Attacks on Ships
General Guidance
While governments, flag states and
coastal states must do all they can, the shipping industry also has a role to
play, particularly in ensuring that crew, passengers and vessels are protected
against attack. The United Kingdom recently updated its Marine Guidance Note on
preventing acts of piracy. This note, intended for ship owners and masters and
crews of ships, stresses the importance of taking action to deter attacks and
advises on how to deal with them if they occur. It is available on the World
Wide Web at www.shipping.detr.gov.uk/mgn/mgn075/index.htm
The International Chamber of Shipping (ICS) has recently updated its guidance notes on Piracy and Armed Robbery and The Baltic and International Maritime Council (BIMCO) has produced a set of Ship Security Guidelines. These publications are available from those respective organisations.
Preparations before entering a risk area
Precautions on operating in a risk area
Reactions to an imminent attack
IMO Directives for Maritime Rescue Co-ordination Centres:
General Guidance
All the guidance is consistent. Ship owners should, where relevant : -
advise masters as to the high-risk sea areas and ports and the nature of any threat;
provide advice regarding securing ships’ equipment;
ensure that security watches, especially at night, can be enhanced when a vessel is in waters, or at anchor off ports, where attacks occur;
consider providing powerful lighting, low-light binoculars, sophisticated surveillance and detection equipment, and alarm systems on vulnerable positions and lookout points including the use of a small yacht radar, fitted in such a way to ensure complete coverage of the stern, not obscured by the radar shadow of the ship itself;
verify the bona fides of any security or crew personnel they engage locally, as thieves have sometimes infiltrated themselves on board in advance to act as accomplices during a later attack;
so far as is possible, plan the stowage of containers containing valuables so that they are door-to-door and in tiers;
try to control the dissemination of information on cargo stowage.
Other recommendations in the guidance, for ships operating in piracy danger areas, include
![]()
Preparations before entering a risk area
have a well practiced anti-attack plan, covering measures for early detection of a possible attack, non-aggressive crew responses when an attack is under way, radio and alarm procedures, and the reports to be made after a successful or attempted attack;
inform crew members of the anti-attack plan and hold training exercises to ensure that they are fully briefed on the actions to take in the event of an attack.
identify and establish controlled secure areas, difficult for attackers to penetrate, as a sanctuary for the crew. If large numbers of armed robbers succeed in boarding the ship, it may be essential for crew members to retreat to a secure area or areas. Depending upon the construction of the accommodation and the extent to which areas can be effectively sealed off, the secure area may be established in the accommodation as a whole, or in more restricted parts around the bridge and inside the engine room. Provision should be made, however, for escape during a fire or other emergency.
establish a drill for regular two-way communication between the deck watch and the bridge and actions to take in an emergency.
![]()
Precautions on operating in a risk area
adjust routing away from danger areas, if possible, and employ measures such as slow steaming or longer routing to delay anchoring when due to arrive at anchorages during darkness in high risk areas;
limit, record (including photography) and control access to ships when in port and at anchor, search ships before leaving ports and restrict information on the nature and location of cargoes on board;
be vigilant - the majority of attacks will be deterred if the robbers are aware that they have been observed, and that the crew has been alerted and is prepared to resist attempts to board. Ensure that crew members are seen to be constantly moving around the ship, making random rather than predictable patrols;
maintain a 24 hour visual and security watch - including short range radar surveillance of the waters around the ship. Keep a special look-out for small boats and fishing boats which are difficult to observe on radar. In piracy "hotspots", discourage the crew from trading with locals using small craft which may approach the ship;
strengthen night watches - especially around the stern of the vessel and particularly between the hours of 0100 and 0600 when most attacks occur, with continuous patrols linked by "walkie-talkie" to the bridge. If possible, allocate an additional officer to assist the normal bridge watch-keepers at night, to provide a dedicated radar and visual watch for small craft which might attempt to manoeuvre alongside, and allow the watch-keepers to concentrate on normal navigational duties;
seal off means of access to the ship - fit rat guards to mooring lines, fit hawse pipe plates, lock doors and hatches etc. While taking due account of the need for escape in the event of fire or other emergency, so far as possible, seal off all means of access to the accommodation area and lock windows and doors of crew accommodation areas. Blocking access between the aft deck and the crew quarters is particularly important.
