Commonwealth Consolidated Regulations(1) Before requesting the Secretary to approve an offshore security plan, an offshore service provider must designate, in writing, a person as security officer (an offshore service provider security officer or OSPSO ) for the service.
(2) An OSPSO may be designated by name or by reference to a position.
(3) The duties and responsibilities of an OSPSO include:
(a) conducting an initial security survey of the activities of the service provider and facilitating the completion of the security assessment for the security plan; and
(b) ensuring the development and maintenance of the security plan; and
(c) implementing the security plan; and
(d) undertaking regular security inspections of the service provider's supply base to ensure that the security measures are adequate and as effective as possible; and
(e) facilitating security plan reviews; and
(f) recommending and incorporating modifications to the security plan in order to:
(i) correct deficiencies in the plan; or
(ii) update the plan to take into account changes to the facility; and
(g) enhancing security awareness and vigilance of the service provider's personnel; and
(h) ensuring that standards for personnel with, or who have been assigned, security duties and responsibilities are met and that adequate training is provided to the personnel; and
(i) reporting to the relevant authorities, and maintaining records of, occurrences which threaten the security of the service provider; and
(j) liaising with the security officers of ships and offshore industry participants; and
(k) coordinating with security, police, fire, ambulance, medical, search and rescue services, as appropriate; and
(l) ensuring that security equipment is properly operated, inspected, tested, calibrated and maintained; and
(m) when requested by an OFSO, assisting in confirming the identity of persons intending to enter an offshore facility; and
(n) providing advice to the Secretary on the operational and safety aspects of the implementation of security and control directions; and
(o) communicating and coordinating the implementation of security and control directions.
(4) A service provider must ensure that an OSPSO:
(a) has the knowledge and ability to perform the duties of an OSPSO; and
(b) is given the training set out in the security plan for the service provider; and
(c) is a suitable person to access and handle security information; and
(d) has the authority to act on instructions received from the Secretary.