# Port Security Officer: PFSO vs CSO at a Port Call > What a port security officer does at a port call, how the PFSO and CSO roles divide, and the ISPS Level 2 paperwork a chandler, agent or yard needs before delivery. URL: https://vesselreach.si/blog/port-security-officer-pfso-vs-cso-at-a-port-call | Published: 2026-11-08 | Guide | Topic: Segment playbooks (marine services) ## At a glance - **What: What is a port security officer responsible for?** The port security officer applies the facility security plan through document checks, screening of people and goods, drills and records, with the PFSO, CSO and a Port Security Committee playing active roles. ([JPB Jurnal Patria Bahari (Politeknik Pelayaran Sorong)](https://ejournal.poltekpel-sorong.ac.id/index.php/jpb/article/view/181)) - **Who: Who holds security roles at a port call?** The Port Facility Security Officer covers the facility, the Company Security Officer covers the ship, and a Port Security Committee coordinates at port level. ([JPB Jurnal Patria Bahari (Politeknik Pelayaran Sorong)](https://ejournal.poltekpel-sorong.ac.id/index.php/jpb/article/view/181)) - **Where: Where was the ISPS Code security organisation studied?** At Cirebon port in Indonesia, where researchers evaluated how the ISPS Code was applied across organisation, procedures and supporting facilities. ([JPB Jurnal Patria Bahari (Politeknik Pelayaran Sorong)](https://ejournal.poltekpel-sorong.ac.id/index.php/jpb/article/view/181)) - **When: When did ports start reviewing the ISPS Code's fitness?** In November 2026, two decades after the Code was introduced, IAPH was reported as leading port industry efforts to keep it fit for purpose. ([Hellenic Shipping News](https://www.hellenicshippingnews.com/iaph-leads-port-efforts-to-ensure-the-isps-code-is-fit-for-the-future/)) - **Why: Why does the ISPS Code exist?** It was created after the September 2001 attacks and added to SOLAS amendments to reduce terrorism, piracy, cargo theft, stowaways, drug smuggling and money laundering. ([International Journal of Marine Engineering Innovation and Research (Sepuluh Nopember Institute of Technology)](https://doi.org/10.12962/j25481479.v9i2.20570)) - **How: How is port security work changing?** Digitalisation is reshaping it: a 2021 study found cybersecurity skills would become essential for PFSOs, and ports are testing secure connectivity for routine and crisis operations. ([The Asian Journal of Shipping and Logistics (Elsevier BV)](https://doi.org/10.1016/j.ajsl.2021.10.002)) A port security officer is the person accountable for security at a port facility, and at a port call the role splits in two: the PFSO (Port Facility Security Officer, who runs security inside the terminal or berth) and the CSO (Company Security Officer, who runs security for the shipping company ashore). Suppliers meet both before a single pallet or bunker hose crosses the gate. For a chandler, bunker supplier, port agent or repair yard, the practical question is who signs what at ISPS Level 2 (the heightened security level where additional protective measures are applied at the facility). This guide maps the roles to the stages of a port call. ## What does a port security officer actually do? The port security officer turns the facility security plan into daily checks: verifying documents, inspecting people and goods, running drills and keeping records. A 2025 study of Cirebon port in Indonesia, published in [Jurnal Patria Bahari](https://ejournal.poltekpel-sorong.ac.id/index.php/jpb/article/view/181), found the security organisation was formed as the ISPS Code requires, with active roles for the PFSO, the CSO and a Port Security Committee. The same study found document checks, screening of individuals and goods, and drills were carried out, but post-drill evaluation was not yet optimal. That gap matters to suppliers. A drill that is not evaluated rarely fixes a slow gate process, and the supplier waiting at the gate feels it first. ## PFSO vs CSO: who does what at a port call The PFSO owns the facility side; the CSO owns the ship side. They coordinate through the DoS (Declaration of Security, the agreed record of security responsibilities shared between ship and port facility). StagePFSOCSO Before arrivalConfirms facility security level and access rulesConfirms the ship security plan, level and DoS requirements At the gateScreens vehicles, people and goods against the pass listApproves who may board and what may come aboard Level 2 deliveryApplies extra measures: escorted access, restricted areas, searchConfirms additional ship-side measures and records them After the callKeeps facility records and reviews incidentsUpdates the ship security records and reports to the company Both roles exist because the ISPS Code was written into SOLAS after the 2001 attacks, to reduce terrorism, piracy, cargo theft, stowaways