establish radio contact - and agree emergency signals specifically for pirate attacks with crew, shore authorities etc;
use available lighting - deck and over-side lights, particularly at the bow and stern, can illuminate the deck and the waters beyond and to dazzle potential borders. Searchlights should be available on the bridge wings and torches should be carried by the security patrols to identify suspicious craft. Such additional lighting should not however be so bright as to obscure navigation lights or interfere with the safe navigation of other vessels;
keep water hose and other equipment - which may be used to repel potential borders - readily available. Keep a constant pressure of water in the hoses. In danger areas keep the deck wash pump in operation at all times - spray water over the rear deck where it is easiest for the attackers to board;
reduce opportunities for theft - remove all portable equipment from the deck; maintain a constant radio watch with shore or naval authorities in danger areas, and on all distress and safety frequencies;
report suspicious movements to the Rescue Co-ordination Centre (RCC) for the area.
![]()
Reactions to an imminent attack
if under way, deter an attack by evasive manoeuvring (by heavy wheel movements in waters where it is safe to do so), increasing speed;
consider the use of high-pressure water hoses;
transmit a danger message to warn ships in the vicinity if an attack is imminent or under way, broadcasting an Urgency or Distress Message (if necessary, on a previously secreted VHF transceiver), if it can be done safely;
avoid the use of firearms or other aggressive behaviour which might provoke violence by the attackers; and comply with their demands if this is the only safe option;
if boarded try to maintain control of navigation without endangering life.
![]()
Follow up
make a rapid and comprehensive report of an attack to the nearest RCC, to the responsible (in territorial waters) or nearest (on the high seas) coastal State, as well as to the ship’s owners and the flag state;
make a full report following resolution of the incident;
co-operate with any subsequent investigation.
![]()
IMO Directives for Maritime Rescue Co-ordination Centres (MRCCs) - /Circ.967 6 June 2000
At its seventy-second session (17 to 26 May 2000), IMO’s Maritime Safety Committee approved Directives for Maritime Rescue Co-ordination Centres (MRCCs), which, in most incidents of piracy and armed robbery against ships, are the first point of contact between the ship and coastal authorities concerned, following the Master's decision to request assistance. The text of the Directives, addressed to national authorities, follows:
1. General
While all Governments may grant their maritime rescue co-ordination centre(s) (MRCC) powers in addition to those of search and rescue (SAR) in applying the national regulations and instructions, piracy and armed robbery against ships is the only one of these extensions that forms part of the IMO regulations. In this way, the MRCC are incorporated in the organization the Governments have to set up to deal with piracy and armed robbery against ships, which may occur suddenly in the zones not considered at risk from this phenomenon.
For these reasons, this circular has been drawn up specially for the MRCC taking into consideration their own situations and normal activities, which are not specially geared towards problems of piracy or armed robbery. It is included in the overall provision based on circulars MSC/Circ.622/Rev. I, geared towards Governments, and MSC/Circ.623/Rev.l, geared towards shipping companies, masters and crews.
Until the Governments give the MRCC additional powers that go beyond the IMO regulations, this circular could be sufficient as operating documentation for the MRCC within the field of piracy and armed robbery against ships.
![]()
2.
Preparatory measures
The heads of the MRCC should:
.1 check that the MRCC is in possession of the appropriate national instructions (and if not, ask to receive these) with regard to what authority is responsible for the operational application of the urgency plans (counter-measures), with a view to report immediately to that authority (referred to below as the Security Forces Authority, or SFA), in the event of receiving an alert signal from a ship under attack or threat of attack:
.2 reach a joint decision with the SFA on a fast and effective method of communications to be used between the MRCC and the authority in question:
.3 if appropriate and feasible, repeat points .1 and .2 above for each State whose coastal waters are included in the search and rescue region (SRR) of the MRCC (and thus have not a proper MRCC);
.4 determine the most effective way of issuing an attack warning for other ships in the vicinity using appropriate systems and procedures of Maritime Safety Information (MSI): and
.5 train the MRCC personnel or issue them with instructions:
.5.1 on the phenomenon of piracy and armed robbery in general. and in the SRR covered by the MRCC in particular~
.5.2 on the messages and communications regarding attacks or threats of attack that the MRCC might receive: and
.5.3 on the reports to be sent in the event of alert and all other action to be taken (see section 3).
