This isn't another lesson to read — it's the assembly manual. Everything from the ISM Code's history in Lesson 1 through the recurring findings in Lesson 9 comes together here as one implementation plan: a phased timeline, a 30/60/90-day roadmap, a RACI matrix, and a readiness checklist you can start applying to your own company today.
What You'll Learn in This Lesson
- The seven-phase implementation timeline, from gap assessment to continual improvement
- A concrete 30/60/90-day roadmap with deliverables and KPIs
- Who's actually responsible for what, using a RACI matrix across five roles
- A full readiness checklist spanning every phase
- The most common mistakes companies make when implementing the ISM Code, and how to avoid them
The Seven-Phase Implementation Timeline
Notice the timeline doesn't end at Certification Audit — Phase 7 loops back into ongoing operation, exactly per Lesson 8's PDCA cycle. A company that treats Phase 6 as the finish line has misunderstood what the ISM Code was designed to be from Lesson 1 onward: an ongoing system, not a one-time achievement.
30 / 60 / 90-Day Roadmap
| Window | Priority Actions | Deliverables | Responsible | Success KPI |
|---|---|---|---|---|
| Days 1-30 | Gap assessment against all six functional requirements (Lesson 2) | Gap Assessment Report | DPA | 100% of SMS elements assessed |
| Days 31-60 | SMS documentation built or revised; Manual → Procedure → Form levels aligned | Draft SMS Manual | DPA + Department Heads | All required procedures drafted |
| Days 61-90 | Crew training rollout; first internal audit scheduled | Training Records; Internal Audit Plan | Master + DPA | 100% crew briefed; audit date confirmed |
Role Matrix (RACI)
R = Responsible · A = Accountable · C = Consulted · I = Informed
| Activity | Company | DPA | Master | Dept. Heads | Crew |
|---|---|---|---|---|---|
| SMS Development | A | R | C | C | I |
| Internal Audit | I | A | C | R | I |
| Management Review | R | A | C | I | I |
| Certification Audit | A | R | R | C | C |
| Continual Improvement | A | R | C | C | R |
Notice the Company holds Accountable, not Responsible, for most activities — accountability sits at the top per the "Company" definition from Lesson 1, but the actual Responsible work is distributed to the DPA, Master, and Department Heads who are positioned to do it. Crew hold Responsible only for Continual Improvement, reflecting Lesson 8's point that crew suggestions are a genuine improvement input, not just a passive audience for policy.
Download the ISM Implementation Roadmap (PDF)
The complete seven-phase timeline, 30/60/90-day plan, and RACI matrix from this lesson, ready to adapt for your company.
We'll also send you one maritime compliance update per week. Unsubscribe anytime.
Implementation Readiness Checklist
Organised by phase. Use this to track progress as you implement, or self-audit an existing SMS.
Phase 1 — Gap Assessment
- Current documentation reviewed against all six ISM functional requirements
- Existing certificates (DOC/SMC/Interim) status confirmed
- Fleet-wide gap assessment report completed
- Gaps prioritised by risk, not just ease of fixing
Phase 2 — SMS Development
- Safety and environmental policy drafted and signed by top management
- Manual, Procedure, Form, and Record templates aligned (Lesson 2)
- DPA formally designated with documented direct access to top management
- Document control and revision numbering system established
Phase 3 — Implementation
- All crew briefed on SMS content relevant to their specific role
- Permit-to-work and risk assessment procedures actively in use
- Near-miss and non-conformity reporting channels active on board
- Emergency response drills scheduled and first round completed
Phase 4 — Internal Audit
- Internal auditors trained and independent of areas they'll audit
- First internal audit conducted within 12 months of implementation start
- All findings classified per Lesson 4 (Observation / NC / Major NC)
- Corrective actions assigned with named owners and deadlines
Phase 5 — Management Review
- First Management Review conducted, covering all required inputs (Lesson 7)
- Master's Reviews genuinely feeding into the Management Review
- Recorded decisions and assigned actions from the review, not just discussion
Phase 6 — Certification Audit
- 30-day readiness countdown completed (Lesson 6)
- All evidence categories from Lesson 5 confirmed present and current
- Crew interview readiness confirmed across all rank groupings
Phase 7 — Continual Improvement
- KPI dashboard active and reviewed on a defined schedule
- PDCA cycle formally applied to at least one post-certification finding
- Second Management Review scheduled before it's needed, not reactively
Common Implementation Mistakes
| Mistake | Impact | How to Avoid It |
|---|---|---|
| Treating certification as the finish line | SMS quality decays until the next external audit forces a scramble | Build Phase 7 into the plan from day one, not as an afterthought |
| Copying a generic SMS template unchanged | Procedures don't match actual operations, generating Non-Conformities | Adapt every procedure to the company's real vessel types and trades |
| Appointing a DPA with conflicting operational duties | Independence is compromised, undermining Section 4's purpose | Keep the DPA role structurally separate from operational management |
| Skipping root cause analysis under time pressure | The same findings recur at the next audit cycle | Apply the 5 Whys method from Lesson 4 before closing any finding |
Interactive: ISM Roadmap Builder
Answer four questions for a tailored starting point.
Ready to Implement, But Not Sure Where to Start?
Talk to an IMT compliance advisor about a guided ISM Code implementation programme for your company.
Contact an ExpertGet Certified in ISM Internal Auditing
IMT's ISM Internal Auditor Course prepares you to lead implementation, run internal audits, and manage certification from end to end.
View the Course Talk to an AdvisorDownload Center
Everything from this article, in a format you can print, share, or file.
Frequently Asked Questions
How long does full ISM implementation typically take?
The 30/60/90-day roadmap in this lesson covers the initial build-out; most companies then run at least one internal audit cycle (up to 12 months) before their first certification audit.
Who is Accountable vs Responsible in a RACI matrix?
Accountable means ultimate ownership of the outcome; Responsible means the party actually doing the work. The Company is typically Accountable while the DPA, Master, or Department Heads are Responsible.
Does implementation end once certification is achieved?
No — Phase 7, Continual Improvement, is a permanent, ongoing phase, not a final step. Treating certification as the finish line is one of the most common implementation mistakes.
What's the most common reason implementation stalls?
Copying a generic SMS template without adapting it to the company's actual vessel types and trades, which generates avoidable Non-Conformities later.
Is the ISM Roadmap Builder an official implementation plan?
No — it's a starting-point tool to help orient a new implementation; the 30/60/90-day roadmap and readiness checklist provide the fuller detail.
Test Your Knowledge
5 questions · pass with 4/5 to unlock your Complete ISM Implementation Roadmap certificate.
Congratulations!
Badge Earned — Complete ISM Implementation Roadmap