must categorize five hypothetical threats using a standard risk matrix.
• Cyber Awareness Audit: A self assessment aimed at gauging the participant’s current understanding of OT (Operational Technology) versus IT (Information Technology) security.

Course Outline

Module 1: Mastering the ISPS Code and Legal Frameworks

• Deep dive into SOLAS Chapter XI-2 and the ISPS Code Part A and B.
• Understanding the legal jurisdiction between port state control and facility security.
• Liability issues for PFSOs in the event of a security breach.
• Navigating local national maritime legislation and international mandates.

Module 2: Advanced Threat Vulnerability Risk Assessment (TVRA)

• Moving beyond qualitative “high/medium/low” assessments to quantitative scoring.
• Identifying critical assets and single points of failure in port infrastructure.
• Methodologies for assessing the likelihood of terrorist attacks versus criminal activity.
• Continuous dynamic risk assessment during changing political climates.

Module 3: Developing and Maintaining the PFSP

• Writing a Port Facility Security Plan (PFSP) that is actionable, not just a document.
• Procedures for amending the plan without disrupting port operations.
• Handling confidential security information and document control.
• Aligning the PFSP with local emergency response plans.

Module 4: Integrated Security Technology

• Effective deployment of CCTV, fencing, and lighting for maximum coverage.
• Using Automatic Identification Systems (AIS) for waterside monitoring.
• Integrating intrusion detection systems (IDS) with central control rooms.
• Drone usage for aerial surveillance and perimeter patrols.

Module 5: Complex Module – Cyber Security for Maritime Operations

• Understanding the convergence of IT (data) and OT (cranes, gantries, gate systems).
• Identifying potential entry points for hackers in port community systems.
• Developing a “Cyber Response Plan” to isolate infected systems.
• Training staff on basic cyber hygiene (phishing, password security).

Module 6: Waterside Security and Counter-Frogman Techniques

• Securing the difficult “wet side” of the port facility.
• Deployment of sonar and diver detection systems.
• Coordinating with harbor police and coast guard for waterside patrols.
• Procedures for inspecting ship hulls and berths.

Module 7: Dangerous Goods and Cargo Security

• Protocols for handling high consequence dangerous goods (explosives, chemicals).
• Identifying tampering in container seals and cargo units.
• Scanning technologies: X-ray, Gamma ray, and trace detection.
• Secure storage zoning for hazardous materials.

Module 8: Recognizing Weapons and Explosive Devices

• Identification of Improvised Explosive Devices (IEDs) and their components.
• procedures for responding to a “suspicious package” discovery.
• Vehicle search techniques for hidden contraband or weapons.
• Safe evacuation distances and blast mitigation strategies.

Module 9: Access Control and Biometrics

• Implementing multi-factor authentication for restricted areas.
• Managing visitor flows and temporary passes effectively.
• Using biometric data (fingerprint, facial recognition) for dockworker access.
• Procedures for challenging unauthorized persons.

Module 10: Complex Module – Design and Evaluation of Security Drills

• Differentiation between a drill (operational) and an exercise (management).
• Designing realistic scenarios that test specific elements of the PFSP.
• Creating a “Master Events List” (MEL) to guide the exercise flow.
• Debriefing techniques: How to conduct a “Hot Wash” to extract lessons learned without blaming.

Module 11: Crisis Management and Incident Command

• Establishing an Incident Command System (ICS) during a major breach.
• Liaising with police, fire, and medical services.
• Managing the “Golden Hour” immediately following an incident.
• Preserving evidence and the chain of custody for investigators.

Module 12: Security Communication and Media Relations

• Secure communication channels (encrypted radios, codes).
• Handling the press during a security incident.
• Drafting holding statements to control the narrative.
• Social media monitoring during a crisis.

Module 13: Managing the Ship-Port Interface

• Procedures for the Declaration of Security (DoS).
• Handling cruise ships and high volume passenger exchanges.
• Coordinating with the Ship Security Officer (SSO) regarding ship stores and bunkers.
• Managing security during crew changes and shore leave.

Module 14: Personnel Security and Insider Threats

• Vetting and background check procedures for port employees.
• Recognizing behavioral indicators of radicalization or coercion.
• Building a “See Something, Say Something” culture.
• Protecting whistleblowers who report security gaps.

Module 15: Audit, Review, and Quality Control

• Preparing for internal and external security audits.
• Common non-conformities found during ISPS inspections.
• Using Key Performance Indicators (KPIs) to measure security effectiveness.
• Continuous improvement cycles for the security department.

Post-Course Assessment

Certification is awarded based on demonstrated competence, not just attendance.

• PFSP Drafting Project: Participants must draft a specific section of a Security Plan for a theoretical port facility, addressing a unique constraint (e.g., a port located near a public beach).
• The “Red Cell” Simulation: A final exam where the instructor introduces a series of escalating threats. The participant must determine the correct Security Level (1, 2, or 3) and order appropriate countermeasures.
• Drill Design Submission: Create a complete paperwork package for a quarterly security drill, including objectives, timeline, and evaluation sheets.
• Oral Defense: A 15 minute interview where the instructor challenges the participant’s decisions made during the simulation.

Lessons Learned

Throughout this advanced course, several critical themes are reinforced.

Security is a process, not a product. You cannot simply buy security. It requires constant maintenance, testing, and updating. A plan that sits on a shelf is a liability, not an asset.

The chain is only as strong as the weakest link. You can have a million dollar fence, but if a guard is bribed to open the gate, the fence is useless. The human element is always the most critical and vulnerable component of port security.

Facilitation, not just obstruction. The goal of a port is to move cargo. A security officer who stops all movement fails the mission. The Advanced PFSO knows how to secure the flow of trade without strangling the business.

Convergence is key. Physical security and cyber security are no longer separate disciplines. If your cameras are on a network, your physical security is a cyber issue. The modern PFSO must speak the language of IT.

Complacency is the enemy. When nothing happens, people assume security is unnecessary. The PFSO’s hardest job is maintaining high vigilance during long periods of peace. You must be right every single day; the attacker only needs to be right once.