![]()
3. Operating measures
The messages of alert received from ships under attack or threatened with attack should be in accordance with the format described in appendix I. If appropriate, the ships may use the distress procedure existing in the GMDSS elements. On receiving a message of this kind (even if not in the appropriate format), the MRCC should take the following action:
3.1 Action regarding the Security Force Authority (SFA) and/or the other MRCC, depending on the position of the attack or threat of attack
.1 If the position is within the SRR of the MRCC, the MRCC should immediately inform the SFA of its country, using the method of communications set out in 2.2. In addition, if the position is close to the boundaries of the SRR, the MRCC should also inform the appropriate neighbouring MRCC:
.2 If the position falls within the SRR of the MRCC but is in the territorial waters (or internal waterways) of another State or in a maritime zone where this latter State is concerned over acts of piracy and armed robber) against ships, the MRCC should pass the information to its usual point of contact in this latter State: and
.3 If the situation is outside the SRR of the MRCC, the MRCC should relay the alert to the appropriate MRCC using the normal methods of communication among MRCC for search and rescue operations.
3.2 Action to be taken concerning the ship under attack
3.2.1 The MRCC alerted should immediately:
.1 acknowledge receipt of the message of alert: and
.2 if necessary, advise the master or crew, as described in appendix 2.
3.2.2 When the information received in the initial message of alert, or later, indicates that the ship or a person on board it require immediate assistance, the MRCC should carry out a normal SAR operation, as soon as such an operation is possible.
3.2.3 If the ship covertly sends a message, care must be taken in any communications sent back to the ship so as not to warn the pirates or armed robbers.
3.3 Action concerning other ships
3.3.1 On receiving a message of alert or any other information concerning a threat of attack (from the SFA or another MRCC. for example), the MRCC should ask the NAVAREA co-coordinator (or any other competent authority in accordance with local arrangements) to send out a warning through the appropriate MSI network (NAVTEX or SafetyNET) and the other broadcasting networks for warnings to shipping, if these exist.
3.3.2 The other ships shall offer their assistance (in the normal way, as described in chapter V of the SOLAS Convention) in the situation described in 3.2.2 above (SAR operation).
3.4 Additional action
If laid down in the national regulations and instructions, the MRCC may also have to report directly:
- to the national authority empowered to deal with piracy and armed robbery against ships, if this is different from the SFA referred to above; and
- to the person or body entrusted with the inquiries into cases of piracy and armed robbery against ships.
![]()
4. Additional Observations
4.1 Bilateral agreements between States may be reached for the application of co-operation procedures that might differ from those set out above.
4.2 Although they are generally covered by the definition of piracy, unlawful acts which threaten the safety of ships and the security of their passengers and crews (that is, acts of terrorism) are a different problem for the IMO to that of piracy and armed robbery against ships. However, in the absence of special instructions, the MRCC may apply these directives to such unlawful acts.
4.3 Emphasis should be made that the situation described in the first sentence of point 3.1.3 concerns every MRCC in the world (not only those located in or close to zones at risk). If the MRCC that receives a message of alert from a distant location is unable to transfer this message to an appropriate MRCC, this should at least attempt to apply 3.2 and 3.3 directly.
![]()
Appendix 1 - FORMAT OF THE MESSAGES SENT OUT BY THE SHIPS – (MSC/Circ.622/Rev.1, appendix 3)
Report I - Initial message - Piracy/armed robbery attack alert
1 Ships name and call sign, IMO number. INMARSAT IDs (plus ocean region code) and MMSI
MAYDAY/DISTRESS ALERT
URGENCY SIGNAL
PIRACY/ARMED ROBBERY ATTACK
2 Ship’s position (and time of position UTC) - Latitude, Longitude, Course, Speed, KTS
3 Nature of event - Note: It is expected that this message will be a Distress Message because the ship or persons will be in grave or imminent danger when under attack. Where this is not the case, the word MAYDAY/DISTRESS ALERT is to be omitted.