and drug smuggling. A 2024 risk analysis of a port facility in the [International Journal of Marine Engineering Innovation and Research](https://doi.org/10.12962/j25481479.v9i2.20570) sets out that purpose and rates facility security risk against the Code. ## What paperwork does a supplier need at ISPS Level 2? At Level 2 the facility applies extra protective measures, so the supplier's paperwork has to be complete before the truck reaches the gate, not at it. Expect the PFSO's team to ask for: - Company and driver identification, matched to a pre-registered access list. - The delivery or service order naming the vessel, berth and ETA (Estimated Time of Arrival, the expected arrival time at the port). - Vehicle and cargo details, so goods can be checked against what was declared. - Any escort or restricted-area authorisation the facility requires at the higher level. On the ship side, the CSO's plan governs who boards and what is allowed on board. The agent usually carries the coordination, which is why strong agent relationships shorten the gate queue. ## Who signs what The PFSO signs for the facility's security measures; the CSO signs for the ship's. The DoS records the split where ship and facility interact. 1. The agent confirms the arrival and the security level with both sides. 2. The PFSO approves facility access and any Level 2 measures. 3. The CSO approves boarding and delivery on board. 4. Both keep records; the supplier keeps its own copy of the approved access and order. The Code itself is under review. According to [Hellenic Shipping News](https://www.hellenicshippingnews.com/iaph-leads-port-efforts-to-ensure-the-isps-code-is-fit-for-the-future/) (November 2026), the International Association of Ports and Harbors is leading port industry efforts to keep the ISPS Code fit for purpose two decades after its introduction. Digitalisation is part of that push: IAPH and the International Port Community Systems Association signed an MoU on digitalisation, interoperability, security and resilience at the 2026 IAPH World Ports Conference, [Hellenic Shipping News](https://www.hellenicshippingnews.com/iaph-and-ipcsa-sign-mou-to-deepen-collaboration-on-digitalisation-interoperability-security-and-resilience/) reports (November 2026). ## Where the role is heading Port security work is becoming more technical. A 2021 study in [The Asian Journal of Shipping and Logistics](https://doi.org/10.1016/j.ajsl.2021.10.002), based on 73 responses from Thai container ports, found cybersecurity knowledge and skills would become essential for PFSOs as port digitalisation and automation advance, with the role moving towards a technically oriented specialist. Two current examples show why. The Port of Riga is becoming a testbed for resilient maritime connectivity under an MoU between technical port services provider LVR Flote and HARDMODE, according to [Hellenic Shipping News](https://www.hellenicshippingnews.com/the-port-of-riga-to-become-a-testbed-for-resilient-maritime-connectivity-as-lvr-flote-and-hardmode-sign-mou/) (October 2026). And paperwork, not cranes, is a recurring cause of port cargo clearance delay, as [Marine Insight](https://www.marineinsight.com/why-port-cargo-clearance-gets-delayed-by-paperwork-not-cranes-how-to-fix-it/?utm_source=rss&utm_medium=rss&utm_campaign=why-port-cargo-clearance-gets-delayed-by-paperwork-not-cranes-how-to-fix-it) sets out (October 2026). Security level also follows the ship's voyage history. According to [Splash247](https://splash247.com/us-tightens-entry-rules-for-ships-calling-at-somali-ports/) (October 2026), the US Coast Guard imposed additional security conditions on commercial vessels arriving in American waters after calling at Somali ports. ## How VesselReach helps Security paperwork runs on the ETA, so the earlier a supplier knows a vessel is coming, the earlier the access list, order and escort request can be agreed with the PFSO and CSO. - **Vessel intelligence** shows vessels near your chosen ports and scheduled arrivals, which means your team starts the Level 2 paperwork before the ship berths. - **Decision-maker discovery** finds operations, fleet and marine superintendent roles by name, which means the request reaches the person who signs for the ship rather than a general inbox. - **Multichannel outreach** runs staged email, WhatsApp and phone contact, which means follow-ups on a delayed ETA happen without a manual chase. Book a VesselReach demo to see the workflow on your own ports, then test it in the 10-day free trial offered after the meeting. ## Frequently asked questions ### What is the difference between a PFSO and a CSO? The PFSO is the Port Facility Security Officer and runs security inside the terminal or berth. The CSO is the Company Security Officer and runs security for the shipping company ashore, including the ship security plan