identify all areas which are relevant to port security, F2thus also identifying the boundaries to be defined, for the purposes of the definition in these Regulations of “port”, by the Secretary of State in F10regulations made under regulation 2. This includes port facilities which are already covered by the EC Regulation and whose risk assessment will serve as a basis;

identify security issues deriving from the interface between port facility and other port security measures;

identify which F3port facility locality personnel will be subject to background checks and/or security vetting because of their involvement in high-risk areas;

subdivide, if useful, the F4port facility locality according to the likelihood of security incidents. Areas are to be judged not only upon their direct profile as a potential target, but also upon their potential role of passage when neighbouring areas are targeted;

identifying risk variations, e.g. those based on seasonality;

identify the specific characteristics of each sub-area, such as location, accesses, power supply, communication system, ownership and users and other elements considered security-relevant;

identify potential threat scenarios for the F5port facility locality. The entire F5port facility locality or specific parts of its infrastructure, cargo, baggage, people or transport equipment within the F5port facility locality can be a direct target of an identified threat;

identify the specific consequences of a threat scenario. Consequences can impact on one or more sub-areas. Both direct and indirect consequences must be identified. Special attention must be given to the risk of human casualties;

identify the possibility of cluster effects of security incidents;

identify the vulnerabilities of each sub-area;

identify all organisational aspects relevant to F6overall security of the port facility locality, including the division of all security-related authorities, existing rules and procedures;

identify vulnerabilities of F7the overarching security of the port facility locality related to organisational, legislative and procedural aspects;

identify measures, procedures and actions aimed at reducing critical vulnerabilities. Specific attention must be paid to the need for, and the means of, access control or restrictions to F8the entire port facility locality or to specific parts of the port facility locality, including identification of passengers, port employees or other workers, visitors and ship crews, area or activity monitoring requirements, cargo and luggage control. Measures, procedures and actions must be consistent with the perceived risk, F9which may vary between port facility locality areas;

identify how measures, procedures and actions will be reinforced in the event of an increase of security level;

identify specific requirements for dealing with established security concerns, such as ‘suspect’ cargo, luggage, bunker, provisions or persons, unknown parcels and known dangers (e.g. bomb). These requirements must analyse desirability conditions for clearing the risk either where it is encountered or after moving it to a secure area;

identify measures, procedures and actions aimed at limiting and mitigating consequences;

identify task divisions allowing for the appropriate and correct implementation of the measures, procedures and actions identified;

pay specific attention, where appropriate, to the relationship with other security plans (e.g. port facility security plans) and other existing security measures. Attention must also be paid to the relationship with other response plans (e.g. oil spill response plan, port contingency plan, medical intervention plan, nuclear disaster plan, etc);

identify communication requirements for implementation of the measures and procedures;

pay specific attention to measures to protect security-sensitive information from disclosure; and

identify the need-to-know requirements of all those directly involved as well as, where appropriate, the general public.