Use of distress priority (3) in the INMARSAT system will not require MAYDAY/ DISTRESS ALERT to be included.
Report 2 - Follow-up report - Piracy/armed robbery attack alert
1 Ship’s name and call sign, IMO number
2 Reference initial PIRACY/ARMED ROBBERY ALERT
3 Position of incident – Latitude, Longitude, Name of the area
4 Details of incident, e.g.:
While sailing, at anchor or at berth?
Method of attack
Description/number of suspect craft
Number and brief description of pirates/robbers
What kind of weapons did the pirates/robbers carry ?
Any other information (e.g. language spoken)
Injuries to crew and passengers
Damage to ship (Which part of the ship was attacked?)
Brief details of stolen property/cargo
Action taken by the master and crew
Was incident reported to the coastal authority and to whom?
Action taken by the Coastal State
5 Last observed movements of pirate/suspect craft, e.g.: Date/time/course/position/speed
6 Assistance required
7 Preferred communications with reporting ship. e.g.: Appropriate Coast Radio Station, HF/ME/VHF, INMARSAT IDs (plus ocean region code), MMSI
8 Date/time of report (UTC)
![]()
ADVICE TO BE ISSUED TO MASTERS OR CREWS IN THE EVENT OF ATTACK OR THE THREAT OF ATTACK (MSC/Circ .967 APPENDIX 2) - (Extracts from the "Decalogue of Safety" (MSC/Circ.623/Rev.l. appendix 5))
In case of an assault:
I do not hesitate to sound the ship’s general alarm in case of a threat of assault:
II try to keep adequate lighting to permanently dazzle the opponents, in case of an attempt by strangers to climb the ship’s side:
Ill raise the alarm, by VHF - channel 16, to the ships in the area and to the permanent watch system of the authorities ashore (cite the existing structure in the port). The efficiency of assistance by the security forces depends on an early alarm:
IV sound the alarm with intermittent blasts on the siren and use visual alarms with floodlights and signaling rockets:
V if appropriate, to protect the lives of those onboard, use measures to repel the boarding by employing powerful floodlights for dazzling the aggressors or using jets of water or signaling rockets against the areas of boarding: and
VI do not attempt any heroic acts."
![]()
IMO GUIDANCE FOR THE USE OF RADIO SIGNALS BY SHIPS UNDER ATTACK OR THREAT OF ATTACK FROM PIRATES OR ARMED ROBBERS
"Piracy/armed robbery attack" is a category of distress message for all classes of DSC equipment. INMARSAT has added a piracy message to the INMARSAT-C menu for the GMDSS.
The International Maritime Organization (IMO) has issued the following guidance for the use of radio signals by ships under attack or threat of attack from pirates or armed robbers:-
"There are two distinct phases to an attack by pirates or armed robbers, either:
i) the pirates are detected by shipboard personnel prior to boarding of the ship; or
ii) the pirates board unnoticed, taking hostages and making threats of violence/death to the ship's crew. At this stage, they normally order the ship not to make any radio transmission and reinforce this with further threats of violence.
Pirates Detected Prior to Boarding of the Ship
Providing the ship has not been ordered by the pirates to maintain radio silence, contact should immediately be made with ships in the vicinity and shore authorities by sending a piracy/armed robbery attack message through INMARSAT or on an available DSC or other distress and safety frequency. Other methods to make the pirates aware that they have been detected should also be used such as those outlined in the International Chamber of Shipping’s publication entitled "Pirates and Armed Robbers - A Masters' Guide".
Pirates Board Unnoticed
When a ship is ordered by pirates/armed robbers not to make any form of transmission informing shore authorities of the attack, and complying with the provisions of the paragraph above may result in physical violence/death to the crew, any such order should be complied with as the pirates may carry equipment capable of detecting all radio signals, including satellite communications.