Port state control: preparing for the inspection nobody scheduled

An internal audit is something you schedule. A port state control inspection is something that happens to you. An officer boards while cargo is working, asks for a document, and the answer is either in front of them within a few minutes or it is a finding. Nothing about the vessel changed between those two moments; only who was asking.

That asymmetry is what makes inspection readiness an operational problem rather than a paperwork one. You cannot prepare for a specific date, so the only workable position is to be in a state where any date would have been fine.

The crew-documentation checklist

This covers the paperwork half of an inspection — the part that produces avoidable findings. It does not cover hull, machinery, equipment or operational drills, which are a different discipline and not ours to advise on. Run through it before you need it, not when an officer is already aboard.

Per seafarer

• Every certificate the role requires is held, and held against this person's record rather than a shared folder.
• Each one is valid through the end of the voyage, not merely valid today.
• Endorsements match this flag state and this vessel type, not a previous assignment.
• Medical fitness is current and its expiry is tracked like any other certificate.
• The role the person is actually performing is the role their certification covers, including after any mid-voyage reshuffle.

Across the crew list

• The crew aboard reconcile against the safe manning document, by role and not only by headcount.
• Watchkeeping arrangements are covered by people whose certification permits them.
• Any temporary cover put in place during the voyage is documented, with the reason and the dates.

Hours and records

• Rest-hour records are complete, contemporaneous, and free of gaps nobody can explain.
• Training completions are filed against the individual, with the date they were completed.
• Where a record was corrected, the correction is visible as a correction rather than an overwrite.

Producing it on the day

• Everything above can be shown from onboard, with no shore connection required.
• The version aboard and the version ashore are the same version.
• One person aboard knows where each of these lives without having to ask ashore.

If any line above needs a phone call to answer, that is the one to fix first. The rest of this post is why.

What port state control actually is

Port state control is the mechanism by which the country you are visiting verifies that a foreign-flagged vessel meets international requirements. It operates through regional agreements — the Paris MoU across Europe and the North Atlantic, the Tokyo MoU across Asia-Pacific, and equivalent regimes elsewhere, with the United States Coast Guard running its own programme. The flag state sets and certifies; the port state checks.

For crew operations, that check lands on a narrow but unforgiving set of questions. Does each seafarer hold the certificates their role requires, are those certificates valid today, are the endorsements right for this flag and this vessel type, and can the manning match the safe manning document. None of that is obscure. All of it is verifiable in advance, which is exactly why a deficiency in this area is the kind an inspector considers avoidable.

"An inspector is not asking whether you own the document. They are asking whether you can produce it, in the version that is current, without leaving the room."

The findings that come from records, not from seamanship

There is a category of deficiency that has nothing to do with how well a ship is run. A certificate that expired during a long voyage. A course completed but never filed against the record. A crew member covering a role their endorsement does not extend to because a rotation shifted. A rest-hour record with a gap in it. In every case the underlying practice may have been sound and the evidence simply was not assembled.

These are the findings worth engineering out, because they are the ones fully within your control. The failure mode is almost always the same: the information exists, but it exists in several places, and nobody owned reconciling them before someone asked. We wrote about that pattern more generally in why audit readiness starts long before the audit — port state control is that argument with a stranger holding the clipboard.

Being ready is a property of the system, not the week

Readiness that depends on a pre-inspection scramble is not readiness; it is a rehearsal that happens to have been called in time. The alternative is unglamorous. One record per seafarer that carries their certificates, endorsements, training history and hours. Expiry dates that are monitored continuously and surface before they matter rather than after. A record that reads the same onboard and ashore, so the version an inspector sees is the version the operation has been running on.

That last point is the one that matters most at sea, because it is the one most likely to break. A vessel three days from coverage still has to be able to show what it holds, which is why the record has to live onboard and not only in a shore system — the reasoning is in offline-first, sync-always.

None of this eliminates inspections or guarantees a clean one. What it changes is which findings are possible. Seamanship, maintenance and judgement remain yours. The documentary half — the half that produces avoidable deficiencies — becomes a question the system can already answer on the day it is asked.

CruiseControl tracks certifications, endorsements and training against one crew record across the fleet, with expiry monitoring and an audit trail that survives a crew change. If that is the half you are currently assembling by hand, how the records are controlled and a walkthrough against your own fleet are the two useful next steps.