and boarding approvals. They coordinate through the Declaration of Security. ([JPB Jurnal Patria Bahari (Politeknik Pelayaran Sorong)](https://ejournal.poltekpel-sorong.ac.id/index.php/jpb/article/view/181)) ### What does a supplier need to get through the gate at ISPS Level 2? Pre-registered company and driver identification, a delivery or service order naming the vessel, berth and ETA, vehicle and cargo details for checking, and any escort or restricted-area authorisation the facility requires at the higher level. ### Why was the ISPS Code created? The ISPS Code was created after the September 2001 attacks in the United States and written into SOLAS amendments. Its function is to minimise terrorism, piracy, cargo theft, stowaways, drug smuggling and money laundering at ports and on ships. ([International Journal of Marine Engineering Innovation and Research (Sepuluh Nopember Institute of Technology)](https://doi.org/10.12962/j25481479.v9i2.20570)) ### Is the PFSO role changing? Yes. A 2021 study in The Asian Journal of Shipping and Logistics, based on 73 responses from Thai container ports, found cybersecurity knowledge would become essential for PFSOs as ports digitalise, moving the role towards a technically oriented specialist. ([The Asian Journal of Shipping and Logistics (Elsevier BV)](https://doi.org/10.1016/j.ajsl.2021.10.002)) ### How can a maritime supplier act on security requirements before the vessel arrives? Start from the ETA. VesselReach shows vessels near your selected ports and scheduled arrivals, identifies the operations and fleet roles behind each vessel, and runs staged email, WhatsApp and phone outreach so the paperwork is agreed before berthing. ## Sources 1. [EVALUASI PENERAPAN INTERNATIONAL SHIP AND PORT FACILITY SECURITY (ISPS) CODE DI PELABUHAN CIREBON](https://ejournal.poltekpel-sorong.ac.id/index.php/jpb/article/view/181), JPB Jurnal Patria Bahari (Politeknik Pelayaran Sorong), 2025-05-27 2. [Risk Analysis of Port Facility Security Based on the International Ship and Port Facility Security Code (ISPS CODE)](https://doi.org/10.12962/j25481479.v9i2.20570), International Journal of Marine Engineering Innovation and Research (Sepuluh Nopember Institute of Technology), 2024-06-14 3. [Cybersecurity knowledge and skills for port facility security officers of international seaports: Perspectives of IT and security personnel](https://doi.org/10.1016/j.ajsl.2021.10.002), The Asian Journal of Shipping and Logistics (Elsevier BV), 2021-11-10 4. [IAPH leads port efforts to ensure the ISPS Code is fit for the future](https://www.hellenicshippingnews.com/iaph-leads-port-efforts-to-ensure-the-isps-code-is-fit-for-the-future/), Hellenic Shipping News, 2026-11-06 5. [Why Port Cargo Clearance Gets Delayed By Paperwork, Not Cranes & How to Fix It](https://www.marineinsight.com/why-port-cargo-clearance-gets-delayed-by-paperwork-not-cranes-how-to-fix-it/?utm_source=rss&utm_medium=rss&utm_campaign=why-port-cargo-clearance-gets-delayed-by-paperwork-not-cranes-how-to-fix-it), Marine Insight, 2026-10-23 6. [IAPH and IPCSA sign MoU to deepen collaboration on digitalisation, interoperability, security and resilience](https://www.hellenicshippingnews.com/iaph-and-ipcsa-sign-mou-to-deepen-collaboration-on-digitalisation-interoperability-security-and-resilience/), Hellenic Shipping News, 2026-11-04 7. [The Port of Riga to become a testbed for resilient maritime connectivity, as LVR Flote and HARDMODE sign MoU](https://www.hellenicshippingnews.com/the-port-of-riga-to-become-a-testbed-for-resilient-maritime-connectivity-as-lvr-flote-and-hardmode-sign-mou/), Hellenic Shipping News, 2026-10-22 8. [US tightens entry rules for ships calling at Somali ports](https://splash247.com/us-tightens-entry-rules-for-ships-calling-at-somali-ports/), Splash247, 2026-10-29 ## More on this topic A port security officer keeps a port facility secure, and at a port call the job splits between the PFSO, who runs security inside the terminal, and the CSO, who runs it for the shipping company ashore. For a chandler, bunker supplier, agent or repair yard, the port security officer is the person whose gate rules decide whether the delivery reaches the vessel on time. At ISPS Level 2 the facility adds extra measures, so identification, the order naming the vessel and ETA, cargo details and any escort authorisation should be agreed before the truck arrives. The PFSO signs for the facility, the CSO for the ship, and the Declaration of Security records the split. Knowing the vessel's ETA early is what makes that paperwork possible. --- VesselReach, built by CatalystIQ. CatalystIQ Data Classification and Analysis Services, Al Qusais, Dubai, P.O. Box 129882, United Arab Emirates. info@catalystiq.ae, +971 58 599 7894. Book a demo: https://vesselreach.si/#demo. Pricing: contact us for a quote (https://vesselreach.si/pricing).